oracle / global_lifecycle_management_opatchauto CVEs

Beta · best-effort

3 CVEs tagged to oracle / global_lifecycle_management_opatchauto — 2 Critical, 0 High, 1 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to oracle vendor archive

CVE-2017-7525

Published Feb 6, 2018

A deserialization flaw was discovered in the jackson-databind, versions before 2.6.7.1, 2.7.9.1 and 2.8.9, which could allow an unauthenticated user to perform code execution by s…

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2017-15095

Published Feb 6, 2018

A deserialization flaw was discovered in the jackson-databind in versions before 2.8.10 and 2.9.1, which could allow an unauthenticated user to perform code execution by sending t…

CVSS 9.8 · Critical

evidence mentions: 1
Buzz score: 11.9

Vendor/product tagsBeta · best-effort

CVE-2017-15707

Published Dec 1, 2017

In Apache Struts 2.5 to 2.5.14, the REST Plugin is using an outdated JSON-lib library which is vulnerable and allow perform a DoS attack using malicious request with specially cra…

CVSS 6.2 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-3 of 3 CVEsPage 1 of 1