Xu Yuanzhen

The issue is related to an unchecked logger injection in the IBM Db2 JDBC Driver, which could allow a remote authenticated attacker to execute arbitrary code on the system. This can be achieved by sending a specially crafted request using the `traceFile` property. The vulnerability is also described as being related to incorrect code generation management.

The issue is related to incorrect code generation management in the IBM DB2 database management system's JDBC client driver. It allows a remote attacker to execute arbitrary code on the system by sending a specially crafted request using the `pluginClassName` class. This is caused by an unchecked class instantiation when providing plugin classes.

The issue is related to incorrect code generation management in the IBM DB2 JDBC driver, which could allow a remote authenticated attacker to execute arbitrary code. By sending a specially crafted request using the `clientRerouteServerListJNDIName` property, an attacker could exploit this to execute arbitrary code on the system.

The issue allows for remote code execution via JNDI injection when the driver code or the application using the driver does not verify the supplied LDAP URL in the Connect String.

A difficult to exploit vulnerability in MySQL Connectors allows a high privileged attacker with network access via multiple protocols to compromise the system. Successful attacks can result in unauthorized access to critical data or complete access to all accessible data and the ability to cause a hang or frequently repeatable crash of MySQL Connectors.

The issue is related to insufficient access control in the Console component of Oracle WebLogic Server, allowing a remote attacker to gain full control over the application via the HTTP protocol. This can result in the takeover of Oracle WebLogic Server. The vulnerability is easily exploitable and can be used by a high-privileged attacker with network access.

The issue is related to insufficient input validation in the Oracle WebLogic Server, allowing a remote attacker to execute arbitrary code via the IIOP protocol. This can result in the takeover of the Oracle WebLogic Server. The vulnerability can be easily exploited by an unauthenticated attacker with network access.

The issue is related to inadequate access control in the Console component of Oracle WebLogic Server, allowing an unauthenticated attacker with network access via HTTP to compromise the server. Successful attacks require human interaction from a person other than the attacker and can result in unauthorized update, insert, or delete access to some of the server's accessible data.