Vulnerabilitycritical
Oracle critical patch advisory addresses 284 flaws, 33 critical
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2016-1000031 | Apache Commons FileUpload before 1.3.3 DiskFileItem File Manipulation Remote Code Execution | 9.8 | 34% | ||
| CVE-2016-4000 | Jython before 2.7.1rc1 allows attackers to execute arbitrary code via a crafted serialized PyFunction object | 9.8 | 6% | ||
| CVE-2017-5645 | In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially… | 9.8 | 90% | ||
| CVE-2018-11776 | Apache Struts Remote Code Execution via Missing or Wildcard Namespace | 8.1 | 100% | KEVPoC ×5 | KEV |
| CVE-2019-2453 | Vulnerability in the Oracle Performance Management component of Oracle E-Business Suite (subcomponent | 9.1 | 2% |
From the original article
2 min read at securityaffairs.com
Oracle released the first critical patch advisory for 2019 that addresses a total of 284 vulnerabilities, 33 of them are rated “critical”. Let’s give a close look at some of the vulnerabilities fixed by this patch advisory. The advisory fixed the CVE-2016-1000031 flaw, a remote code execution (RCE) bug in the Apache Commons FileUpload, disclosed in November last year.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.