Remove Code Remove Database Remove Java Remove Servers
article thumbnail

Why the supposedly fixed CVE-2020-36641 vulnerability is still exploitable—And what to do about it

Dynatrace

In May 2023 the critical vulnerability CVE-2020-36641 in the Java library aXMLRPC was published in the National Vulnerability Database (NVD). XML external entity (XXE) exploit The aXMLRPC library allows its users to connect to a server and perform RPC calls using the XML-RPC protocol over HTTP.

Java 208
article thumbnail

Log4j 2 Vulnerability: Identifying and Minimizing Production Risk

Dynatrace

The National Vulnerability Database describes the exploit here. It results in remote code execution (RCE) by submitting a specially composed request. Sensitive Data Access – Do the vulnerable Java processes access critical databases or file systems in the environment? Public Internet Exposure. Sensitive Data Access.

Java 241
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Trending Sources

article thumbnail

Dynatrace memory analysis helps Product Architects identify unknown unknowns

Dynatrace

While memory allocation analysis can show wasteful or inefficient code, it can also reveal different problems, one of which we’ll examine in this blog post. We recently extended the pre-shipped code-level API definitions to group logical parts of our code so they’re consistently highlighted in all code-level views.

Java 211
article thumbnail

Unmatched scalability and security of Dynatrace extensions now available for all supported technologies: 7 reasons to migrate your JMX and Python plugins

Dynatrace

already address SNMP, WMI, SQL databases, and Prometheus technologies, serving the monitoring needs of hundreds of Dynatrace customers. focused on technology coverage, building on the flexibility of JMX for Java and Python-based coded extensions for everything else. and focusing on a much-improved version 2.0 Extensions 2.0

article thumbnail

Mastering MongoDB® Timeout Settings

Scalegrid

How the MongoDB timeout is set up can significantly affect your application’s performance, no matter if you are an experienced MongoDB user or just starting with NoSQL databases. Typical applications are interacting with different database servers based on the business logic.

Java 130
article thumbnail

Log4Shell vulnerability: Identifying and minimizing production risk

Dynatrace

The National Vulnerability Database describes the vulnerability here. It results in remote code execution (RCE) by submitting a specially composed request. Sensitive Data Access – Do the vulnerable Java processes access critical databases or file systems in the environment? Public Internet Exposure. Sensitive Data Access.

Java 187
article thumbnail

Automatic connection of logs and traces accelerates AI-driven cloud analytics

Dynatrace

With PurePath ® distributed tracing and analysis technology at the code level, Dynatrace already provides the deepest possible insights into every transaction. Automatic contextualization of log data works out-of-the-box for popular languages like Java,NET, Node.js, Go, and PHP, as well as for NGiNX and Apache Web servers.

Analytics 226