Latest vulnerabilities for "oracle commerce guided search" 11.3.2

6.1

First published (updated )

CVE-2023-22029

Oracle Commerce Guided SearchVulnerability in the Oracle Commerce Guided Search product of Oracle Commerce (component: Tools and …

7.5

First published (updated )

CVE-2022-21466

Oracle Communications Cloud Native Core Network Repository FunctionIn spring cloud gateway versions prior to 3.1.1+ , applications that are configured to enable HTTP2 …

5.5

First published (updated )

CVE-2022-22946

Oracle Communications Cloud Native Core Network Repository FunctionVMware Spring Cloud Gateway Code Injection Vulnerability

critical

10

Exploited

First published (updated )

CVE-2022-22947

Oracle Retail Xstore Point of ServiceDenial of Service by injecting highly recursive collections or maps in XStream

7.5

First published (updated )

CVE-2021-43859

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Oracle Banking ApisHTML comments vulnerability allowing to execute JavaScript code

8.2

First published (updated )

CVE-2021-41165

Oracle Banking ApisAdvanced Content Filter (ACF) vulnerability allowing to execute JavaScript code using malformed HTML

8.2

First published (updated )

CVE-2021-41164

Oracle Retail Financial IntegrationBypass of the secureValidation property

7.5

First published (updated )

CVE-2021-40690

Oracle Communications Cloud Native Core Network Repository Functioncurl. Multiple issues were addressed by updating to curl version 7.79.1.

6.1

First published (updated )

CVE-2021-22947

Oracle Communications Cloud Native Core Network Repository Functioncurl. Multiple issues were addressed by updating to curl version 7.79.1.

7.5

First published (updated )

CVE-2021-22946

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Oracle Banking Digital ExperienceLast updated 24 July 2024

7.5

First published (updated )

CVE-2021-37137

Oracle Banking Digital ExperienceLast updated 24 July 2024

7.5

First published (updated )

CVE-2021-37136

Oracle Utilities FrameworkXStream Remote Code Execution Vulnerability

8.5

Exploited

First published (updated )

CVE-2021-39144

Oracle Utilities FrameworkXStream is vulnerable to an Arbitrary Code Execution attack

8.8

First published (updated )

CVE-2021-39139

Oracle Utilities FrameworkXStream is vulnerable to an Arbitrary Code Execution attack

8.5

First published (updated )

CVE-2021-39147

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Oracle Utilities FrameworkXStream is vulnerable to an Arbitrary Code Execution attack

8.5

First published (updated )

CVE-2021-39151

Oracle Utilities FrameworkXStream is vulnerable to an Arbitrary Code Execution attack

8.5

First published (updated )

CVE-2021-39148

Oracle Utilities FrameworkXStream is vulnerable to an Arbitrary Code Execution attack

8.5

First published (updated )

CVE-2021-39145

Oracle Utilities FrameworkXStream is vulnerable to an Arbitrary Code Execution attack

8.5

First published (updated )

CVE-2021-39146

Oracle Utilities FrameworkXStream is vulnerable to an Arbitrary Code Execution attack

8.5

First published (updated )

CVE-2021-39149

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Oracle Utilities FrameworkA Server-Side Forgery Request vulnerability in XStream via PriorityQueue unmarshaling

8.5

First published (updated )

CVE-2021-39150

Oracle Utilities FrameworkA Server-Side Forgery Request vulnerability in XStream via HashMap unmarshaling

8.5

First published (updated )

CVE-2021-39152

Oracle Utilities FrameworkXStream is vulnerable to an Arbitrary Code Execution attack

8.5

First published (updated )

CVE-2021-39154

Oracle Utilities FrameworkXStream is vulnerable to an Arbitrary Code Execution attack

8.5

First published (updated )

CVE-2021-39141

Oracle Utilities FrameworkXStream can cause a Denial of Service

6.5

First published (updated )

CVE-2021-39140

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Fedoraproject FedoraExecution of JavaScript code using malformed HTML in ckeditor

7.3

First published (updated )

CVE-2021-37695

Fedoraproject FedoraArbitrary HTML injection vulnerability in ckeditor

5.4

First published (updated )

CVE-2021-32809

Fedoraproject FedoraCross-site scripting in ckeditor via abuse of undo functionality

7.6

First published (updated )

CVE-2021-32808

Oracle Insurance Policy AdministrationApache Commons Compress 1.6 to 1.20 denial of service vulnerability

7.5

First published (updated )

CVE-2021-35515

Oracle Banking Digital ExperienceApache Commons Compress 1.6 to 1.20 denial of service vulnerability

7.5

First published (updated )

CVE-2021-35516

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Oracle Banking ApisApache Commons Compress 1.0 to 1.20 denial of service vulnerability

7.5

First published (updated )

CVE-2021-36090

Oracle Banking ApisApache Commons Compress 1.1 to 1.20 denial of service vulnerability

7.5

First published (updated )

CVE-2021-35517

Oracle Insurance Rules PaletteIn Spring Framework, versions 5.2.x prior to 5.2.15 and versions 5.3.x prior to 5.3.7, a WebFlux app…

7.8

First published (updated )

CVE-2021-22118

Oracle Banking ApisPossible limited path traversal vulnerabily in Apache Commons IO

5.8

First published (updated )

CVE-2021-29425

Tenable Nessus Network MonitorCA certificate check bypass with X509_V_FLAG_X509_STRICT

7.4

First published (updated )

CVE-2021-3450

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Oracle Utilities FrameworkAn issue was discovered in Legion of the Bouncy Castle BC Java 1.65 and 1.66. The OpenBSDBCrypt.chec…

8.1

First published (updated )

CVE-2020-28052

Oracle Primavera UnifierInput Validation

7.5

First published (updated )

CVE-2020-13956

Oracle Retail Xstore Point of ServiceRFD Protection Bypass via jsessionid

8.7

First published (updated )

CVE-2020-5421

Oracle Primavera UnifierTemp directory permission issue in Guava

5.4

First published (updated )

CVE-2020-8908

Oracle Financial Services Crime And Compliance Management StudioCommand Injection

7.2

First published (updated )

CVE-2020-7712

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Apache TomcatLast updated 24 July 2024

7.5

First published (updated )

CVE-2020-13935

redhat/eap7-apache-cxfXSS

6.1

First published (updated )

CVE-2019-17573

redhat/eap7-apache-cxfApache CXF could allow a remote attacker to obtain sensitive information, caused by a flaw when ship…

7.5

First published (updated )

CVE-2019-12423

Oracle OpenJDKLast updated 24 July 2024

8.1

First published (updated )

CVE-2020-2604

Apache CXFApache CXF is vulnerable to a denial of service, caused by the failure to restrict the number of mes…

6.5

First published (updated )

CVE-2019-12406

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

redhat/cxfA flaw was found in cxf in versions prior to 3.2.11 and 3.3.4. The access token services do not prop…

critical

9.8

First published (updated )

CVE-2019-12419

Oracle Retail Price ManagementXSS