Oracle Agile Product Lifecycle Management Integration Pack 3.6 for E-business Suite

CPE Details

Oracle Agile Product Lifecycle Management Integration Pack 3.6 for E-business Suite
oracle
agile_product_lifecycle_management_integration_pack
3.6
2021-09-02
15h32 +00:00
2021-09-07
13h58 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:oracle:agile_product_lifecycle_management_integration_pack:3.6:*:*:*:*:e-business_suite:*:*

Informations

Vendor

oracle

Product

agile_product_lifecycle_management_integration_pack

Version

3.6

Target Software

e-business_suite

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2020-25649 2020-12-03 15h16 +00:00 A flaw was found in FasterXML Jackson Databind, where it did not have entity expansion secured properly. This flaw allows vulnerability to XML external entity (XXE) attacks. The highest threat from this vulnerability is data integrity.
7.5
High
CVE-2019-10219 2019-11-08 13h46 +00:00 A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.
6.1
Medium
CVE-2019-10086 2019-08-20 18h10 +00:00 In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all Java objects. We, however were not using this by default characteristic of the PropertyUtilsBean.
7.3
High