apache xerces-j, oracle agile engineering data management, oracle agile product lifecycle management +26 lainnya
CVSS 6.5 · Medium EPSS 11,6%
Kerentanan Loop with Unreachable Exit Condition ('Infinite Loop') pada apache xerces-j, oracle agile engineering data management +27 lainnya. Skor CVSS 3.1 6.5 (Medium) menurut NVD.
There's a vulnerability within the Apache Xerces Java (XercesJ) XML parser when handling specially crafted XML document payloads. This causes, the XercesJ XML parser to wait in an infinite loop, which may sometimes consume system resources for prolonged duration. This vulnerability is present within XercesJ version 2.12.1 and the previous versions.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| apache | xerces-j | Semua versi hingga 2.12.1 |
| oracle | agile engineering data management | Versi 6.2.1.0 |
| oracle | agile product lifecycle management | Versi 9.3.6 |
| oracle | banking deposits and lines of credit servicing | Versi 2.7 |
| oracle | banking party management | Versi 2.7.0 |
| oracle | communications asap | Versi 7.3 |
| oracle | communications element manager | Semua versi sebelum 9.0 |
| oracle | communications session report manager | Semua versi sebelum 9.0 |
| oracle | communications session route manager | Semua versi sebelum 9.0 |
| oracle | financial services analytical applications infrastructure | Versi 8.0.6.0.0 hingga 8.0.9.0 |
| oracle | financial services analytical applications infrastructure | Versi 8.1.0.0 hingga sebelum 8.1.2.0 |
| oracle | financial services behavior detection platform | Versi 8.0.6.0.0 hingga 8.0.8.0 |
| oracle | financial services behavior detection platform | Versi 8.1.1.0 |
| oracle | financial services behavior detection platform | Versi 8.1.1.1 |
| oracle | financial services behavior detection platform | Versi 8.1.2.0 |
| oracle | financial services crime and compliance management studio | Versi 8.0.8.2.0 |
| oracle | financial services crime and compliance management studio | Versi 8.0.8.3.0 |
| oracle | financial services enterprise case management | Versi 8.0.7.1 |
| oracle | financial services enterprise case management | Versi 8.0.7.2.0 |
| oracle | financial services enterprise case management | Versi 8.0.8.0 |
| oracle | financial services enterprise case management | Versi 8.0.8.1 |
| oracle | financial services enterprise case management | Versi 8.1.1.0 |
| oracle | financial services enterprise case management | Versi 8.1.1.1 |
| oracle | flexcube universal banking | Versi 12.4.0 |
| oracle | global lifecycle management nextgen oui framework | Semua versi sebelum 13.9.4.2.2 |
| oracle | global lifecycle management nextgen oui framework | Versi 13.9.4.2.2 |
| oracle | global lifecycle management opatch | Semua versi sebelum 12.2.0.1.30 |
| oracle | health sciences information manager | Versi 3.0.1 hingga 3.0.5 |
| oracle | health sciences information manager | Versi 3.0.0.1 |
| oracle | ilearning | Versi 6.2 |
| oracle | ilearning | Versi 6.3 |
| oracle | peoplesoft enterprise peopletools | Versi 8.58 |
| oracle | peoplesoft enterprise peopletools | Versi 8.59 |
| oracle | primavera gateway | Versi 17.7 hingga 17.12.11 |
| oracle | primavera gateway | Versi 18.8.0 hingga 18.8.14 |
| oracle | primavera gateway | Versi 19.12.0 hingga 19.12.13 |
| oracle | primavera gateway | Versi 20.12.0 hingga 20.12.8 |
| oracle | product lifecycle analytics | Versi 3.6.1 |
| oracle | retail bulk data integration | Versi 16.0.3.0 |
| oracle | retail extract transform and load | Versi 13.2.8 |
| oracle | retail financial integration | Versi 14.1.3.2 |
| oracle | retail financial integration | Versi 15.0.3.1 |
| oracle | retail financial integration | Versi 16.0.3 |
| oracle | retail financial integration | Versi 19.0.1 |
| oracle | retail integration bus | Versi 14.1.3.2 |
| oracle | retail integration bus | Versi 15.0.3.1 |
| oracle | retail integration bus | Versi 16.0.3 |
| oracle | retail integration bus | Versi 19.0.1 |
| oracle | retail merchandising system | Versi 16.0.3 |
| oracle | retail merchandising system | Versi 19.0.1 |
| oracle | retail service backbone | Versi 14.1.3.2 |
| oracle | retail service backbone | Versi 15.0.3.1 |
| oracle | retail service backbone | Versi 16.0.3 |
| oracle | retail service backbone | Versi 19.0.1 |
| oracle | weblogic server | Versi 12.2.1.3.0 |
| oracle | weblogic server | Versi 12.2.1.4.0 |
| oracle | weblogic server | Versi 14.1.1.0.0 |
| netapp | active iq unified manager | Semua versi |