Oracle Middleware Common Libraries and Tools 12.2.1.3.0

CPE Details

Oracle Middleware Common Libraries and Tools 12.2.1.3.0
oracle
middleware_common_libraries_and_tools
12.2.1.3.0
2022-04-29
12h53 +00:00
2022-05-02
12h57 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:oracle:middleware_common_libraries_and_tools:12.2.1.3.0:*:*:*:*:*:*:*

Informations

Vendor

oracle

Product

middleware_common_libraries_and_tools

Version

12.2.1.3.0

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2021-42575 2021-10-18 12h38 +00:00 The OWASP Java HTML Sanitizer before 20211018.1 does not properly enforce policies associated with the SELECT, STYLE, and OPTION elements.
9.8
Critical
CVE-2021-37714 2021-08-18 13h10 +00:00 jsoup is a Java library for working with HTML. Those using jsoup versions prior to 1.14.2 to parse untrusted HTML or XML may be vulnerable to DOS attacks. If the parser is run on user supplied input, an attacker may supply content that causes the parser to get stuck (loop indefinitely until cancelled), to complete more slowly than usual, or to throw an unexpected exception. This effect may support a denial of service attack. The issue is patched in version 1.14.2. There are a few available workarounds. Users may rate limit input parsing, limit the size of inputs based on system resources, and/or implement thread watchdogs to cap and timeout parse runtimes.
7.5
High
CVE-2021-35043 2021-07-19 12h53 +00:00 OWASP AntiSamy before 1.6.4 allows XSS via HTML attributes when using the HTML output serializer (XHTML is not affected). This was demonstrated by a javascript: URL with : as the replacement for the : character.
6.1
Medium
CVE-2021-30129 2021-07-12 10h10 +00:00 A vulnerability in sshd-core of Apache Mina SSHD allows an attacker to overflow the server causing an OutOfMemory error. This issue affects the SFTP and port forwarding features of Apache Mina SSHD version 2.0.0 and later versions. It was addressed in Apache Mina SSHD 2.7.0
6.5
Medium
CVE-2021-23926 2021-01-14 14h45 +00:00 The XML parsers used by XMLBeans up to version 2.6.0 did not set the properties needed to protect the user from malicious XML input. Vulnerabilities include possibilities for XML Entity Expansion attacks. Affects XMLBeans up to and including v2.6.0.
9.1
Critical