SB2024041767 - Multiple vulnerabilities in Oracle Documaker

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2024041767

SB2024041767 - Multiple vulnerabilities in Oracle Documaker

Published: April 17, 2024 Updated: May 23, 2024

Security Bulletin ID SB2024041767
Severity
High
Patch available
YES
Number of vulnerabilities 6
Exploitation vector Remote access
Highest impact Code execution

Breakdown by Severity

High 50% Medium 33% Low 17%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 6 secuirty vulnerabilities.


1) Integer overflow (CVE-ID: CVE-2023-37536)

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to integer overflow. A remote attacker can pass specially crafted data to the application, trigger integer overflow and perform a denial of service (DoS) attack.


2) Cross-site scripting (CVE-ID: CVE-2024-24816)

The disclosed vulnerability allows a remote attacker to perform cross-site scripting (XSS) attacks.

The vulnerability exists due to insufficient sanitization of user-supplied data to 4 samples that are shipped with production code. A remote attacker can trick the victim to follow a specially crafted link and execute arbitrary HTML and script code in user's browser in context of vulnerable website.

Successful exploitation of this vulnerability may allow a remote attacker to steal potentially sensitive information, change appearance of the web page, perform phishing and drive-by-download attacks.


3) Exposed dangerous method or function (CVE-ID: CVE-2022-41853)

The vulnerability allows a remote attacker to compromise the affected system.

The vulnerability exists due to missing authorization when using java.sql.Statement or java.sql.PreparedStatement in hsqldb. By default it is allowed to call any static method of any Java class in the classpath resulting in code execution.


4) Improper input validation (CVE-ID: CVE-2021-41616)

The vulnerability allows a remote privileged user to execute arbitrary code.

The vulnerability exists due to improper input validation within the Enterprise Edition (Apache DB DdlUtils) component in Oracle Documaker. A remote privileged user can exploit this vulnerability to execute arbitrary code.


5) Command Injection (CVE-ID: CVE-2021-43113)

The vulnerability allows a remote attacker to compromise the affected system.

The vulnerability exists due to improper input validation within the GhostscriptHelper.java when processing data passed via a CompareTool filename. A remote attacker can pass a specially crafted file to the application and execute arbitrary Java code on the system.


6) LDAP injection (CVE-ID: CVE-2022-46337)

The vulnerability allows a remote attacker to bypass authentication process.

The vulnerability exists due to improper input validation when processing DLAP queries. A remote non-authenticated attacker can send a specially crafted LDAP query to the application, bypass authentication process and gain unauthorized access to the application.


Remediation

Install update from vendor's website.

References