CVE-2016-5455

概要

参考情報

• oracle.com/technetwork/security-advisory/cpujul2016-2881720.html · Patch
• securityfocus.com/bid/91787 · Third Party Advisory
• securityfocus.com/bid/91863
• securitytracker.com/id/1036401

communications messaging server のその他の脆弱性

• CVE-2022-23307高 8.8CVE-2020-9493 identified a deserialization issue that was present in Apache Chainsaw. Prior to Chainsaw V2.0 Chainsaw was a component of Apa…
• CVE-2022-23305緊急 9.8By design, the JDBCAppender in Log4j 1.2.x accepts an SQL statement as a configuration parameter where the values to be inserted are convert…
• CVE-2022-23302高 8.8JMSSink in all versions of Log4j 1.x is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j conf…
• CVE-2021-45105中 5.9Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referent…
• CVE-2021-4104高 7.5JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration. T…