CVE-2020-9314

概要

参考情報

• seclists.org/fulldisclosure/2020/May/31 · Mailing List
• oracle.com/support/lifetime-support · Vendor Advisory
• oracle.com/us/assets/lifetime-support-middleware-069163.pdf · Vendor Advisory
• wwws.nightwatchcybersecurity.com/2020/05/10/two-vulnerabilities-in-oracles-iplanet-web-server-cve-2020-9315-and-cve-2020-9314 · Third Party Advisory

iplanet web server のその他の脆弱性

• CVE-2020-9315高 7.5** PRODUCT NOT SUPPORTED WHEN ASSIGNED ** Oracle iPlanet Web Server 7.0.x has Incorrect Access Control for admingui/version URIs in the Admi…
• CVE-2017-10055中 6.1Vulnerability in the Oracle iPlanet Web Server component of Oracle Fusion Middleware (subcomponent: Admin Graphical User Interface). The sup…
• CVE-2016-1950高 8.8Heap-based buffer overflow in Mozilla Network Security Services (NSS) before 3.19.2.3 and 3.20.x and 3.21.x before 3.21.1, as used in Mozill…
• CVE-2015-7182緊急 9.8Heap-based buffer overflow in the ASN.1 decoder in Mozilla Network Security Services (NSS) before 3.19.2.1 and 3.20.x before 3.20.1, as used…
• CVE-2013-1620中 4.3The TLS implementation in Mozilla Network Security Services (NSS) does not properly consider timing side-channel attacks on a noncompliant M…