Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

11 records

Vendor: Oracle Component: Goldengate Stream Analytics Clear all filters
TI-2019-11097 CVE-2019-14893 · GHSA-qmqc-x3r4-6v39

Information disclosure in Red Hat jackson-databind

Priority MEDIUM 56

A flaw was discovered in FasterXML jackson-databind in all versions before 2.9.10 and 2.10.0, where it would permit polymorphic deserialization of malicious objects using the xalan JNDI gadget when used in conjunction wi…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04091 Published 2020-03-02 Partial fix · 2.9.10 CWE-200
TI-2019-10718 CVE-2019-14379 · GHSA-6fpp-rgj9-8rwc

SubTypeValidator.java in FasterXML jackson-databind before 2.9.9.2 mishandles default…

Priority MEDIUM 60

SubTypeValidator.java in FasterXML jackson-databind before 2.9.9.2 mishandles default typing when ehcache is used (because of net.sf.ehcache.transaction.manager.DefaultTransactionManagerLookup), leading to remote code ex…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.08045 Published 2019-07-29 Partial fix · 2.9.9.2, 2.8.11.4 +1 CWE-1321
TI-2019-00177 CVE-2019-0201 · GHSA-2hw2-62cp-p9p7

Missing authorization in Apache ZooKeeper

Priority LOW 39

An issue is present in Apache ZooKeeper 1.0.0 to 3.4.13 and 3.5.0-alpha to 3.5.4-beta.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.09712 Published 2019-05-23 Partial fix · 3.4.14, 3.5.5 CWE-862
TI-2019-00195 CVE-2019-0222 · GHSA-jpv3-g4cc-6vfx

Code injection in Apache ActiveMQ

Priority MEDIUM 47

In Apache ActiveMQ 5.0.0 - 5.15.8, unmarshalling corrupt MQTT frame can lead to broker Out of Memory exception making it unresponsive.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.12033 Published 2019-03-28 Partial fix · 5.15.9 CWE-94
TI-2018-05789 CVE-2018-8012 · GHSA-ccqf-c5hq-77mp

Missing authorization in Apache ZooKeeper

Priority MEDIUM 44

No authentication/authorization is enforced when a server attempts to join a quorum in Apache ZooKeeper before 3.4.10, and 3.5.0-alpha through 3.5.3-beta.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.08415 Published 2018-05-21 Partial fix · 3.4.10, 3.5.4-beta CWE-862