CVE-2017-10267

概要

参考情報

• oracle.com/technetwork/security-advisory/alert-cve-2017-10269-4021872.html · Patch
• securityfocus.com/bid/101875 · Third Party Advisory

tuxedo のその他の脆弱性

• CVE-2022-23307高 8.8CVE-2020-9493 identified a deserialization issue that was present in Apache Chainsaw. Prior to Chainsaw V2.0 Chainsaw was a component of Apa…
• CVE-2022-23305緊急 9.8By design, the JDBCAppender in Log4j 1.2.x accepts an SQL statement as a configuration parameter where the values to be inserted are convert…
• CVE-2022-23302高 8.8JMSSink in all versions of Log4j 1.x is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j conf…
• CVE-2021-4104高 7.5JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration. T…
• CVE-2019-0227高 7.5A Server Side Request Forgery (SSRF) vulnerability affected the Apache Axis 1.4 distribution that was last released in 2006. Security and bu…