Oracle Sd Wan Aware vulnerabilities
5 vulnerabilities
Known vulnerabilities in Oracle Sd Wan Aware, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
RoutineCVE-2021-21705php group · php +13 moreIncorrect URL validation in FILTER_VALIDATE_URLIn PHP versions 7.3.x below 7.3.29, 7.4.x below 7.4.21 and 8.0.x below 8.0.8, when using URL validation functionality via filter_var() function with FILTER_VALIDATE_URL parameter, an URL with invalid password field can be accepted as valid. This can lead to the code incorrectly parsing the URL and potentially leading to other security implications - like contacting a wrong server or making a wrong access decision.CVSS5.3MediumEPSS2.09%PrioritiseCVE-2020-14701oracle corporation · sd-wan aware +1 moreoracle corporation sd-wan awareVulnerability in the Oracle SD-WAN Aware product of Oracle Communications Applications (component: User Interface). The supported version that is affected is 8.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle SD-WAN Aware. While the vulnerability is in Oracle SD-WAN Aware, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle SD-WAN Aware. CVSS 3.1 Base Score 10.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H).CVSS10.0CriticalEPSS2.09%PrioritiseCVE-2020-10878fedoraproject · fedora +19 morefedoraproject fedoraPerl before 5.30.3 has an integer overflow related to mishandling of a "PL_regkind[OP(n)] == NOTHING" situation. A crafted regular expression could lead to malformed bytecode with a possibility of instruction injection.CVSS8.6HighEPSS4.88%RoutineCVE-2020-1927apache · apache_http_server +17 moreapache apache_http_serverIn Apache HTTP Server 2.4.0 to 2.4.41, redirects configured with mod_rewrite that were intended to be self-referential might be fooled by encoded newlines and redirect instead to an an unexpected URL within the request URL.CVSS6.1MediumEPSS56.69%RoutineCVE-2019-10219hibernate · hibernate-validator +191 morehibernate hibernate-validatorA vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.CVSS6.5MediumEPSS2.16%