Vulnerabilities (CVE)

Filtered by vendor Vt Subscribe
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-7226 2 Oracle, Vt 4 Communications Services Gatekeeper, Webcenter Sites, Weblogic Server and 1 more 2023-12-10 5.0 MEDIUM 7.5 HIGH
CiphertextHeader.java in Cryptacular 1.2.3, as used in Apereo CAS and other products, allows attackers to trigger excessive memory allocation during a decode operation, because the nonce array length associated with "new byte" may depend on untrusted input within the header of encoded data.