VDB

BDU%3A2019-02936

BDU%3A2019-02936 PUBLISHED CVSS 10 CRITICAL

Уязвимость Java-библиотеки для преобразования объектов в XML или JSON формат XStream, связанная с восстановлением в памяти недостоверных данных, позволяющая нарушителю выполнить произвольные команды

Risk Scores

CVSS 2.0
10

Affected Products

VendorProductVersions
Oracle Corp., Xstream ProjectWebLogic Server, Fusion Middleware MapViewer, Primavera Unifier, Oracle Endeca Information Discovery Integrator, WebCenter Portal, Oracle Retail Order Broker, XStream, Oracle Data Integrator, Utilities Framework, Retail Xstore Point of Service, Oracle Communications Unified Inventory Management, Oracle Financial Services Market Risk Measurement and Management, Oracle Endeca Information Discovery Studio, Oracle Financial Services Asset Liability Management, Financial Services Profitability Management, Financial Services Funds Transfer Pricing, Communications MetaSolv Solution, Financial Services Analytical Applications Infrastructure, Oracle SD-WAN Edge, Communications Diameter Signaling Router, Communications BRM - Elastic Charging Engine, Banking Platform, Insurance Allocation Manager for Enterprise Profitability, Oracle Retail Financial Integration, Retail Integration Bus, Oracle Retail Service Backbone, Oracle Real-Time Decision Server, MySQL Enterprise Monitor, Oracle Business Activity Monitoring

Timeline

  • Aug 20, 2019 CVE Published
  • Mar 23, 2021 CVE Updated

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›