Oracle Big Data Discovery 1.6
Approved changes feed: RSS · Atom
cpe:2.3:a:oracle:big_data_discovery:1.6:*:*:*:*:*:*:*
part: a version: 1.6 update: *
| Vendor | Oracle (3509f9eb-d8a0-57da-b153-b8021021b133) |
|---|---|
| Product | Big Data Discovery (55d08355-f9a0-5be9-be58-7d488c7d61f0) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-12415 |
vulnerable | 2026-06-08 05:12:39.095284 |
Details available
In Apache POI up to 4.1.0, when using the tool XSSFExportToXml to convert user-provided Microsoft Excel documents, a specially crafted document can allow an attacker to read files from the local filesystem or from internal network resources via XML External Entity (XXE) Processing.
Published: 2019-10-23T19:27:20.000Z
Updated: 2024-08-04T23:17:40.071Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-11358 |
vulnerable | 2026-06-08 05:12:36.958913 |
Details available
jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.
Published: 2019-04-19T00:00:00.000Z
Updated: 2024-11-15T15:11:23.024Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-0227 |
vulnerable | 2026-06-08 05:12:19.410768 |
Details available
A Server Side Request Forgery (SSRF) vulnerability affected the Apache Axis 1.4 distribution that was last released in 2006. Security and bug commits commits continue in the projects Axis 1.x Subversion repository, legacy users are encouraged to build from source. The successor to Axis 1.x is Axis2, the latest version is 1.7.9 and is not vulnerable to this issue.
Published: 2019-05-01T20:03:49.000Z
Updated: 2024-08-04T17:44:15.943Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-8032 |
vulnerable | 2026-06-08 05:12:05.036065 |
Details available
Apache Axis 1.x up to and including 1.4 is vulnerable to a cross-site scripting (XSS) attack in the default servlet/services.
Published: 2018-08-02T13:00:00.000Z
Updated: 2024-09-16T16:29:01.816Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.