CVE:CVE-2020-7226
CNNVD:CNNVD-202001-1087
Cryptacular是开源的用于 Java的Bouncy Castle Crypto API的补充。
cryptacular 存在跨站脚本漏洞，该漏洞源于在CiphertextHeader.java中解码操作期间过多的内存分配。
solution:Upgrade vt cryptacular to a higher version than 1.1.4,1.2.4,and avoid the version (,1.1.4),[1.2.0,1.2.4); Upgrade oracle communications_services_gatekeeper to a higher version than 7.0,and avoid the version 7.0; Upgrade oracle webcenter_sites to a higher version than 12.2.1.3.0,12.2.1.4.0,and avoid the version 12.2.1.3.0,12.2.1.4.0; Upgrade oracle weblogic_server to a higher version than 12.2.1.4.0,14.1.1.0.0,and avoid the version 12.2.1.4.0,14.1.1.0.0