Oracle Endeca Information Discovery Studio 3.2.0
Approved changes feed: RSS · Atom
cpe:2.3:a:oracle:endeca_information_discovery_studio:3.2.0:*:*:*:*:*:*:*
part: a version: 3.2.0 update: *
| Vendor | Oracle (3509f9eb-d8a0-57da-b153-b8021021b133) |
|---|---|
| Product | Endeca Information Discovery Studio (e44c3061-214c-57ec-99c3-a369cb7d7cea) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-1945 |
vulnerable | 2026-06-08 05:21:03.648587 |
Details available
Apache Ant 1.1 to 1.9.14 and 1.10.0 to 1.10.7 uses the default temporary directory identified by the Java system property java.io.tmpdir for several tasks and may thus leak sensitive information. The fixcrlf and replaceregexp tasks also copy files from the temporary directory back into the build tree allowing an attacker to inject modified source files into the build process.
Published: 2020-05-14T15:57:34.000Z
Updated: 2024-08-04T06:54:00.377Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-17571 |
vulnerable | 2026-06-08 05:13:10.751702 |
Details available
Included in Log4j 1.2 is a SocketServer class that is vulnerable to deserialization of untrusted data which can be exploited to remotely execute arbitrary code when combined with a deserialization gadget when listening to untrusted network traffic for log data. This affects Log4j versions up to 1.2 up to 1.2.17.
Published: 2019-12-20T16:01:21.000Z
Updated: 2026-05-28T18:30:17.910Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-12415 |
vulnerable | 2026-06-08 05:12:39.097355 |
Details available
In Apache POI up to 4.1.0, when using the tool XSSFExportToXml to convert user-provided Microsoft Excel documents, a specially crafted document can allow an attacker to read files from the local filesystem or from internal network resources via XML External Entity (XXE) Processing.
Published: 2019-10-23T19:27:20.000Z
Updated: 2024-08-04T23:17:40.071Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-10173 |
vulnerable | 2026-06-08 05:12:22.415980 |
Details available
HIGH (7.3)
It was found that xstream API version 1.4.10 before 1.4.11 introduced a regression for a previous deserialization flaw. If the security framework has not been initialized, it may allow a remote attacker to run arbitrary shell commands when unmarshalling XML or any supported format. e.g. JSON. (regression of CVE-2013-7285)
Published: 2019-07-23T12:50:44.000Z
Updated: 2024-08-04T22:10:10.018Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-0227 |
vulnerable | 2026-06-08 05:12:19.420069 |
Details available
A Server Side Request Forgery (SSRF) vulnerability affected the Apache Axis 1.4 distribution that was last released in 2006. Security and bug commits commits continue in the projects Axis 1.x Subversion repository, legacy users are encouraged to build from source. The successor to Axis 1.x is Axis2, the latest version is 1.7.9 and is not vulnerable to this issue.
Published: 2019-05-01T20:03:49.000Z
Updated: 2024-08-04T17:44:15.943Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-8032 |
vulnerable | 2026-06-08 05:12:05.050784 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-5645 |
vulnerable | 2026-06-08 05:09:47.475916 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-9251 |
vulnerable | 2026-06-08 05:07:13.395224 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-7285 |
vulnerable | 2026-06-08 05:05:09.427323 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.