Show filters
86 Total Results
Displaying 1-10 of 86
Sort by:
Attacker Value
Unknown
CVE-2018-8013
Disclosure Date: May 24, 2018 (last updated November 08, 2023)
In Apache Batik 1.x before 1.10, when deserializing subclass of `AbstractDocument`, the class takes a string from the inputStream as the class name which then use it to call the no-arg constructor of the class. Fix was to check the class type before calling newInstance in deserialization.
0
Attacker Value
Unknown
CVE-2017-5645
Disclosure Date: April 17, 2017 (last updated November 08, 2023)
In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that, when deserialized, can execute arbitrary code.
0
Attacker Value
Unknown
CVE-2015-4914
Disclosure Date: October 22, 2015 (last updated October 05, 2023)
Unspecified vulnerability in the Oracle HTTP Server component in Oracle Fusion Middleware 10.1.3.5, 11.1.1.7, 11.1.1.9, 12.1.2.0, and 12.1.3.0 allows remote authenticated users to affect confidentiality via unknown vectors related to Web Listener.
0
Attacker Value
Unknown
CVE-2015-4867
Disclosure Date: October 21, 2015 (last updated October 05, 2023)
Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 10.1.3.5.1 allows remote attackers to affect integrity via unknown vectors related to Content Server, a different vulnerability than CVE-2015-4880.
0
Attacker Value
Unknown
CVE-2015-4880
Disclosure Date: October 21, 2015 (last updated October 05, 2023)
Unspecified vulnerability in the Oracle WebCenter Content component in Oracle Fusion Middleware 10.1.3.5.1 allows remote attackers to affect integrity via unknown vectors related to Content Server, a different vulnerability than CVE-2015-4867.
0
Attacker Value
Unknown
CVE-2015-1829
Disclosure Date: October 21, 2015 (last updated October 05, 2023)
Unspecified vulnerability in the Oracle HTTP Server component in Oracle Fusion Middleware 10.1.3.5, 11.1.1.7, 11.1.1.9, 12.1.2.0, and 12.1.3.0 allows remote attackers to affect availability via unknown vectors related to Web Listener.
0
Attacker Value
Unknown
CVE-2015-0372
Disclosure Date: January 21, 2015 (last updated October 05, 2023)
Unspecified vulnerability in the Oracle Containers for J2EE component in Oracle Fusion Middleware 10.1.3.5 allows remote attackers to affect confidentiality via unknown vectors.
0
Attacker Value
Unknown
CVE-2015-0399
Disclosure Date: January 21, 2015 (last updated October 05, 2023)
Unspecified vulnerability in the Oracle Business Intelligence Enterprise Edition component in Oracle Fusion Middleware 10.1.3.4.2 and 11.1.1.7 allows remote authenticated users to affect confidentiality via unknown vectors related to Analytics Web General.
0
Attacker Value
Unknown
CVE-2014-2404
Disclosure Date: April 16, 2014 (last updated October 05, 2023)
Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 10.1.4.3, 11.1.1.3.0, 11.1.1.5.0, 11.1.1.7.0, 11.1.2.0.0, 11.1.2.1.0, and 11.1.2.2.0 allows remote authenticated users to affect confidentiality via unknown vectors related to WebGate.
0
Attacker Value
Unknown
CVE-2014-0426
Disclosure Date: April 16, 2014 (last updated October 05, 2023)
Unspecified vulnerability in the Oracle Containers for J2EE component in Oracle Fusion Middleware 10.1.3.5 allows remote attackers to affect integrity via vectors related to HTTP Request Handling, a different vulnerability than CVE-2014-0413.
0
