Oracle Endeca Information Discovery Studio 3.2.0.0
Approved changes feed: RSS · Atom
cpe:2.3:a:oracle:endeca_information_discovery_studio:3.2.0.0:*:*:*:*:*:*:*
part: a version: 3.2.0.0 update: *
| Vendor | Oracle (3509f9eb-d8a0-57da-b153-b8021021b133) |
|---|---|
| Product | Endeca Information Discovery Studio (e44c3061-214c-57ec-99c3-a369cb7d7cea) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-26217 |
vulnerable | 2026-06-08 05:23:50.886060 |
Remote Code Execution in XStream
HIGH (8)
XStream before version 1.4.14 is vulnerable to Remote Code Execution.The vulnerability may allow a remote attacker to run arbitrary shell commands only by manipulating the processed input stream. Only users who rely on blocklists are affected. Anyone using XStream's Security Framework allowlist is not affected. The linked advisory provides code workarounds for users who cannot upgrade. The issue is fixed in version 1.4.14.
Published: 2020-11-16T21:00:18.000Z
Updated: 2024-08-04T15:49:07.258Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-11979 |
vulnerable | 2026-06-08 05:17:55.936391 |
Details available
As mitigation for CVE-2020-1945 Apache Ant 1.10.8 changed the permissions of temporary files it created so that only the current user was allowed to access them. Unfortunately the fixcrlf task deleted the temporary file and created a new one without said protection, effectively nullifying the effort. This would still allow an attacker to inject modified source files into the build process.
Published: 2020-10-01T19:24:57.000Z
Updated: 2024-08-04T11:48:57.549Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-10173 |
vulnerable | 2026-06-08 05:12:22.416914 |
Details available
HIGH (7.3)
It was found that xstream API version 1.4.10 before 1.4.11 introduced a regression for a previous deserialization flaw. If the security framework has not been initialized, it may allow a remote attacker to run arbitrary shell commands when unmarshalling XML or any supported format. e.g. JSON. (regression of CVE-2013-7285)
Published: 2019-07-23T12:50:44.000Z
Updated: 2024-08-04T22:10:10.018Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.