Configuration Manager (Oracle) - vulnerabilities (CVEs)

6 CVEs, 0 in the last 30 days, 9 known versions, newest CVE from 2020-07-15. Vendor: Oracle.

CVEs of Configuration Manager

• CVE-2020-2984 - CVSS 7.1 (high), 2020-07-15: Vulnerability in the Oracle Configuration Manager product of Oracle Enterprise Manager (component: Discovery and collection script). The supported version…
• CVE-2020-12723 - CVSS 7.5 (high), 2020-06-05: regcomp.c in Perl before 5.30.3 allows a buffer overflow via a crafted regular expression because of recursive S_study_chunk calls.
• CVE-2020-10543 - CVSS 8.2 (high), 2020-06-05: Perl before 5.30.3 on 32-bit platforms allows a heap-based buffer overflow because nested regular expression quantifiers have an integer overflow.
• CVE-2020-10878 - CVSS 8.6 (high), 2020-06-05: Perl before 5.30.3 has an integer overflow related to mishandling of a "PL_regkind[OP(n)] == NOTHING" situation. A crafted regular expression could lead to…
• CVE-2017-5645 - CVSS 9.8 (critical), 2017-04-17: In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially…
• CVE-2016-2381 - CVSS 7.5 (high), 2016-04-08: Perl might allow context-dependent attackers to bypass the taint protection mechanism in a child process via duplicate environment variables in envp.