CVE-2021-45105

Summary of CVE-2021-45105 (Log4j2) : Affected Log4j 2.x versions 2.0-alpha1 through 2.16.0 (except 2.12.3 and 2.3.1) are vulnerable to denial of service via uncontrolled recursion triggered by self-referential lookups in Thread Context Map data. The root cause is improper handling of self-referen...

CVE-2022-23302

CVE-2022-23302 affects Log4j 1.x JMSSink. TheDeserialization flaw allows remote code execution when an attacker can write to the Log4j configuration or when the configuration references an LDAP service the attacker controls. JMSSink can be triggered via a TopicConnectionFactoryBindingName to caus...

CVE-2022-23307

CVE-2022-23307 concerns a deserialization vulnerability in the Chainsaw component of Apache Log4j 1.x (Chainsaw bundled with Log4j 1.2.x). The root cause is unsafe deserialization of untrusted data via Chainsaw, allowing potential code execution. Multiple Atlassian products initially bundled Chai...

CVE-2022-23305

CVE-2022-23305 concerns Apache Log4j 1.x when configured with JDBCAppender: an SQL statement is built from a PatternLayout-converted value (notably %m), allowing an attacker to craft input to alter and potentially execute SQL. The issue is specific to Log4j 1.x if JDBCAppender is used; JDBCAppend...

CVE-2017-5645

CVE-2017-5645 affects Apache Log4j 2.x prior to 2.8.2. The vulnerability arises when using a TCP/UDP socket server to receive serialized log events from another application; a crafted binary payload can be deserialized to execute arbitrary code. The documented impact is remote code execution via ...

CVE-2020-24750

CVE-2020-24750 affects FasterXML jackson-databind 2.x prior to 2.9.10.6, where the interaction between serialization gadgets and typing is mishandled (CWE-502). This deserialization flaw could enable exploitation via untrusted data; the connected IBM/Cloudera doc confirms the CVE entry but does n...

CVE-2018-15756

CVE-2018-15756 (Spring Framework) affects Spring Web MVC/WebFlux ranges handling: the ResourceHttpRequestHandler, or returning a Resource from an annotated controller, can be abused by a crafted Range header to trigger a denial-of-service. Affected versions include Spring Framework 5.1, 5.0.x bef...

CVE-2019-0222

CVE-2019-0222 affects Apache ActiveMQ 5.0.0–5.15.8. Description: unmarshalling of a corrupt MQTT frame can cause a broker Out of Memory, rendering the broker unresponsive. Enterprise/Nessus entries in the connected docs classify this as an unpatched/vulnerable issue with no vendor patch available...

CVE-2020-24616

The CVE-2020-24616 vulnerability affects FasterXML jackson-databind 2.x prior to 2.9.10.6, arising from the interaction between serialization gadgets and typing (related to br.com.anteros.dbcp.AnterosDBCPDataSource). Root cause is unsafe deserialization via Gadget chains in Jackson Databind. Impa...

CVE-2017-10270

CVE-2017-10270 affects Oracle Fusion Middleware, specifically the Oracle Identity Manager Connector component (Microsoft Active Directory subcomponent). The vulnerable item is Oracle Identity Manager Connector version 9.1.1.5.0; the issue allows an unauthenticated attacker with local access to th...

CVE-2026-34287

CVE-2026-34287 affects Oracle Fusion Middleware > Oracle Identity Manager Connector (Core) with version 12.2.1.4.0. An unauthenticated, network-accessible attacker over HTTPS can compromise data by creating/deleting/modifying critical data or gaining complete access to Oracle Identity Manager ...

CVE-2026-46794

Technical details for CVE-2026-46794 are not publicly available in the provided documents. Monitor for updates as more information may be released.

CVE-2026-46793

Technical details are not publicly available in the provided documents. Monitor for updates from Oracle and the CVE listing for affected products, vulnerable components, and remediation guidance.

CVE-2026-34288

Oracle Fusion Middleware: Oracle Identity Manager Connector (Core) version 12.2.1.4.0 is impacted. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the Oracle Identity Manager Connector, potentially leading to unauthorized access to sensitive data. T...

CVE-2026-34290

Technical details about CVE-2026-34290 are not publicly provided in the supplied documents. Monitor for updates from Oracle and CVE records for affected product/version and remediation guidance.

CVE-2026-60535

CVE-2026-60535 affects Oracle Fusion Middleware’s Oracle Identity Manager Connector (component: PeopleSoft Applications). Affected supported versions: 12.2.1.4.0 and 14.1.2.1.0. The vulnerability allows an unauthenticated, network-accessible attacker to compromise the Oracle Identity Manager Conn...

