Marek Cybul

**Name of the Vulnerable Software and Affected Versions** Oracle WebLogic Server versions 10.3.6.0.0 through 12.2.1.4.0 **Description** The issue is related to insufficient access controls in the Console component of Oracle WebLogic Server, allowing an unauthenticated attacker with network access via HTTP to compromise the server. Successful attacks can result in unauthorized read access to a subset of Oracle WebLogic Server accessible data. **Recommendations** For versions 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, and 12.2.1.4.0, consider restricting access to the Console component until a patch is available. As a temporary workaround, limit network access to the server via HTTP to minimize the risk of exploitation. Avoid using the HTTP protocol for sensitive operations until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Dell EMC NetWorker versions prior to 9.2.1.1 Dell EMC NetWorker versions prior to 9.1.1.6 Dell EMC NetWorker version 9.0.x Dell EMC NetWorker versions prior to 8.2.4.11 **Description** The issue arises from a buffer overflow condition in the 'nsrd' daemon when handling certain messages. This could be exploited by a remote unauthenticated attacker to cause a denial of service to the users of NetWorker systems. **Recommendations** For versions prior to 9.2.1.1, update to version 9.2.1.1 or later. For versions prior to 9.1.1.6, update to version 9.1.1.6 or later. For version 9.0.x, update to a later version. For versions prior to 8.2.4.11, update to version 8.2.4.11 or later.

**Name of the Vulnerable Software and Affected Versions** Splunk Hadoop Connect App (affected versions not specified) **Description** The issue allows remote authenticated users to execute arbitrary code due to a path traversal vulnerability. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.