CVE:CVE-2015-8965
CNNVD:CNNVD-201704-274
Rogue Wave JViews是Rogue Wave公司的基于JAVA的用于做可视化展示的库。
Rogue Wave JViews 8.8 patch 21之前的版本和8.9 patch 1之前的8.9版本存在权限许可和访问控制问题漏洞。远程攻击者可利用该漏洞执行任意的Java代码。
solution:Upgrade perforce jviews to a higher version than 8.8,8.9,and avoid the version (,8.8],8.9; Upgrade oracle data_integrator to a higher version than 12.2.1.3.0,12.2.1.4.0,and avoid the version 12.2.1.3.0,12.2.1.4.0