apache commons compress, netapp active iq unified manager, netapp oncommand insight +21 lainnya
CVSS 7.5 · High EPSS 12,4%
Kerentanan Improper Handling of Length Parameter Inconsistency pada apache commons compress, netapp active iq unified manager +22 lainnya. Skor CVSS 3.1 7.5 (High) menurut NVD.
When reading a specially crafted 7Z archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs. This could be used to mount a denial of service attack against services that use Compress' sevenz package.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| apache | commons compress | Versi 1.6 hingga 1.20 |
| netapp | active iq unified manager | Semua versi |
| netapp | oncommand insight | Semua versi |
| oracle | banking digital experience | Versi 18.1 hingga 18.3 |
| oracle | banking digital experience | Versi 19.1 |
| oracle | banking digital experience | Versi 19.2 |
| oracle | banking digital experience | Versi 20.1 |
| oracle | banking digital experience | Versi 21.1 |
| oracle | banking enterprise default management | Versi 2.7.0 |
| oracle | banking party management | Versi 2.7.0 |
| oracle | business process management suite | Versi 12.2.1.3.0 |
| oracle | business process management suite | Versi 12.2.1.4.0 |
| oracle | commerce guided search | Versi 11.3.2 |
| oracle | communications billing and revenue management | Versi 12.0.0.4 |
| oracle | communications cloud native core automated test suite | Versi 1.8.0 |
| oracle | communications cloud native core service communication proxy | Versi 1.14.0 |
| oracle | communications cloud native core unified data repository | Versi 1.14.0 |
| oracle | communications diameter intelligence hub | Versi 8.0.0 hingga 8.2.3 |
| oracle | communications session route manager | Versi 8.0.0 hingga 8.2.5 |
| oracle | financial services crime and compliance management studio | Versi 8.0.8.2.0 |
| oracle | financial services crime and compliance management studio | Versi 8.0.8.3.0 |
| oracle | financial services enterprise case management | Versi 8.0.7.2.0 |
| oracle | financial services enterprise case management | Versi 8.0.8.1.0 |
| oracle | flexcube universal banking | Versi 14.0.0 hingga 14.3.0 |
| oracle | flexcube universal banking | Versi 12.4.0 |
| oracle | flexcube universal banking | Versi 14.5 |
| oracle | healthcare data repository | Versi 8.1.0 |
| oracle | insurance policy administration | Versi 11.0.2 |
| oracle | insurance policy administration | Versi 11.1.0 |
| oracle | insurance policy administration | Versi 11.2.8 |
| oracle | insurance policy administration | Versi 11.3.0 |
| oracle | insurance policy administration | Versi 11.3.1 |
| oracle | peoplesoft enterprise peopletools | Versi 8.57 |
| oracle | peoplesoft enterprise peopletools | Versi 8.58 |
| oracle | peoplesoft enterprise peopletools | Versi 8.59 |
| oracle | primavera unifier | Versi 17.7 hingga 17.12 |
| oracle | primavera unifier | Versi 18.8 |
| oracle | primavera unifier | Versi 19.12 |
| oracle | primavera unifier | Versi 20.12 |
| oracle | utilities testing accelerator | Versi 6.0.0.1.1 |
| oracle | utilities testing accelerator | Versi 6.0.0.2.2 |
| oracle | utilities testing accelerator | Versi 6.0.0.3.1 |
| oracle | webcenter portal | Versi 12.2.1.3.0 |
| oracle | webcenter portal | Versi 12.2.1.4.0 |
| oracle | communications messaging server | Versi 8.1 |