Approved changes feed: RSS · Atom

cpe:2.3:a:oracle:application_testing_suite:13.2.0.1:*:*:*:*:*:*:*

part: a version: 13.2.0.1 update: *

VendorOracle (3509f9eb-d8a0-57da-b153-b8021021b133)
ProductApplication Testing Suite (e784697b-92b1-5049-8ae9-63be4a604e64)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-2673 vulnerable 2026-06-08 05:24:59.857571 Details available
HIGH (7.5)
Vulnerability in the Oracle Application Testing Suite product of Oracle Enterprise Manager (component: Oracle Flow Builder). Supported versions that are affected are 12.5.0.3, 13.1.0.1, 13.2.0.1 and 13.3.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Application Testing Suite. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Application Testing Suite accessible data. CVSS 3.0 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).
Published: 2020-01-15T16:34:06.000Z
Updated: 2024-09-30T15:56:17.029Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-2904 vulnerable 2026-06-08 05:13:54.562556 Details available
CRITICAL (9.8)
Vulnerability in the Oracle JDeveloper and ADF product of Oracle Fusion Middleware (component: ADF Faces). Supported versions that are affected are 11.1.1.9.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle JDeveloper and ADF. Successful attacks of this vulnerability can result in takeover of Oracle JDeveloper and ADF. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
Published: 2019-10-16T17:40:53.000Z
Updated: 2024-10-15T18:50:07.530Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-17091 vulnerable 2026-06-08 05:13:09.885257 Details available
faces/context/PartialViewContextImpl.java in Eclipse Mojarra, as used in Mojarra for Eclipse EE4J before 2.3.10 and Mojarra JavaServer Faces before 2.2.20, allows Reflected XSS because a client window field is mishandled.
Published: 2019-10-02T13:58:49.000Z
Updated: 2024-08-05T01:33:16.741Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-12415 vulnerable 2026-06-08 05:12:39.083944 Details available
In Apache POI up to 4.1.0, when using the tool XSSFExportToXml to convert user-provided Microsoft Excel documents, a specially crafted document can allow an attacker to read files from the local filesystem or from internal network resources via XML External Entity (XXE) Processing.
Published: 2019-10-23T19:27:20.000Z
Updated: 2024-08-04T23:17:40.071Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-11358 vulnerable 2026-06-08 05:12:36.951380 Details available
jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.
Published: 2019-04-19T00:00:00.000Z
Updated: 2024-11-15T15:11:23.024Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-0227 vulnerable 2026-06-08 05:12:19.409603 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-8032 vulnerable 2026-06-08 05:12:05.034593 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-3305 vulnerable 2026-06-08 05:11:38.972998 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-3304 vulnerable 2026-06-08 05:11:38.971669 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1275 vulnerable 2026-06-08 05:11:17.444964 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1272 vulnerable 2026-06-08 05:11:17.424479 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1271 vulnerable 2026-06-08 05:11:17.415161 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1270 vulnerable 2026-06-08 05:11:17.397436 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1258 vulnerable 2026-06-08 05:11:17.333319 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1257 vulnerable 2026-06-08 05:11:17.290090 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-11040 vulnerable 2026-06-08 05:10:37.698070 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-11039 vulnerable 2026-06-08 05:10:37.659845 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.