CVE-2022-0227 — Framework vulnerability

4 documents3 sources
Severity
7.5MEDIUM
No vector
EPSS
No EPSS data
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Silverstripe Framework
Timeline
PublishedFeb 6
Latest updateJul 15

Description

Business Logic Errors in SilverStripe Framework SilverStripe Framework prior to version 4.10.1 is vulnerable to business logic errors.

Affected Packages1 packages

▶Packagistsilverstripe/framework< 4.10.1

🔴Vulnerability Details

2
GHSA
Business Logic Errors in SilverStripe Framework↗2022-02-06
▶
OSV
Business Logic Errors in SilverStripe Framework↗2022-02-06
▶

📋Vendor Advisories

2
Oracle
Oracle Oracle Fusion Middleware Risk Matrix: BI Publisher Security (Apache Axis) — CVE-2019-0227↗2022-07-15
▶
Oracle
Oracle Oracle Fusion Middleware Risk Matrix: Oracle Directory Services Mngr (Apache Axis) — CVE-2019-0227↗2022-04-15
▶