VendorsOraclejd_edwards_world_securityall versions

Vulnerabilities

Oracle Jd Edwards World Security

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

14CVEs

SM2 Decryption Buffer Overflow

Published 2021-08-24 · Modified

9.8EPSS 0.878

Bad (EC)DHE parameters cause a client crash

Published 2017-05-04 · Modified

7.51 PoCEPSS 0.553

Segmentation fault in SSL_check_chain

Published 2020-04-21 · Modified

7.5EPSS 0.533

Integer overflow in CipherUpdate

Published 2021-02-16 · Modified

7.5EPSS 0.507

Read buffer overruns processing ASN.1 strings

Published 2021-08-24 · Modified

7.4EPSS 0.504

CA certificate check bypass with X509_V_FLAG_X509_STRICT

Published 2021-03-25 · Modified

7.4EPSS 0.183

NULL pointer deref in signature_algorithms processing

Published 2021-03-25 · Modified

5.9EPSS 0.635

0-byte record padding oracle

Published 2019-02-27 · Modified

5.9EPSS 0.171

Null pointer deref in X509_issuer_and_serial_hash()

Published 2021-02-16 · Modified

5.9EPSS 0.074

EDIPARTYNAME NULL pointer dereference

Published 2020-12-08 · Modified

5.9EPSS 0.071

BN_mod_exp may produce incorrect results on MIPS

Published 2022-01-28 · Modified

5.9EPSS 0.038

Improper validation of certificate with host mismatch in Apache Log4j SMTP appender. This could allow an SMTPS connection to be intercepted by a man-in-the-middle attack which could leak any log messages sent through that appender. Fixed in Apache Log4j 2.12.3 and 2.13.1

Published 2020-04-27 · Modified

4.3EPSS 0.081

Raccoon attack

Published 2020-09-09 · Modified

4.3EPSS 0.048

Incorrect SSLv2 rollback protection

Published 2021-02-16 · Modified

4.3EPSS 0.030