Latest vulnerabilities for "oracle business process management suite"

9.8

Zeroday

First published (updated )

CVE-2022-23307

Apache Log4jSQL injection in JDBC Appender in Apache Log4j V1

9.8

Zeroday

First published (updated )

CVE-2022-23305

Apache Log4jDeserialization of untrusted data in JMSSink in Apache Log4j 1.x

8.8

Zeroday

First published (updated )

CVE-2022-23302

redhat/log4jDeserialization of untrusted data in JMSAppender in Apache Log4j 1.2

8.1

First published (updated )

CVE-2021-4104

redhat/eap7-apache-cxfCrafted input may cause the jsoup HTML and XML parser to get stuck, timeout, or throw unchecked exceptions

7.5

First published (updated )

CVE-2021-37714

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Oracle Insurance Policy AdministrationApache Commons Compress 1.6 to 1.20 denial of service vulnerability

7.5

First published (updated )

CVE-2021-35515

Oracle Banking Digital ExperienceApache Commons Compress 1.6 to 1.20 denial of service vulnerability

7.5

First published (updated )

CVE-2021-35516

Oracle Banking ApisApache Commons Compress 1.0 to 1.20 denial of service vulnerability

7.5

First published (updated )

CVE-2021-36090

Oracle Banking ApisApache Commons Compress 1.1 to 1.20 denial of service vulnerability

7.5

First published (updated )

CVE-2021-35517

Oracle Primavera UnifierInfoleak

5.5

First published (updated )

CVE-2020-17521

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Oracle Retail Integration BusLast updated 24 July 2024

6.5

First published (updated )

CVE-2020-1945

Oracle Business Process Management SuiteA carefully crafted or corrupt PSD file can cause an infinite loop in Apache Tika's PSDParser in ver…

5.5

First published (updated )

CVE-2020-1951

Oracle Business Process Management SuiteA carefully crafted or corrupt PSD file can cause excessive memory usage in Apache Tika's PSDParser …

5.5

First published (updated )

CVE-2020-1950

Oracle Banking PlatformOracle ADF Faces Deserialization of Untrusted Data Remote Code Execution Vulnerability

9.8

First published (updated )

CVE-2019-2904

Apache TomEEThe ASN.1 parser in Bouncy Castle Crypto (aka BC Java) 1.63 can trigger a large attempted memory all…

7.5

First published (updated )

CVE-2019-17359

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Oracle Retail Price ManagementXSS

6.5

First published (updated )

CVE-2019-10219

Oracle Business Process Management SuiteVulnerability in the Oracle Business Process Management Suite component of Oracle Fusion Middleware …

8.2

First published (updated )

CVE-2019-2706

redhat/eap7-elytron-webXEE

9.8

First published (updated )

CVE-2020-10683

Oracle Application Testing SuiteXSS, Input Validation

7.5

First published (updated )

CVE-2019-11358

Oracle Primavera P6 Enterprise Project Portfolio ManagementFasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leve…

9.8

First published (updated )

CVE-2018-19360

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Oracle Primavera P6 Enterprise Project Portfolio ManagementFasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leve…

9.8

First published (updated )

CVE-2018-19361

Oracle Primavera P6 Enterprise Project Portfolio ManagementFasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leve…

9.8

First published (updated )

CVE-2018-19362

Oracle Financial Services Analytical Applications InfrastructureFasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to execute arbitrary code b…

9.8

First published (updated )

CVE-2018-14718

Oracle Financial Services Analytical Applications InfrastructureFasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to execute arbitrary code b…

9.8

First published (updated )

CVE-2018-14719

Oracle Utilities Network Management SystemVulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS…

7.5

First published (updated )

CVE-2018-3246

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Oracle Business Process Management SuiteXEE

7.5

First published (updated )

CVE-2018-11761

Oracle Business Process Management SuiteVulnerability in the Oracle Business Process Management Suite component of Oracle Fusion Middleware …

9.1

First published (updated )

CVE-2018-3100

Oracle Communications Diameter Signaling RouterLegion of the Bouncy Castle Java Cryptography APIs could allow a remote attacker to execute arbitrar…

9.8

First published (updated )

CVE-2018-1000613

Oracle Business Process Management SuiteBouncy Castle could provide weaker than expected security, caused by an error in the Low-level inter…

7.5

First published (updated )

CVE-2018-1000180

Oracle Agile Product Lifecycle Management for ProcessXSS

6.1

First published (updated )

CVE-2015-9251

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.