Filter
AND
Apache Log4jApache log4j2 log messages substitution (CVE-2021-44228)
First published (updated )
Oracle Communications Unified Inventory ManagementA Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host
9.1
First published (updated )
Oracle Communications Unified Inventory ManagementXStream is vulnerable to a Remote Command Execution attack
8.8
First published (updated )
Oracle Insurance Rules PaletteIn Spring Framework, versions 5.2.x prior to 5.2.15 and versions 5.3.x prior to 5.3.7, a WebFlux app…
7.8
First published (updated )
Oracle Insurance Rules PaletteDoS Attack via Range Requests
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Oracle Banking Digital ExperienceLast updated 24 July 2024
7.5
First published (updated )
Oracle Banking Digital ExperienceLast updated 24 July 2024
7.5
First published (updated )
Oracle Retail Xstore Point of ServiceDenial of Service by injecting highly recursive collections or maps in XStream
7.5
First published (updated )
redhat/eap7-artemis-wildfly-integrationLocal Information Disclosure Vulnerability in Netty on Unix-Like systems due temporary files
6.2
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
redhat/eap7-elytron-webPossible request smuggling in HTTP/2 due missing validation of content-length
5.9
First published (updated )
Oracle Financial Services Enterprise Case ManagementTiming Attack Vulnerability for Apache Kafka Connect and Clients
5.9
First published (updated )
Oracle Insurance Policy Administration J2EECSRF Attack via CORS Preflight Requests with Spring MVC or Spring WebFlux
5.3
First published (updated )