3 matches found
CVE-2019-10219
The CVE-2019-10219 entry affects Hibernate Validator: SafeHtml validator annotation fails to sanitize HTML comments/instructions, enabling XSS in affected code paths. Affected CP4S versions are 1.7.2.0, 1.8.0.0, and 1.8.1.0. Remediation is to upgrade to Cloud Pak for Security 1.9.0.0 per IBM guid...
CVE-2023-21893
CVE-2023-21893 affects the Oracle Data Provider for .NET component of Oracle Database Server (19c and 21c). Root cause: vulnerability in the DP.NET component enabling takeover with network access via TCPS; exploitation requires user interaction (UI:R) and can lead to complete compromise. Remediat...
CVE-2022-21393
CVE-2022-21393 affects Oracle Database Server Java VM component. Affects 12.1.0.2, 12.2.0.1, 19c, and 21c. A low-privileged attacker with Create Procedure privilege and network access via Oracle Net can compromise the Java VM, enabling a partial denial of service. Root cause per sources is an inp...