apache commons compress, netapp active iq unified manager, netapp oncommand insight +23 lainnya
CVSS 7.5 · High EPSS 11,6%
Kerentanan Excessive Iteration pada apache commons compress, netapp active iq unified manager +24 lainnya. Skor CVSS 3.1 7.5 (High) menurut NVD.
When reading a specially crafted 7Z archive, the construction of the list of codecs that decompress an entry can result in an infinite loop. This could be used to mount a denial of service attack against services that use Compress' sevenz package.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| apache | commons compress | Versi 1.6 hingga 1.20 |
| netapp | active iq unified manager | Semua versi |
| netapp | oncommand insight | Semua versi |
| oracle | banking digital experience | Versi 18.1 hingga 18.3 |
| oracle | banking digital experience | Versi 19.1 |
| oracle | banking digital experience | Versi 20.1 |
| oracle | banking digital experience | Versi 21.1 |
| oracle | banking enterprise default management | Versi 2.7.0 |
| oracle | banking party management | Versi 2.7.0 |
| oracle | banking payments | Versi 14.5 |
| oracle | banking trade finance | Versi 14.5 |
| oracle | banking treasury management | Versi 14.5 |
| oracle | business process management suite | Versi 12.2.1.3.0 |
| oracle | business process management suite | Versi 12.2.1.4.0 |
| oracle | commerce guided search | Versi 11.3.2 |
| oracle | communications billing and revenue management | Versi 12.0.0.4 |
| oracle | communications cloud native core automated test suite | Versi 1.8.0 |
| oracle | communications cloud native core service communication proxy | Versi 1.14.0 |
| oracle | communications cloud native core unified data repository | Versi 1.14.0 |
| oracle | communications diameter intelligence hub | Versi 8.0.0 hingga 8.2.3 |
| oracle | communications session route manager | Versi 8.0.0 hingga 8.2.5 |
| oracle | financial services crime and compliance management studio | Versi 8.0.8.2.0 |
| oracle | financial services crime and compliance management studio | Versi 8.0.8.3.0 |
| oracle | financial services enterprise case management | Versi 8.0.7.2.0 |
| oracle | financial services enterprise case management | Versi 8.0.8.1.0 |
| oracle | flexcube universal banking | Versi 14.0.0 hingga 14.3.0 |
| oracle | flexcube universal banking | Versi 12.4.0 |
| oracle | flexcube universal banking | Versi 14.5.0 |
| oracle | healthcare data repository | Versi 8.1.0 |
| oracle | insurance policy administration | Versi 11.0.2 |
| oracle | insurance policy administration | Versi 11.1.0 |
| oracle | insurance policy administration | Versi 11.2.8 |
| oracle | insurance policy administration | Versi 11.3.0 |
| oracle | insurance policy administration | Versi 11.3.1 |
| oracle | peoplesoft enterprise peopletools | Versi 8.57 |
| oracle | peoplesoft enterprise peopletools | Versi 8.58 |
| oracle | peoplesoft enterprise peopletools | Versi 8.59 |
| oracle | primavera unifier | Versi 17.7 hingga 17.12 |
| oracle | primavera unifier | Versi 18.8 |
| oracle | primavera unifier | Versi 19.12 |
| oracle | primavera unifier | Versi 20.12 |
| oracle | utilities testing accelerator | Versi 6.0.0.1.1 |
| oracle | utilities testing accelerator | Versi 6.0.0.2.2 |
| oracle | utilities testing accelerator | Versi 6.0.0.3.1 |
| oracle | communications messaging server | Versi 8.1 |