CVE-2022-23307
Published Jan 18, 2022CVE-2020-9493 identified a deserialization issue that was present in Apache Chainsaw. Prior to Chainsaw V2.0 Chainsaw was a component of Apache Log4j 1.2.x where the same issue ex…
Vendor/product archive
oracle / advanced_supply_chain_planning CVEs
Beta · best-effort6 CVEs tagged to oracle / advanced_supply_chain_planning — 3 Critical, 3 High, 0 Medium, 0 Low, 0 Unrated.
CVE-2022-23305
Published Jan 18, 2022By design, the JDBCAppender in Log4j 1.2.x accepts an SQL statement as a configuration parameter where the values to be inserted are converters from PatternLayout. The message con…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2022-23302
Published Jan 18, 2022JMSSink in all versions of Log4j 1.x is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration or if the configuration refer…
- evidence mentions
- 1
- Buzz score
- 11.9
CVE-2021-4104
Published Dec 14, 2021JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration. The attacker can provide TopicBindingNam…
- evidence mentions
- 11
- Buzz score
- 39.4
CVE-2021-2253
Published Apr 22, 2021Vulnerability in the Oracle Advanced Supply Chain Planning product of Oracle Supply Chain (component: Core). Supported versions that are affected are 12.1 and 12.2. Easily exploit…
CVE-2016-5599
Published Oct 25, 2016Unspecified vulnerability in the Oracle Advanced Supply Chain Planning component in Oracle Supply Chain Products Suite 12.2.3 through 12.2.5 allows remote attackers to affect conf…
Showing 1-6 of 6 CVEsPage 1 of 1