apache log4j, oracle communications application session controller, oracle communications billing and revenue management +28 lainnya
CVSS 3.7 · Low EPSS 8,1%
Kerentanan Improper Certificate Validation pada apache log4j, oracle communications application session controller +29 lainnya. Skor CVSS 3.1 3.7 (Low) menurut NVD.
Improper validation of certificate with host mismatch in Apache Log4j SMTP appender. This could allow an SMTPS connection to be intercepted by a man-in-the-middle attack which could leak any log messages sent through that appender. Fixed in Apache Log4j 2.12.3 and 2.13.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| apache | log4j | Versi 2.0 hingga sebelum 2.3.2 |
| apache | log4j | Versi 2.4 hingga sebelum 2.12.3 |
| apache | log4j | Versi 2.13.0 hingga sebelum 2.13.2 |
| oracle | communications application session controller | Versi 3.9m0p1 |
| oracle | communications billing and revenue management | Versi 7.5.0.23.0 |
| oracle | communications billing and revenue management | Versi 12.0.0.3.0 |
| oracle | communications eagle ftp table base retrieval | Versi 4.5 |
| oracle | communications offline mediation controller | Versi 12.0.0.3.0 |
| oracle | communications services gatekeeper | Versi 7.0 |
| oracle | communications unified inventory management | Versi 7.3.0 |
| oracle | communications unified inventory management | Versi 7.4.0 |
| oracle | data integrator | Versi 12.2.1.3.0 |
| oracle | data integrator | Versi 12.2.1.4.0 |
| oracle | enterprise manager for peoplesoft | Versi 13.4.1.1 |
| oracle | financial services analytical applications infrastructure | Versi 8.0.6.0.0 hingga 8.1.0.0.0 |
| oracle | financial services institutional performance analytics | Versi 8.0.6 |
| oracle | financial services institutional performance analytics | Versi 8.1.0 |
| oracle | financial services institutional performance analytics | Versi 8.7.0 |
| oracle | financial services market risk measurement and management | Versi 8.0.6 |
| oracle | financial services market risk measurement and management | Versi 8.0.8 |
| oracle | financial services market risk measurement and management | Versi 8.1.0 |
| oracle | financial services price creation and discovery | Versi 8.0.6 |
| oracle | financial services price creation and discovery | Versi 8.0.7 |
| oracle | financial services retail customer analytics | Versi 8.0.6 |
| oracle | flexcube core banking | Versi 11.5.0 hingga 11.7.0 |
| oracle | flexcube core banking | Versi 5.2.0 |
| oracle | flexcube private banking | Versi 12.0.0 |
| oracle | flexcube private banking | Versi 12.1.0 |
| oracle | health sciences information manager | Versi 3.0.1 |
| oracle | insurance insbridge rating and underwriting | Versi 5.0.0.0 hingga 5.6.0.0 |
| oracle | insurance insbridge rating and underwriting | Versi 5.6.1.0 |
| oracle | insurance policy administration j2ee | Versi 10.2.0.37 |
| oracle | insurance policy administration j2ee | Versi 10.2.4.12 |
| oracle | insurance policy administration j2ee | Versi 11.0.2.25 |
| oracle | insurance policy administration j2ee | Versi 11.1.0.15 |
| oracle | insurance policy administration j2ee | Versi 11.2.0.26 |
| oracle | insurance rules palette | Versi 10.2.0.37 |
| oracle | insurance rules palette | Versi 10.2.4.12 |
| oracle | insurance rules palette | Versi 11.0.2.25 |
| oracle | insurance rules palette | Versi 11.1.0.15 |
| oracle | insurance rules palette | Versi 11.2.0.26 |
| oracle | jd edwards world security | Versi a9.4 |
| oracle | oracle goldengate application adapters | Versi 19.1.0.0.0 |
| oracle | peoplesoft enterprise peopletools | Versi 8.56 |
| oracle | peoplesoft enterprise peopletools | Versi 8.57 |
| oracle | peoplesoft enterprise peopletools | Versi 8.58 |
| oracle | policy automation | Versi 12.2.0 hingga 12.2.20 |
| oracle | policy automation connector for siebel | Versi 10.4.6 |
| oracle | policy automation for mobile devices | Versi 12.2.0 hingga 12.2.20 |
| oracle | primavera unifier | Versi 18.8 |
| oracle | primavera unifier | Versi 19.12 |
| oracle | retail advanced inventory planning | Versi 14.1 |
| oracle | retail assortment planning | Versi 15.0.3.0 |
| oracle | retail assortment planning | Versi 16.0.3.0 |
| oracle | retail bulk data integration | Versi 15.0.3.0 |
| oracle | retail bulk data integration | Versi 16.0.3.0 |
| oracle | retail customer management and segmentation foundation | Versi 16.0 |
| oracle | retail customer management and segmentation foundation | Versi 17.0 |
| oracle | retail customer management and segmentation foundation | Versi 18.0 |
| oracle | retail customer management and segmentation foundation | Versi 19.0 |