io.undertow:undertow-servlet (1.0.0.cr4), io.undertow:undertow-websockets-jsr (1.0.0.cr4) potentially affected by CVE-2020-27782 via io.undertow:undertow-core (1.0.0.cr4)

io.undertow:undertow-core MAVEN version 1.0.0.cr4 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.cr4 - io.undertow:undertow-websockets-jsr 1.0.0.cr4 Source cves:...

io.undertow:undertow-servlet (1.3.30.final), io.undertow:undertow-websockets-jsr (1.3.30.final) +6 more potentially affected by CVE-2020-27782 via io.undertow:undertow-core (1.3.30.final)

io.undertow:undertow-core MAVEN version 1.3.30.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.3.30.final - io.undertow:undertow-websockets-jsr 1.3.30.final -...

io.undertow:undertow-http2-test-suite (1.3.0.beta12), io.undertow:undertow-servlet (1.3.0.beta12) +1 more potentially affected by CVE-2020-27782 via io.undertow:undertow-core (1.3.0.beta12)

io.undertow:undertow-core MAVEN version 1.3.0.beta12 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.3.0.beta12 - io.undertow:undertow-servlet 1.3.0.beta12 -...

io.undertow:undertow-servlet (1.0.0.beta3), io.undertow:undertow-websockets-jsr (1.0.0.beta3) +31 more potentially affected by CVE-2020-27782 via io.undertow:undertow-core (1.0.0.beta3)

io.undertow:undertow-core MAVEN version 1.0.0.beta3 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.beta3 - io.undertow:undertow-websockets-jsr 1.0.0.beta3 -...

io.undertow:undertow-servlet (1.0.0.beta21), io.undertow:undertow-websockets-jsr (1.0.0.beta21) +1 more potentially affected by CVE-2020-27782 via io.undertow:undertow-core (1.0.0.beta21)

io.undertow:undertow-core MAVEN version 1.0.0.beta21 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.beta21 - io.undertow:undertow-websockets-jsr 1.0.0.beta21 -...

io.undertow:undertow-servlet (1.1.0.beta6), io.undertow:undertow-websockets-jsr (1.1.0.beta6) +1 more potentially affected by CVE-2020-27782 via io.undertow:undertow-core (1.1.0.beta6)

io.undertow:undertow-core MAVEN version 1.1.0.beta6 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.1.0.beta6 - io.undertow:undertow-websockets-jsr 1.1.0.beta6 -...

io.undertow:undertow-http2-test-suite (1.3.0.beta1), io.undertow:undertow-servlet (1.3.0.beta1) +2 more potentially affected by CVE-2020-27782 via io.undertow:undertow-core (1.3.0.beta1)

io.undertow:undertow-core MAVEN version 1.3.0.beta1 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.3.0.beta1 - io.undertow:undertow-servlet 1.3.0.beta1 -...

io.undertow:undertow-http2-test-suite (1.2.1.final), io.undertow:undertow-servlet (1.2.1.final) +1 more potentially affected by CVE-2020-27782 via io.undertow:undertow-core (1.2.1.final)

io.undertow:undertow-core MAVEN version 1.2.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.2.1.final - io.undertow:undertow-servlet 1.2.1.final -...

io.undertow:undertow-servlet (1.0.0.alpha5), io.undertow:undertow-websockets-jsr (1.0.0.alpha5) potentially affected by CVE-2020-27782 via io.undertow:undertow-core (1.0.0.alpha5)

io.undertow:undertow-core MAVEN version 1.0.0.alpha5 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.alpha5 - io.undertow:undertow-websockets-jsr 1.0.0.alpha5 Source...

io.undertow:undertow-servlet (1.0.0.beta32), io.undertow:undertow-websockets-jsr (1.0.0.beta32) potentially affected by CVE-2020-27782 via io.undertow:undertow-core (1.0.0.beta32)

io.undertow:undertow-core MAVEN version 1.0.0.beta32 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.0.beta32 - io.undertow:undertow-websockets-jsr 1.0.0.beta32 Source...

io.undertow:undertow-http2-test-suite (1.3.0.beta11), io.undertow:undertow-servlet (1.3.0.beta11) +20 more potentially affected by CVE-2020-27782 via io.undertow:undertow-core (1.3.0.beta11)

io.undertow:undertow-core MAVEN version 1.3.0.beta11 is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-http2-test-suite 1.3.0.beta11 - io.undertow:undertow-servlet 1.3.0.beta11 -...

io.undertow:undertow-servlet (1.0.7.final), io.undertow:undertow-websockets-jsr (1.0.7.final) potentially affected by CVE-2020-27782 via io.undertow:undertow-core (1.0.7.final)

io.undertow:undertow-core MAVEN version 1.0.7.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.undertow:undertow-servlet 1.0.7.final - io.undertow:undertow-websockets-jsr 1.0.7.final Source cves:...

openSUSE: Security Advisory for log4j (openSUSE-SU-2021:1601-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Mageia: Security Advisory (MGASA-2018-0149)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle E-Business Suite (Jan 2022 CPU)

The versions of Oracle E-Business Suite installed on the remote host are affected by multiple vulnerabilities as referenced in the January 2022 CPU advisory. - Vulnerability in the Oracle Sourcing product of Oracle E-Business Suite component: Intelligence, RFx Creation. Supported versions that ar...

Design/Logic Flaw

Vulnerability in the Oracle Configurator product of Oracle E-Business Suite component: UI Servlet. Supported versions that are affected are 12.2.3-12.2.11. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Configurator. Successful...

CVE-2022-21255

Vulnerability in the Oracle Configurator product of Oracle E-Business Suite component: UI Servlet. Supported versions that are affected are 12.2.3-12.2.11. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Configurator. Successful...

CVE-2022-21255

CVE-2022-21255 affects Oracle E-Business Suite Configurator (UI Servlet). Affected versions are 12.2.3–12.2.11. The vulnerability allows a network-accessible, low-privilege attacker to exploit via HTTP to compromise data, enabling unauthorized creation/deletion/modification of Oracle Configurator...

CVE-2022-21255: Undefined Security Weakness

Vulnerability in the Oracle Configurator product of Oracle E-Business Suite component: UI Servlet. Supported versions that are affected are 12.2.3-12.2.11. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Configurator. Successful...

PT-2022-2107

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.2.3 through 12.2.11 Description The issue is related to insufficient input validation in the UI Servlet component of the Oracle Configurator product. This allows a low-privileged attacker with network access...