Service Bus@12.1.3.0.0 Security Vulnerabilities and Issues — Service Bus@12.1.3.0.0 CVE List

Lucene search

OracleService Bus12.1.3.0.0

4 matches found

CVE•added 2018/01/18 11:29 p.m.•2397 views

CVE-2015-9251

jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.

6.1CVSS6.3AI score0.11238EPSS

CVE•added 2019/04/20 12:29 a.m.•2193 views

CVE-2019-11358

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable proto property, it could extend the native Object.prototype.

6.1CVSS6.4AI score0.02394EPSS

CVE•added 2017/04/24 7:59 p.m.•43 views

CVE-2017-3507

Vulnerability in the Oracle Service Bus component of Oracle Fusion Middleware (subcomponent: Web Console Design). Supported versions that are affected are 12.1.3.0.0, 12.2.1.0.0, 12.2.1.1.0 and 12.2.1.2.0. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HT...

7.5CVSS6.5AI score0.00792EPSS

CVE•added 2019/04/23 7:32 p.m.•41 views

CVE-2019-2576

Vulnerability in the Oracle Service Bus component of Oracle Fusion Middleware (subcomponent: Web Container). Supported versions that are affected are 11.1.1.9.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Or...

5.3CVSS4.8AI score0.02494EPSS