Lucene search
+L

382 matches found

CVE
CVE
added 2022/10/18 12:00 a.m.67 views

CVE-2022-21622

The CVE-2022-21622 entry affects Oracle Fusion Middleware’s Oracle SOA Suite (Adapters) with affected versions 12.2.1.3.0 and 12.2.1.4.0. The issue enables an unauthenticated attacker, over the network via HTTP, to compromise data in the Oracle SOA Suite, potentially allowing unauthorized creatio...

7.5CVSS7.4AI score0.00707EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2022/10/18 12:00 a.m.5 views

PT-2022-14990 · Oracle · Oracle Soa Suite

Name of the Vulnerable Software and Affected Versions: Oracle SOA Suite versions 12.2.1.3.0 through 12.2.1.4.0 Description: The issue allows an unauthenticated attacker with network access via HTTP to compromise Oracle SOA Suite. Successful attacks can result in unauthorized creation, deletion, o...

7.5CVSS7.8AI score0.00707EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2022/10/18 12:00 a.m.4 views

CVE-2022-21622

Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware component: Adapters. Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle SOA Suite. Successf...

7.5CVSS5.4AI score0.00707EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/08/31 12:00 a.m.45 views

IBM DataPower Gateway Cross-Site Request Forgery Vulnerability

IBM DataPower Gateway is a set of security and integration platforms from IBM USA designed specifically for mobile, cloud, application programming interface API, web, service-oriented architecture SOA, B2B, and cloud workloads. The platform protects, integrates, and optimizes access across channe...

8.8CVSS4.2AI score0.00416EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2022/08/08 12:00 a.m.12 views

The vulnerability of the Fabric Layer component in the software package for building and deploying service-oriented architecture of Oracle SOA Suite allows a attacker to gain read, modify, add, or delete access to data.

The vulnerability of the Fabric Layer component in the software package for building and deploying service-oriented architecture of Oracle SOA Suite is related to insufficient validation of input data. Exploiting this vulnerability may allow an attacker to gain read, modify, add, or delete access...

7.8CVSS6.6AI score0.00774EPSS
SaveExploits0References2Affected Software1
NCSC
NCSC
added 2022/07/20 12:00 a.m.19 views

Vulnerabilities fixed in Oracle Fusion Middleware

Oracle has fixed vulnerabilities in the following Fusion Middleware products: BI Publisher Business Intelligence Enterprise Edition Coherence Global Lifecycle Management NextGen OUI Framework HTTP Server Managed File Transfer Middleware Common Libraries and Tools Security Service SOA Suite...

9.8CVSS8.5AI score0.99677EPSS
SaveExploits129
OSV
OSV
added 2022/07/19 10:15 p.m.7 views

CVE-2022-21562

Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware component: Fabric Layer. Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle SOA Suite...

7.5CVSS6.7AI score0.00774EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/07/19 10:15 p.m.8 views

CVE-2022-21562

Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware component: Fabric Layer. Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle SOA Suite...

7.5CVSS6.8AI score0.00774EPSS
SaveExploits0References2Affected Software1
NVD
NVD
added 2022/07/19 10:15 p.m.26 views

CVE-2022-21562

Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware component: Fabric Layer. Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle SOA Suite...

7.5CVSS0.00774EPSS
SaveExploits0References1
Prion
Prion
added 2022/07/19 10:15 p.m.22 views

Design/Logic Flaw

Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware component: Fabric Layer. Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle SOA Suite...

5CVSS7.3AI score0.00774EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2022/07/19 9:08 p.m.72 views

CVE-2022-21562

CVE-2022-21562 affects Oracle Fusion Middleware’s Oracle SOA Suite (Fabric Layer). Affected are 12.2.1.3.0 and 12.2.1.4.0. The vulnerability enables unauthenticated network access over HTTP to compromise the SOA Suite, potentially allowing unauthorized creation, deletion or modification of data a...

7.5CVSS7.3AI score0.00774EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2022/07/19 9:08 p.m.10 views

CVE-2022-21562

Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware component: Fabric Layer. Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle SOA Suite...

7.5CVSS6.6AI score0.00774EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2022/07/19 9:08 p.m.32 views

CVE-2022-21562

Vulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware component: Fabric Layer. Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle SOA Suite...

7.5CVSS7.5AI score0.00774EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/05/20 12:00 a.m.44 views

IBM DataPower Gateway has an unspecified vulnerability

IBM DataPower Gateway is a set of security and integration platforms from IBM USA designed specifically for mobile, cloud, application programming interface API, web, service-oriented architecture SOA, B2B and cloud workloads. The platform protects, integrates, and optimizes access across channel...

7.5CVSS1.6AI score0.01462EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/05/17 12:00 a.m.52 views

IBM MQ for HPE NonStop Information Disclosure Vulnerability

IBM MQ IBM WebSphere MQ is a messaging middleware product from IBM. The product is mainly for the service-oriented architecture SOA to provide a reliable and proven messaging backbone. An information disclosure vulnerability exists in IBM MQ for HPE NonStop version 8.1.0, which can be exploited b...

5.5CVSS5AI score0.00221EPSS
SaveExploits0References1
OSV
OSV
added 2022/03/26 12:00 a.m.38 views

GHSA-PV39-QP28-4MGH Improper Restriction of XML External Entity Reference in soa-model

Soa-model is a toolkit and Java API for WSDL, WADL and XML Schema. An XML External Entity XXE vulnerability exists in versions of soa-model prior to 1.6.4 in the WSDLParser function. This issue has been fixed in version 1.6.4...

9.8CVSS9.5AI score0.01926EPSS
SaveExploits1References6
Github Security Blog
Github Security Blog
added 2022/03/26 12:00 a.m.46 views

Improper Restriction of XML External Entity Reference in soa-model

Soa-model is a toolkit and Java API for WSDL, WADL and XML Schema. An XML External Entity XXE vulnerability exists in versions of soa-model prior to 1.6.4 in the WSDLParser function. This issue has been fixed in version 1.6.4...

9.8CVSS3.9AI score0.01926EPSS
SaveExploits1References6Affected Software2
NVD
NVD
added 2022/03/25 4:15 p.m.11 views

CVE-2021-43090

An XML External Entity XXE vulnerability exists in soa-model before 1.6.4 in the WSDLParser function...

9.8CVSS0.01926EPSS
SaveExploits1References4
OSV
OSV
added 2022/03/25 4:15 p.m.24 views

CVE-2021-43090

An XML External Entity XXE vulnerability exists in soa-model before 1.6.4 in the WSDLParser function...

9.8CVSS9.5AI score
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2022/03/25 4:15 p.m.8 views

CVE-2021-43090

An XML External Entity XXE vulnerability exists in soa-model before 1.6.4 in the WSDLParser function...

9.8CVSS7.3AI score0.01926EPSS
SaveExploits1References5
Rows per page
Query Builder