Oracle Hospitality Token Proxy Service vulnerabilities
3 vulnerabilities
Known vulnerabilities in Oracle Hospitality Token Proxy Service, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
RoutineCVE-2021-45105apache software foundation · apache log4j2 +125 moreApache Log4j2 does not always protect from infinite recursion in lookup evaluationApache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread Context Map data to cause a denial of service when a crafted string is interpreted. This issue was fixed in Log4j 2.17.0, 2.12.3, and 2.3.1.CVSS5.9MediumEPSS100.00%PrioritiseCVE-2021-37714jhy · jsoup +48 moreCrafted input may cause the jsoup HTML and XML parser to get stuck, timeout, or throw unchecked exceptionsjsoup is a Java library for working with HTML. Those using jsoup versions prior to 1.14.2 to parse untrusted HTML or XML may be vulnerable to DOS attacks. If the parser is run on user supplied input, an attacker may supply content that causes the parser to get stuck (loop indefinitely until cancelled), to complete more slowly than usual, or to throw an unexpected exception. This effect may support a denial of service attack. The issue is patched in version 1.14.2. There are a few available workarounds. Users may rate limit input parsing, limit the size of inputs based on system resources, and/or implement thread watchdogs to cap and timeout parse runtimes.CVSS7.5HighEPSS6.69%RoutineCVE-2020-13936apache software foundation · apache velocity engine +171 moreVelocity Sandbox BypassAn attacker that is able to modify Velocity templates may execute arbitrary Java code or run arbitrary system commands with the same privileges as the account running the Servlet container. This applies to applications that allow untrusted users to upload/modify velocity templates running Apache Velocity Engine versions up to 2.2.CVSS9.0CriticalEPSS22.71%