CVE-2016-8322

概要

参考情報

• oracle.com/technetwork/security-advisory/cpujan2017-2881727.html · Patch
• securityfocus.com/bid/95608 · Third Party Advisory
• securitytracker.com/id/1037636

flexcube core banking のその他の脆弱性

• CVE-2021-29425中 4.8In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like "//../foo", or "\\..\f…
• CVE-2020-27216高 7.0In Eclipse Jetty versions 1.0 thru 9.4.32.v20200930, 10.0.0.alpha1 thru 10.0.0.beta2, and 11.0.0.alpha1 thru 11.0.0.beta2O, on Unix like sys…
• CVE-2020-10683緊急 9.8dom4j before 2.0.3 and 2.1.x before 2.1.3 allows external DTDs and External Entities by default, which might enable XXE attacks. However, th…
• CVE-2020-9488低 3.7Improper validation of certificate with host mismatch in Apache Log4j SMTP appender. This could allow an SMTPS connection to be intercepted …
• CVE-2020-2955中 6.3Vulnerability in the Oracle FLEXCUBE Core Banking product of Oracle Financial Services Applications (component: Transaction Processing). The…