Rewterz Threat Advisory – CVE-2016-1000031 – Oracle Identity Analytics Apache Commons FileUpload Deserialization Security Bypass Vulnerability
April 18, 2019Rewterz Threat Advisory – Oracle Siebel CRM Update for Multiple Vulnerabilities
April 18, 2019Severity
Medium
Analysis summary
jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed.
Impact
Cross Site Scripting
Affected Vendors
Oracle
Affected Products
Oracle Fusion Middleware MapViewer 12.2.1.3.0.
Remediation
Apply update.
Rewterz publishes threat advisories ahead of mainstream cybersecurity media, informed by an AI-Native Autonomous SOC that sees regional threat actor activity in real time. Subscribe to receive each new advisory as it publishes, plus a monthly Middle East threat landscape brief drawn from our own SOC telemetry. For teams evaluating their detection coverage, a 30-minute consultation with a senior analyst is also available, at your pace, when you're ready.
