NotCVE - vendor:"Oracle" product:"Knowledge Management" version:"12.1.1"

15 results (0.008 seconds)

CVSS: 8.2EPSS: 11%CPEs: 2EXPL: 0

CVE-2021-2198

https://notcve.org/view.php?id=CVE-2021-2198

22 Apr 2021 — Vulnerability in the Oracle Knowledge Management product of Oracle E-Business Suite (component: Setup, Admin). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Knowledge Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Knowledge Management, attacks may significantly impact additional... • https://www.oracle.com/security-alerts/cpuapr2021.html •

CVSS: 8.2EPSS: 1%CPEs: 1EXPL: 0

CVE-2020-2841

https://notcve.org/view.php?id=CVE-2020-2841

15 Apr 2020 — Vulnerability in the Oracle Knowledge Management product of Oracle E-Business Suite (component: Setup, Admin). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Knowledge Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Knowledge Management, attacks may significantly impact additional products. Successf... • https://www.oracle.com/security-alerts/cpuapr2020.html •

CVSS: 8.2EPSS: 1%CPEs: 9EXPL: 0

CVE-2019-2660

https://notcve.org/view.php?id=CVE-2019-2660

23 Apr 2019 — Vulnerability in the Oracle Knowledge Management component of Oracle E-Business Suite (subcomponent: Setup, Admin). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Knowledge Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Knowledge Managemen... • http://www.oracle.com/technetwork/security-advisory/cpuapr2019-5072813.html •

CVSS: 6.1EPSS: 2%CPEs: 218EXPL: 9

CVE-2019-11358 – jQuery 3.3.1 - Prototype Pollution & XSS Exploit

https://notcve.org/view.php?id=CVE-2019-11358

19 Apr 2019 — jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype. jQuery, en versiones anteriores a 3.4.0, como es usado en Drupal, Backdrop CMS, y otros productos, maneja mal jQuery.extend(true, {}, ...) debido a la contaminación de Object.prototype. Si un objeto fuente no sanitizado contenía una propi... • https://packetstorm.news/files/id/190328 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CWE-1321: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') •

CVSS: 8.2EPSS: 0%CPEs: 8EXPL: 0

CVE-2017-10410

https://notcve.org/view.php?id=CVE-2017-10410

19 Oct 2017 — Vulnerability in the Oracle Knowledge Management component of Oracle E-Business Suite (subcomponent: Search). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Knowledge Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Knowledge Management, attacks may... • http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html •

CVSS: 8.2EPSS: 0%CPEs: 8EXPL: 0

CVE-2017-10411

https://notcve.org/view.php?id=CVE-2017-10411

19 Oct 2017 — Vulnerability in the Oracle Knowledge Management component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Knowledge Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Knowledge Management, att... • http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html •

CVSS: 8.2EPSS: 0%CPEs: 8EXPL: 0

CVE-2017-10412

https://notcve.org/view.php?id=CVE-2017-10412

CVSS: 8.2EPSS: 0%CPEs: 3EXPL: 0

CVE-2017-3362

https://notcve.org/view.php?id=CVE-2017-3362

27 Jan 2017 — Vulnerability in the Oracle Knowledge Management component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2 and 12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Knowledge Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Knowledge Management, attacks may significantly impact additional... • http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html •

CVSS: 8.2EPSS: 0%CPEs: 3EXPL: 0

CVE-2017-3363

https://notcve.org/view.php?id=CVE-2017-3363

CVSS: 8.2EPSS: 0%CPEs: 3EXPL: 0

CVE-2017-3364

https://notcve.org/view.php?id=CVE-2017-3364

1 2