Oracle Policy Automation Connector for Siebel 10.4.6
Approved changes feed: RSS · Atom
cpe:2.3:a:oracle:policy_automation_connector_for_siebel:10.4.6:*:*:*:*:*:*:*
part: a version: 10.4.6 update: *
| Vendor | Oracle (3509f9eb-d8a0-57da-b153-b8021021b133) |
|---|---|
| Product | Policy Automation Connector For Siebel (2699448e-88af-50fc-8a55-68805e34c5e2) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-9488 |
vulnerable | 2026-06-08 05:28:01.952596 |
Details available
Improper validation of certificate with host mismatch in Apache Log4j SMTP appender. This could allow an SMTPS connection to be intercepted by a man-in-the-middle attack which could leak any log messages sent through that appender. Fixed in Apache Log4j 2.12.3 and 2.13.1
Published: 2020-04-27T15:36:10.000Z
Updated: 2026-05-29T16:07:52.931Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-11022 |
vulnerable | 2026-06-08 05:16:36.271274 |
jQuery has a potential XSS vulnerability
MEDIUM (6.9)
In jQuery starting with 1.12.0 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
Published: 2020-04-29T00:00:00.000Z
Updated: 2026-04-13T13:53:08.239Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-11358 |
vulnerable | 2026-06-08 05:12:37.035447 |
Details available
jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.
Published: 2019-04-19T00:00:00.000Z
Updated: 2024-11-15T15:11:23.024Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-0227 |
vulnerable | 2026-06-08 05:12:19.432375 |
Details available
A Server Side Request Forgery (SSRF) vulnerability affected the Apache Axis 1.4 distribution that was last released in 2006. Security and bug commits commits continue in the projects Axis 1.x Subversion repository, legacy users are encouraged to build from source. The successor to Axis 1.x is Axis2, the latest version is 1.7.9 and is not vulnerable to this issue.
Published: 2019-05-01T20:03:49.000Z
Updated: 2024-08-04T17:44:15.943Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-8032 |
vulnerable | 2026-06-08 05:12:05.066749 |
Details available
Apache Axis 1.x up to and including 1.4 is vulnerable to a cross-site scripting (XSS) attack in the default servlet/services.
Published: 2018-08-02T13:00:00.000Z
Updated: 2024-09-16T16:29:01.816Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-5645 |
vulnerable | 2026-06-08 05:09:47.525885 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.