Filters

Versions

2.4.0
44
2.9.0
44
2.7.1
37
2.6.2
30
2.7.0
20
2.6.0
19
2.6.1
19
2.12.0
18
2.5.0
16
2.4.1
15
2.10.0
9
2.8.0
7
2.3.0
5

Oracle Retail Integration BusApache Log4j StrSubstitutor Uncontrolled Recursion Denial-of-Service Vulnerability

medium
5.9
First published (updated )
CVE-2021-45105

redhat/rh-sso7-keycloakHTTP fails to validate against control chars in header names which may lead to HTTP request smuggling

medium
6.5
First published (updated )
CVE-2021-43797

Oracle Primavera GatewayXSS in `*Text` options of the Datepicker widget

high
7.2
First published (updated )
CVE-2021-41183

Oracle Primavera UnifierXSS in the `of` option of the `.position()` util

high
7.2
First published (updated )
CVE-2021-41184

Oracle Primavera UnifierXSS in the `altField` option of the Datepicker widget

high
7.2
First published (updated )
CVE-2021-41182

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Oracle Banking Digital ExperienceVulnerability in the Advanced Networking Option component of Oracle Database Server. Supported versi…

high
8.3
First published (updated )
CVE-2021-2351

Oracle Banking Enterprise Default ManagementXSS

medium
6.1
First published (updated )
CVE-2021-35043

Oracle Banking ApisApache Commons Compress 1.0 to 1.20 denial of service vulnerability

high
7.5
First published (updated )
CVE-2021-36090

Oracle Banking ApisPossible limited path traversal vulnerabily in Apache Commons IO

medium
5.8
First published (updated )
CVE-2021-29425

Oracle Communications Unified Inventory ManagementXStream is vulnerable to a Remote Command Execution attack

critical
9.9
First published (updated )
CVE-2021-21345

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Oracle Communications Unified Inventory ManagementXStream can cause a Denial of Service

high
7.5
First published (updated )
CVE-2021-21341

Oracle Communications Unified Inventory ManagementA Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host

high
8.6
First published (updated )
CVE-2021-21349

Oracle Communications Unified Inventory ManagementXStream is vulnerable to an Arbitrary File Deletion on the local host when unmarshalling as long as the executing process has sufficient rights

high
7.5
First published (updated )
CVE-2021-21343

Oracle Communications Unified Inventory ManagementA Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host

critical
9.1
First published (updated )
CVE-2021-21342

Oracle Communications Unified Inventory ManagementXStream is vulnerable to an Arbitrary Code Execution attack

critical
9.8
First published (updated )
CVE-2021-21350

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Oracle Communications Unified Inventory ManagementXStream is vulnerable to an attack using Regular Expression for a Denial of Service (ReDos)

high
7.8
First published (updated )
CVE-2021-21348

Oracle Communications Unified Inventory ManagementXStream is vulnerable to an Arbitrary Code Execution attack

critical
9.8
First published (updated )
CVE-2021-21346

Oracle Communications Unified Inventory ManagementXStream is vulnerable to an Arbitrary Code Execution attack

critical
9.8
First published (updated )
CVE-2021-21347

Oracle Communications Unified Inventory ManagementXStream is vulnerable to an Arbitrary Code Execution attack

critical
9.8
First published (updated )
CVE-2021-21344

Oracle Communications Unified Inventory ManagementXStream is vulnerable to an Arbitrary Code Execution attack

critical
9.1
First published (updated )
CVE-2021-21351

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Oracle Banking Enterprise Default ManagementVelocity Sandbox Bypass

critical
9.8
First published (updated )
CVE-2020-13936

Oracle Banking PlatformFasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadg…

critical
9.8
First published (updated )
CVE-2020-36189

Oracle Banking PlatformFasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadg…

high
8.1
First published (updated )
CVE-2020-35490

Oracle Banking PlatformFasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadg…

high
8.1
First published (updated )
CVE-2020-35491

Oracle Retail Xstore Point of ServiceRemote Code Execution in XStream

critical
9.3
First published (updated )
CVE-2020-26217

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Oracle Commerce MerchandisingXSS

medium
6.1
First published (updated )
CVE-2020-27193

Oracle Banking PlatformCode Injection

high
7.5
First published (updated )
CVE-2020-11979

Oracle Retail Integration BusLast updated 24 July 2024

medium
6.5
First published (updated )
CVE-2020-1945

Oracle REST Data ServicesPotential XSS vulnerability in jQuery

medium
6.9
First published (updated )
CVE-2020-11023

Oracle Primavera UnifierFasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadg…

critical
9.8
First published (updated )
CVE-2020-11620

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Oracle Primavera UnifierFasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadg…

critical
9.8
First published (updated )
CVE-2020-11619

Oracle Banking Digital ExperienceFasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadg…

critical
9.8
First published (updated )
CVE-2020-11113

Oracle Banking Digital ExperienceFasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadg…

critical
9.8
First published (updated )
CVE-2020-11112

Oracle Banking Digital ExperienceFasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadg…

critical
9.8
First published (updated )
CVE-2020-11111

Oracle Banking Digital ExperienceFasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadg…

critical
9.8
First published (updated )
CVE-2020-10968

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

redhat/eap7-elytron-webFasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadg…

critical
9.8
First published (updated )
CVE-2020-10673

redhat/eap7-elytron-webFasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadg…

critical
9.8
First published (updated )
CVE-2020-10672

Oracle Banking Digital ExperienceFasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadg…

critical
9.8
First published (updated )
CVE-2020-10969

redhat/eap7-elytron-webFasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadg…

critical
9.8
First published (updated )
CVE-2020-9548

redhat/eap7-elytron-webFasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadg…

critical
9.8
First published (updated )
CVE-2020-9547

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

redhat/eap7-elytron-webFasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadg…

critical
9.8
First published (updated )
CVE-2020-9546

redhat/eap7-elytron-webPath Traversal

medium
6.5
First published (updated )
CVE-2020-6950

Apache KafkaInfoleak

high
7.5
First published (updated )
CVE-2019-12399

Oracle Banking PlatformXEE

high
7.5
First published (updated )
CVE-2020-25649

Oracle Primavera UnifierFasterXML jackson-databind 2.x before 2.9.10.2 lacks certain net.sf.ehcache blocking.

critical
9.8
First published (updated )
CVE-2019-20330

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Oracle Banking PlatformXSS, XEE

medium
5.5
First published (updated )
CVE-2019-12415

Oracle Banking PlatformOracle ADF Faces Deserialization of Untrusted Data Remote Code Execution Vulnerability

critical
9.8
First published (updated )
CVE-2019-2904

Oracle Banking PlatformInput Validation

critical
9.8
First published (updated )
CVE-2019-17531

Oracle Banking ApisCSRF, XSS

critical
9.8
First published (updated )
CVE-2019-17495

Oracle Banking PlatformInfoleak

critical
9.8
First published (updated )
CVE-2019-16943

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203