Know every vulnerabilitybefore it knows you.
DevGuard continuously monitors your dependencies and alerts you when CVEs like this one affect your stack — with real-time threat intelligence built for developers.
- Feiten
Oracle heeft kwetsbaarheden verholpen in Oracle Analytics.
- Interpretaties
De kwetsbaarheden stellen ongeauthenticeerde kwaadwillenden in staat om toegang te krijgen tot gevoelige gegevens, Denial-of-Service aan te richten, en zelfs volledige controle over systemen te verkrijgen. Specifieke kwetsbaarheden in Oracle Business Intelligence Enterprise Edition kunnen leiden tot ongeautoriseerde toegang en manipulatie van gegevens via HTTP. Daarnaast zijn er kwetsbaarheden die Denial-of-Service kunnen veroorzaken door onjuiste invoer of misbruik van systeemfunctionaliteiten.
- Oplossingen
Oracle heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.
- Kans
medium
- Schade
high
- CWE-399
CWE-399
- CWE-669
Incorrect Resource Transfer Between Spheres
- CWE-178
Improper Handling of Case Sensitivity
- CWE-311
Missing Encryption of Sensitive Data
- CWE-639
Authorization Bypass Through User-Controlled Key
- CWE-125
Out-of-bounds Read
- CWE-404
Improper Resource Shutdown or Release
- CWE-284
Improper Access Control
- CWE-401
Missing Release of Memory after Effective Lifetime
- CWE-94
Improper Control of Generation of Code ('Code Injection')
- CWE-400
Uncontrolled Resource Consumption
- CWE-770
Allocation of Resources Without Limits or Throttling
- CWE-502
Deserialization of Untrusted Data
- CWE-787
Out-of-bounds Write
- CWE-73
External Control of File Name or Path
- CWE-835
Loop with Unreachable Exit Condition ('Infinite Loop')
- CWE-20
Improper Input Validation
- CWE-87
Improper Neutralization of Alternate XSS Syntax
- CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Continuously monitor your dependencies and get alerted when vulnerabilities like this one affect your stack.
Checkout DevGuard