Latest vulnerabilities for "oracle communications unified inventory management"

9.8

Exploited

First published (updated )

CVE-2022-22965

Traefik TraefikTraefik skips the router TLS configuration when the host header is an FQDN

7.5

First published (updated )

CVE-2022-23632

Apache Log4jA deserialization flaw in the Chainsaw component of Log4j 1 can lead to malicious code execution.

9.8

Zeroday

First published (updated )

CVE-2022-23307

Apache Log4jSQL injection in JDBC Appender in Apache Log4j V1

9.8

Zeroday

First published (updated )

CVE-2022-23305

Apache Log4jDeserialization of untrusted data in JMSSink in Apache Log4j 1.x

8.8

Zeroday

First published (updated )

CVE-2022-23302

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Oracle Retail Integration BusApache Log4j StrSubstitutor Uncontrolled Recursion Denial-of-Service Vulnerability

5.9

First published (updated )

CVE-2021-45105

redhat/log4jDeserialization of untrusted data in JMSAppender in Apache Log4j 1.2

8.1

First published (updated )

CVE-2021-4104

Oracle Utilities FrameworkXStream Remote Code Execution Vulnerability

8.5

Exploited

First published (updated )

CVE-2021-39144

Oracle Utilities FrameworkXStream is vulnerable to an Arbitrary Code Execution attack

8.8

First published (updated )

CVE-2021-39139

Oracle Utilities FrameworkXStream is vulnerable to an Arbitrary Code Execution attack

8.5

First published (updated )

CVE-2021-39147

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Oracle Utilities FrameworkXStream is vulnerable to an Arbitrary Code Execution attack

8.5

First published (updated )

CVE-2021-39151

Oracle Utilities FrameworkXStream is vulnerable to an Arbitrary Code Execution attack

8.5

First published (updated )

CVE-2021-39148

Oracle Utilities FrameworkXStream is vulnerable to an Arbitrary Code Execution attack

8.5

First published (updated )

CVE-2021-39145

Oracle Utilities FrameworkXStream is vulnerable to an Arbitrary Code Execution attack

8.5

First published (updated )

CVE-2021-39146

Oracle Utilities FrameworkXStream is vulnerable to an Arbitrary Code Execution attack

8.5

First published (updated )

CVE-2021-39149

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Oracle Utilities FrameworkXStream is vulnerable to an Arbitrary Code Execution attack

8.5

First published (updated )

CVE-2021-39153

Oracle Utilities FrameworkA Server-Side Forgery Request vulnerability in XStream via PriorityQueue unmarshaling

8.5

First published (updated )

CVE-2021-39150

Oracle Utilities FrameworkA Server-Side Forgery Request vulnerability in XStream via HashMap unmarshaling

8.5

First published (updated )

CVE-2021-39152

Oracle Utilities FrameworkXStream is vulnerable to an Arbitrary Code Execution attack

8.5

First published (updated )

CVE-2021-39154

Oracle Utilities FrameworkXStream is vulnerable to an Arbitrary Code Execution attack

8.5

First published (updated )

CVE-2021-39141

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Oracle Utilities FrameworkXStream can cause a Denial of Service

6.5

First published (updated )

CVE-2021-39140

Oracle Utilities FrameworkApache Ant ZIP, and ZIP based, archive denial of service vulerability

5.5

First published (updated )

CVE-2021-36374

Oracle Banking ApisApache Commons Compress 1.0 to 1.20 denial of service vulnerability

7.5

First published (updated )

CVE-2021-36090

Oracle Utilities FrameworkApache Ant TAR archive denial of service vulnerability

5.5

First published (updated )

CVE-2021-36373

Oracle Insurance Rules PaletteIn Spring Framework, versions 5.2.x prior to 5.2.15 and versions 5.3.x prior to 5.3.7, a WebFlux app…

7.8

First published (updated )

CVE-2021-22118

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Oracle Communications Unified Inventory ManagementXStream is vulnerable to a Remote Command Execution attack

8.8

First published (updated )

CVE-2021-29505

Oracle Communications Unified Inventory ManagementXStream is vulnerable to a Remote Command Execution attack

9.9

First published (updated )

CVE-2021-21345

Oracle Communications Unified Inventory ManagementXStream can cause a Denial of Service

7.5

First published (updated )

CVE-2021-21341

Oracle Communications Unified Inventory ManagementA Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host

8.6

First published (updated )

CVE-2021-21349

Oracle Communications Unified Inventory ManagementXStream is vulnerable to an Arbitrary File Deletion on the local host when unmarshalling as long as the executing process has sufficient rights

7.5

First published (updated )

CVE-2021-21343

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Oracle Communications Unified Inventory ManagementA Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host

9.1

First published (updated )

CVE-2021-21342

Oracle Communications Unified Inventory ManagementXStream is vulnerable to an Arbitrary Code Execution attack

9.8

First published (updated )

CVE-2021-21350

Oracle Communications Unified Inventory ManagementXStream is vulnerable to an attack using Regular Expression for a Denial of Service (ReDos)

7.8

First published (updated )

CVE-2021-21348

Oracle Communications Unified Inventory ManagementXStream is vulnerable to an Arbitrary Code Execution attack

9.8

First published (updated )

CVE-2021-21346

Oracle Communications Unified Inventory ManagementXStream is vulnerable to an Arbitrary Code Execution attack

9.8

First published (updated )

CVE-2021-21347

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Oracle Communications Unified Inventory ManagementXStream is vulnerable to an Arbitrary Code Execution attack

9.8

First published (updated )

CVE-2021-21344

Oracle Communications Unified Inventory ManagementXStream is vulnerable to an Arbitrary Code Execution attack

9.1

First published (updated )

CVE-2021-21351

Pivotal Software Spring SecuritySpring Security 5.4.x prior to 5.4.4, 5.3.x prior to 5.3.8.RELEASE, 5.2.x prior to 5.2.9.RELEASE, an…

9

First published (updated )

CVE-2021-22112

Oracle Primavera UnifierFasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadg…

9.8

First published (updated )

CVE-2020-36180

Oracle Primavera UnifierFasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadg…

9.8

First published (updated )

CVE-2020-36182

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Oracle Primavera UnifierFasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadg…

9.8

First published (updated )

CVE-2020-36183

Oracle Primavera GatewayFasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadg…

9.8

First published (updated )

CVE-2020-36179

Oracle Primavera UnifierFasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadg…

9.8

First published (updated )

CVE-2020-36181

Oracle Banking PlatformFasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadg…

9.8

First published (updated )

CVE-2020-36189

Oracle Primavera GatewayA flaw was found in jackson-databind. FasterXML mishandles the interaction between serialization gad…

8.1

First published (updated )

CVE-2020-35728

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Oracle Primavera UnifierFasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadg…

9.8

First published (updated )

CVE-2020-36188

Oracle Primavera UnifierFasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadg…

9.8

First published (updated )

CVE-2020-36185

Oracle Primavera UnifierFasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadg…

9.8

First published (updated )

CVE-2020-36186

Oracle Primavera UnifierFasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadg…

9.8

First published (updated )

CVE-2020-36184

Oracle Primavera UnifierFasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadg…

9.8

First published (updated )

CVE-2020-36187

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.