Latest vulnerabilities for "oracle financial services crime and compliance management studio"

5.3

First published (updated )

CVE-2022-22976

redhat/spring-securityA flaw was found in Spring Security. When using RegexRequestMatcher, an easy misconfiguration can by…

critical

9.8

First published (updated )

CVE-2022-22978

redhat/springframeworkA flaw was found in Spring Framework. Applications that handle file uploads are vulnerable to a deni…

7.5

First published (updated )

CVE-2022-22970

redhat/springframeworkA flaw was found in Spring Framework Applications. Applications that use STOMP over the WebSocket en…

6.5

First published (updated )

CVE-2022-22971

redhat/eap7-nettyLocal Information Disclosure Vulnerability in io.netty:netty-codec-http

5.5

First published (updated )

CVE-2022-24823

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

ubuntu/libgoogle-gson-javaDeserialization of Untrusted Data

7.7

First published (updated )

CVE-2022-25647

Oracle Financial Services Crime And Compliance Management StudioApache Spark Key Negotiation Vulnerability

7.5

First published (updated )

CVE-2021-38296

Apache TomcatLocal privilege escalation with FileStore

7

First published (updated )

CVE-2022-23181

Oracle Financial Services Enterprise Case ManagementInfinite loop within Apache XercesJ xml parser

7.1

First published (updated )

CVE-2022-23437

Oracle Financial Services Crime And Compliance Management StudioApache Shiro before 1.8.0, when using Apache Shiro with Spring Boot, a specially crafted HTTP request may cause an authentication bypass

critical

9.8

First published (updated )

CVE-2021-41303

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

redhat/eap7-apache-cxfCrafted input may cause the jsoup HTML and XML parser to get stuck, timeout, or throw unchecked exceptions

7.5

First published (updated )

CVE-2021-37714

redhat/jettyInfoleak

5.3

First published (updated )

CVE-2021-34429

Oracle Insurance Policy AdministrationApache Commons Compress 1.6 to 1.20 denial of service vulnerability

7.5

First published (updated )

CVE-2021-35515

Oracle Banking Digital ExperienceApache Commons Compress 1.6 to 1.20 denial of service vulnerability

7.5

First published (updated )

CVE-2021-35516

Oracle Banking ApisApache Commons Compress 1.0 to 1.20 denial of service vulnerability

7.5

First published (updated )

CVE-2021-36090

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Oracle Banking ApisApache Commons Compress 1.1 to 1.20 denial of service vulnerability

7.5

First published (updated )

CVE-2021-35517

Oracle Primavera GatewayCommand Injection

7.2

First published (updated )

CVE-2021-23337

Oracle Primavera GatewayRegular Expression Denial of Service (ReDoS)

7.5

First published (updated )

CVE-2020-28500

redhat/hadoopIn Apache Hadoop 3.2.0 to 3.2.1, 3.0.0-alpha1 to 3.1.3, and 2.0.0-alpha to 2.10.0, WebHDFS client mi…

8.8

First published (updated )

CVE-2020-9492

Oracle Financial Services Crime And Compliance Management StudioCommand Injection

7.2

First published (updated )

CVE-2020-7712

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Oracle Utilities Frameworkjackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a lar…