Oracle Utilities Framework 4.3.0.5.0
Approved changes feed: RSS · Atom
cpe:2.3:a:oracle:utilities_framework:4.3.0.5.0:*:*:*:*:*:*:*
part: a version: 4.3.0.5.0 update: *
| Vendor | Oracle (3509f9eb-d8a0-57da-b153-b8021021b133) |
|---|---|
| Product | Utilities Framework (1e7fc50a-fa32-5f1f-8e0b-8e5cf9abf67e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-36518 |
vulnerable | 2026-06-08 05:25:49.048501 |
Details available
jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects.
Published: 2022-03-11T00:00:00.000Z
Updated: 2025-08-27T20:34:32.190Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-25649 |
vulnerable | 2026-06-08 05:22:37.081891 |
Details available
A flaw was found in FasterXML Jackson Databind, where it did not have entity expansion secured properly. This flaw allows vulnerability to XML external entity (XXE) attacks. The highest threat from this vulnerability is data integrity.
Published: 2020-12-03T16:16:50.000Z
Updated: 2024-08-04T15:40:36.648Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-11979 |
vulnerable | 2026-06-08 05:17:55.987715 |
Details available
As mitigation for CVE-2020-1945 Apache Ant 1.10.8 changed the permissions of temporary files it created so that only the current user was allowed to access them. Unfortunately the fixcrlf task deleted the temporary file and created a new one without said protection, effectively nullifying the effort. This would still allow an attacker to inject modified source files into the build process.
Published: 2020-10-01T19:24:57.000Z
Updated: 2024-08-04T11:48:57.549Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-8088 |
vulnerable | 2026-06-08 05:12:05.191330 |
Details available
org.slf4j.ext.EventData in the slf4j-ext module in QOS.CH SLF4J before 1.8.0-beta2 allows remote attackers to bypass intended access restrictions via crafted data. EventData in the slf4j-ext module in QOS.CH SLF4J, has been fixed in SLF4J versions 1.7.26 later and in the 2.0.x series.
Published: 2018-03-20T00:00:00.000Z
Updated: 2024-08-05T06:46:12.940Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.