← Back

Global Lifecycle Management Opatch

global_lifecycle_management_opatch

Vendor: Oracle • 25 CVEs

CVEs (25)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2018-11307
3Fasterxml
OracleRedhat
7Clusterware
Communications Instant Messaging ServerGlobal Lifecycle Management Opatch+4 more
Nov 21, 2024
Jul 9, 2019
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
An issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.5. Use of Jackson default typing along with a gadget class from iBatis allows exfiltration of content. Fixed in 2.7.9.4, 2.8.11.2, and 2.9.6.
CVE-2018-1320
4Apache
DebianF5+1 more
5Debian Linux
Global Lifecycle Management OpatchNosql Database+2 more
Nov 21, 2024
Jan 7, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Apache Thrift Java client library versions 0.5.0 through 0.11.0 can bypass SASL negotiation isComplete validation in the org.apache.thrift.transport.TSaslTransport class. An assert used to determine if the SASL handshake...Show more
Apache Thrift Java client library versions 0.5.0 through 0.11.0 can bypass SASL negotiation isComplete validation in the org.apache.thrift.transport.TSaslTransport class. An assert used to determine if the SASL handshake had successfully completed could be disabled in production settings making the validation incomplete.Show less
CVE-2018-14719
5Debian
FasterxmlNetapp+2 more
20Banking Platform
Business Process Management SuiteClusterware+17 more
Nov 21, 2024
Jan 2, 2019
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to execute arbitrary code by leveraging failure to block the blaze-ds-opt and blaze-ds-core classes from polymorphic deserialization.
CVE-2018-14718
5Debian
FasterxmlNetapp+2 more
25Banking Platform
Business Process Management SuiteCommunications Billing And Revenue Management+22 more
Nov 21, 2024
Jan 2, 2019
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to execute arbitrary code by leveraging failure to block the slf4j-ext class from polymorphic deserialization.
CVE-2018-1000873
3Fasterxml
NetappOracle
6Active Iq Unified Manager
ClusterwareDatabase Server+3 more
Nov 21, 2024
Dec 20, 2018
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
Fasterxml Jackson version Before 2.9.8 contains a CWE-20: Improper Input Validation vulnerability in Jackson-Modules-Java8 that can result in Causes a denial-of-service (DoS). This attack appear to be exploitable via The...Show more
Fasterxml Jackson version Before 2.9.8 contains a CWE-20: Improper Input Validation vulnerability in Jackson-Modules-Java8 that can result in Causes a denial-of-service (DoS). This attack appear to be exploitable via The victim deserializes malicious input, specifically very large values in the nanoseconds field of a time value. This vulnerability appears to have been fixed in 2.9.8.Show less