Oracle Enterprise Manager For Peoplesoft vulnerabilities

3 vulnerabilities

Known vulnerabilities in Oracle Enterprise Manager For Peoplesoft, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

RoutineCVE-2021-45105apache software foundation · apache log4j2 +125 more4y agoApache Log4j2 does not always protect from infinite recursion in lookup evaluationApache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread Context Map data to cause a denial of service when a crafted string is interpreted. This issue was fixed in Log4j 2.17.0, 2.12.3, and 2.3.1.CVSS5.9MediumEPSS100.00%RoutineCVE-2020-9488apache · apache log4j +50 more6y agoapache apache log4jImproper validation of certificate with host mismatch in Apache Log4j SMTP appender. This could allow an SMTPS connection to be intercepted by a man-in-the-middle attack which could leak any log messages sent through that appender. Fixed in Apache Log4j 2.12.3 and 2.13.1CVSS4.3MediumEPSS8.22%PrioritiseCVE-2017-5645apache software foundation · apache log4j +86 more9y agoapache software foundation apache log4jIn Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that, when deserialized, can execute arbitrary code.CVSS9.8CriticalEPSS89.36%