CVE-2026-46792

Technical details about CVE-2026-46792 are not publicly available in the provided documents. Monitor Oracle security alerts and the CVE record for updates.

CVE-2026-34285

The CVE concerns Oracle Fusion Middleware, specifically the Oracle Identity Manager Connector (Core) with affected version 12.2.1.4.0. The vulnerability enables an unauthenticated attacker on a network path (HTTPS) to compromise the Oracle Identity Manager Connector, potentially leading to unauth...

CVE-2026-60532

The CVE concerns Oracle Identity Manager Connector (Oracle Fusion Middleware) for PeopleSoft Applications, affected in 12.2.1.4.0 and 14.1.2.1.0. It is exploitable over HTTP with network access by an unauthenticated attacker, potentially allowing takeover of the Oracle Identity Manager Connector ...

CVE-2026-60536

CVE-2026-60536 affects Oracle Fusion Middleware’s Oracle Identity Manager Connector (PeopleSoft Applications) in 12.2.1.4.0 and 14.1.2.1.0. The vulnerability allows unauthenticated, network-based access via HTTP to compromise the connector, potentially granting access to data across the Oracle Id...

CVE-2026-60533

The CVE-2026-60533 entry affects Oracle Fusion Middleware’s Oracle Identity Manager Connector (Generic Unix Connector) in versions 12.2.1.4.0 and 14.1.2.1.0. The vulnerability is exploitable by an unauthenticated attacker with access to the physical network segment connected to the host running t...

CVE-2026-60531

CVE-2026-60531 affects Oracle Identity Manager Connector (Oracle Fusion Middleware), Core component. Affected versions: 12.2.1.4.0 and 14.1.2.1.0. The issue allows a low-privilege attacker with network access over HTTP to compromise the Oracle Identity Manager Connector, with potential scope expa...

CVE-2026-60534

The CVE-2026-60534 vulnerability affects Oracle Fusion Middleware’s Oracle Identity Manager Connector (component: PeopleSoft Applications). Affected versions are 12.2.1.4.0 and 14.1.2.1.0. The issue enables a high-privilege attacker with network access via HTTP to compromise the Oracle Identity M...

CVE-2026-34286

Oracle Fusion Middleware’s Oracle Identity Manager Connector (component: Core) on version 12.2.1.4.0 is affected by CVE-2026-34286. The vulnerability allows an unauthenticated attacker with network access via HTTPS to compromise the Oracle Identity Manager Connector, potentially leading to unauth...

CVE-2026-34289

CVE-2026-34289 affects Oracle Fusion Middleware, specifically the Oracle Identity Manager Connector (component: Core) with an affected version of 12.2.1.4.0. The entry states a vulnerability that is exploitable without authentication over HTTPS by a network-accessible attacker, potentially leadin...

CVE-2026-34294

The vulnerability is in Oracle Fusion Middleware’s Oracle Identity Manager Connector (component: Microsoft Active Directory), affecting version 12.2.1.4.0. The issue allows a low-privilege, network-adjacent attacker with LDAP access to compromise the Oracle Identity Manager Connector, enabling un...

CVE-2026-60990

Oracle Fusion Middleware's Identity Manager Connector (Core component), versions 12.2.1.4.0 and 14.1.2.1.0, is affected by a CVSS 9.9 critical flaw exploitable by a low-privileged attacker over TLS, enabling full takeover with scope change. No exploit details or patch version are provided in the ...

CVE-2026-60991

Oracle Identity Manager Connector (Core component, versions 12.2.1.4.0 and 14.1.2.1.0) has an easily exploitable local vulnerability allowing low-privileged attackers to fully compromise the product; Oracle's August 2026 CPU addresses it — apply patches from https://www.oracle.com/security-alerts...

CVE-2026-60998

CVE-2026-60998 affects the Oracle Identity Manager Connector (component: Microsoft Active Directory) in Oracle Fusion Middleware, versions 12.2.1.4.0 and 14.1.2.1.0 . A high-privileged attacker with network access via LDAP can exploit this vulnerability, though it is rated as difficult to exploit...

CVE-2026-60992

Oracle Identity Manager Connector (Fusion Middleware, Core component) versions 12.2.1.4.0 and 14.1.2.1.0 are affected by a HIGH-severity (CVSS 8.1) unauthenticated remote vulnerability exploitable over TLS, potentially leading to full product takeover. Oracle has released patches in its August 20...

CVE-2026-60993

Oracle Identity Manager Connector Core component in Fusion Middleware versions 12.2.1.4.0 and 14.1.2.1.0 has a HIGH-severity (CVSS 7.5) vulnerability; an unauthenticated attacker with physical-segment access can compromise the connector, achieving full CIA impact. No patch version or exploit deta...