vmware spring framework, oracle application testing suite, oracle communications billing and revenue management elastic charging engine +28 lainnya
CVSS 7.5 · High EPSS 88,8%
Kerentanan Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') pada vmware spring framework, oracle application testing suite +29 lainnya. Skor CVSS 3.1 7.5 (High) menurut NVD.
In Spring Framework, versions 5.2.x prior to 5.2.3, versions 5.1.x prior to 5.1.13, and versions 5.0.x prior to 5.0.16, an application is vulnerable to a reflected file download (RFD) attack when it sets a "Content-Disposition" header in the response where the filename attribute is derived from user supplied input.
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| vmware | spring framework | Versi 5.0.0 hingga sebelum 5.0.16 |
| vmware | spring framework | Versi 5.1.0 hingga sebelum 5.1.13 |
| vmware | spring framework | Versi 5.2.0 hingga sebelum 5.2.3 |
| oracle | application testing suite | Versi 13.3.0.1 |
| oracle | communications billing and revenue management elastic charging engine | Versi 11.3 |
| oracle | communications billing and revenue management elastic charging engine | Versi 12.0 |
| oracle | communications cloud native core policy | Versi 1.5.0 |
| oracle | communications diameter signaling router | Versi 8.0.0 hingga 8.2.2 |
| oracle | communications element manager | Versi 8.1.1 |
| oracle | communications element manager | Versi 8.2.0 |
| oracle | communications element manager | Versi 8.2.1 |
| oracle | communications policy management | Versi 12.5.0 |
| oracle | communications session report manager | Versi 8.1.1 |
| oracle | communications session report manager | Versi 8.2.0 |
| oracle | communications session report manager | Versi 8.2.1 |
| oracle | communications session route manager | Versi 8.1.1 |
| oracle | communications session route manager | Versi 8.2.0 |
| oracle | communications session route manager | Versi 8.2.1 |
| oracle | enterprise manager base platform | Versi 13.2.1.0 |
| oracle | financial services regulatory reporting with agilereporter | Versi 8.0.9.2.0 |
| oracle | flexcube private banking | Versi 12.0.0 |
| oracle | flexcube private banking | Versi 12.1.0 |
| oracle | healthcare master person index | Versi 4.0.2 |
| oracle | insurance calculation engine | Versi 11.0.0 hingga 11.3.1 |
| oracle | insurance policy administration j2ee | Versi 10.2.0 |
| oracle | insurance policy administration j2ee | Versi 10.2.4 |
| oracle | insurance policy administration j2ee | Versi 11.0.2 |
| oracle | insurance policy administration j2ee | Versi 11.1.0 |
| oracle | insurance policy administration j2ee | Versi 11.2.0 |
| oracle | insurance policy administration j2ee | Versi 11.2.2.0 |
| oracle | insurance rules palette | Versi 10.2.0 |
| oracle | insurance rules palette | Versi 10.2.4 |
| oracle | insurance rules palette | Versi 11.0.2 |
| oracle | insurance rules palette | Versi 11.1.0 |
| oracle | insurance rules palette | Versi 11.2.0 |
| oracle | mysql | Versi 4.0.0 hingga 4.0.12 |
| oracle | mysql | Versi 8.0.0 hingga 8.0.20 |
| oracle | rapid planning | Versi 12.1 |
| oracle | rapid planning | Versi 12.2 |
| oracle | retail assortment planning | Versi 15.0 |
| oracle | retail assortment planning | Versi 16.0 |
| oracle | retail back office | Versi 14.1 |
| oracle | retail bulk data integration | Versi 16.0.3.0 |
| oracle | retail central office | Versi 14.1 |
| oracle | retail financial integration | Versi 15.0 |
| oracle | retail financial integration | Versi 16.0 |
| oracle | retail integration bus | Versi 15.0.3 |
| oracle | retail integration bus | Versi 16.0.3 |
| oracle | retail order broker | Versi 15.0 |
| oracle | retail order broker | Versi 16.0 |
| oracle | retail point-of-service | Versi 14.1 |
| oracle | retail predictive application server | Versi 14.0.3 |
| oracle | retail predictive application server | Versi 14.1.3.0 |
| oracle | retail predictive application server | Versi 15.0.3 |
| oracle | retail predictive application server | Versi 16.0.3.0 |
| oracle | retail returns management | Versi 14.1 |
| oracle | retail service backbone | Versi 15.0 |
| oracle | retail service backbone | Versi 16.0 |
| oracle | siebel engineering - installer & deployment | Semua versi hingga 2.1.1 |
| oracle | weblogic server | Versi 12.2.1.3.0 |