Filters

Versions

17.12
81
18.8
80
17.7
74
19.12
68
16.2
50
16.1
49
20.12
45
21.12
17
17.2
12
17.1
9
15.1
5
15.2
5
16.2.1.0
5
16.2.4.0
5
10.1
4
17.10
4
17.11
4
17.8
4
17.9
4
18.1
4
16.0
3
17.0
3
17.3
3
17.4
3
17.5
3
17.6
3
18.2
3
18.3
3
18.4
3
18.5
3
18.6
3
18.7
3
9.13
3
9.14
3
10.0
2
10.2
2
18.0
2
18.8.4
2
15.0
1
17.12.4
1

Oracle Primavera UnifierApache Tika BPGParser Memory Usage DoS

medium
5.5
First published (updated )
CVE-2022-25169

Oracle Primavera UnifierApache Tika Regular Expression Denial of Service in Standards Extractor

medium
5.5
First published (updated )
CVE-2022-30126

Apache Log4jApache Log4j2 vulnerable to RCE via JDBC Appender when attacker controls configuration

high
8.5
Zeroday
First published (updated )
CVE-2021-44832

Oracle Retail Integration BusApache Log4j StrSubstitutor Uncontrolled Recursion Denial-of-Service Vulnerability

medium
5.9
First published (updated )
CVE-2021-45105

Oracle Primavera UnifierPrototype Pollution

critical
9.8
First published (updated )
CVE-2021-23450

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Oracle Primavera UnifierXSS in the `of` option of the `.position()` util

high
7.2
First published (updated )
CVE-2021-41184

Oracle Primavera UnifierXSS in the `altField` option of the Datepicker widget

high
7.2
First published (updated )
CVE-2021-41182

Oracle Primavera UnifierThe OWASP Java HTML Sanitizer before 20211018.1 does not properly enforce policies associated with t…

critical
9.8
First published (updated )
CVE-2021-42575

Oracle Financial Services Enterprise Case ManagementTiming Attack Vulnerability for Apache Kafka Connect and Clients

medium
5.9
First published (updated )
CVE-2021-38153

redhat/eap7-apache-cxfCrafted input may cause the jsoup HTML and XML parser to get stuck, timeout, or throw unchecked exceptions

high
7.5
First published (updated )
CVE-2021-37714

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Oracle Banking Digital ExperienceVulnerability in the Advanced Networking Option component of Oracle Database Server. Supported versi…

high
8.3
First published (updated )
CVE-2021-2351

Oracle Utilities FrameworkApache Ant ZIP, and ZIP based, archive denial of service vulerability

medium
5.5
First published (updated )
CVE-2021-36374

Oracle Insurance Policy AdministrationApache Commons Compress 1.6 to 1.20 denial of service vulnerability

high
7.5
First published (updated )
CVE-2021-35515

Oracle Banking Digital ExperienceApache Commons Compress 1.6 to 1.20 denial of service vulnerability

high
7.5
First published (updated )
CVE-2021-35516

Oracle Banking ApisApache Commons Compress 1.0 to 1.20 denial of service vulnerability

high
7.5
First published (updated )
CVE-2021-36090

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Oracle Banking ApisApache Commons Compress 1.1 to 1.20 denial of service vulnerability

high
7.5
First published (updated )
CVE-2021-35517

Oracle Utilities FrameworkApache Ant TAR archive denial of service vulnerability

medium
5.5
First published (updated )
CVE-2021-36373

Oracle Primavera UnifierA carefully crafted PDF file can trigger an OutOfMemory-Exception while loading a tiny file

medium
5.5
First published (updated )
CVE-2021-31811

Oracle Banking ApisPossible limited path traversal vulnerabily in Apache Commons IO

medium
5.8
First published (updated )
CVE-2021-29425

Oracle Primavera UnifierInfinite loop in Apache Tika's MP3 parser

medium
5.5
First published (updated )
CVE-2021-28657

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Nodejs Node.jsNULL pointer deref in signature_algorithms processing

high
7.5
First published (updated )
CVE-2021-3449

Oracle Retail Xstore Point of ServiceA carefully crafted PDF file can trigger an infinite loop while loading the file

medium
5.5
First published (updated )
CVE-2021-27807

Oracle Retail Xstore Point of ServiceA carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file

medium
5.5
First published (updated )
CVE-2021-27906

Oracle Primavera GatewayCommand Injection

high
7.2
First published (updated )
CVE-2021-23337

Oracle Primavera GatewayRegular Expression Denial of Service (ReDoS)

high
7.5
First published (updated )
CVE-2020-28500

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Oracle Primavera UnifierFasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadg…

critical
9.8
First published (updated )
CVE-2020-36180

Oracle Primavera UnifierFasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadg…

critical
9.8
First published (updated )
CVE-2020-36182

Oracle Primavera UnifierFasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadg…

critical
9.8
First published (updated )
CVE-2020-36183

Oracle Primavera GatewayFasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadg…

critical
9.8
First published (updated )
CVE-2020-36179

Oracle Primavera UnifierFasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadg…

critical
9.8
First published (updated )
CVE-2020-36181

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Oracle Banking PlatformFasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadg…

critical
9.8
First published (updated )
CVE-2020-36189

Oracle Primavera GatewayA flaw was found in jackson-databind. FasterXML mishandles the interaction between serialization gad…

high
8.1
First published (updated )
CVE-2020-35728

Oracle Primavera UnifierFasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadg…

critical
9.8
First published (updated )
CVE-2020-36188

Oracle Primavera UnifierFasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadg…

critical
9.8
First published (updated )
CVE-2020-36185

Oracle Primavera UnifierFasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadg…

critical
9.8
First published (updated )
CVE-2020-36186

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Oracle Primavera UnifierFasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadg…

critical
9.8
First published (updated )
CVE-2020-36184

Oracle Primavera UnifierFasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadg…

critical
9.8
First published (updated )
CVE-2020-36187

Oracle Primavera UnifierPath Traversal

medium
5.3
First published (updated )
CVE-2020-35460

Oracle Primavera UnifierInfoleak

medium
5.5
First published (updated )
CVE-2020-17521

Oracle Primavera UnifierInput Validation

high
7.5
First published (updated )
CVE-2020-13956

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Oracle Banking PlatformCode Injection

high
7.5
First published (updated )
CVE-2020-11979

Oracle Primavera UnifierTemp directory permission issue in Guava

medium
5.4
First published (updated )
CVE-2020-8908

Oracle Primavera UnifierXEE

critical
9.8
First published (updated )
CVE-2020-25020

Oracle Utilities Frameworkjackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a lar…

high
7.5
First published (updated )
CVE-2020-36518

Oracle Primavera UnifierVulnerability in the Primavera Unifier product of Oracle Construction and Engineering (component: Pl…

medium
5.7
First published (updated )
CVE-2020-14617

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Oracle Primavera UnifierVulnerability in the Primavera Unifier product of Oracle Construction and Engineering (component: Mo…

medium
5.9
First published (updated )
CVE-2020-14618

Oracle Retail Integration BusLast updated 24 July 2024

medium
6.5
First published (updated )
CVE-2020-1945

Oracle Retail Order Broker Cloud ServiceImproper validation of certificate with host mismatch in Apache Log4j SMTP appender prior to version…

medium
4.3
First published (updated )
CVE-2020-9488

Oracle Primavera UnifierA carefully crafted or corrupt file may trigger a System.exit in Tika's OneNote Parser. Crafted or c…

medium
5.5
First published (updated )
CVE-2020-9489

Oracle Primavera UnifierFasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadg…

critical
9.8
First published (updated )
CVE-2020-11620

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203