| Package | Affected versions | Patched versions |
|---|---|---|
| ckeditor | ≥ 4.0, < 4.16 | 4.16 |
| agile product lifecycle management | = 9.3.5= 9.3.6 | |
| application express | < 21.1.0 | 21.1.0 |
| financial services analytical applications infrastructure | = 8.1.0= 8.1.1≥ 8.0.6, ≤ 8.0.9 | |
| jd edwards enterpriseone tools | < 9.2.6.0 | 9.2.6.0 |
| siebel ui framework | < 21.9 | 21.9 |
| webcenter sites | = 12.2.1.3.0= 12.2.1.4.0 | |
| ckeditor4-dev | < 4.16 | 4.16 |
It was possible to execute a ReDoS-type attack inside CKEditor 4 before 4.16 by persuading a victim to paste crafted text into the Styles input of specific dialogs (in the Advanced Tab for Dialogs plugin).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free