Latest vulnerabilities for "oracle primavera unifier" 19.12

5.5

First published (updated )

CVE-2022-25169

Oracle Primavera UnifierApache Tika Regular Expression Denial of Service in Standards Extractor

5.5

First published (updated )

CVE-2022-30126

Apache Log4jApache Log4j2 vulnerable to RCE via JDBC Appender when attacker controls configuration

8.5

Zeroday

First published (updated )

CVE-2021-44832

Oracle Retail Integration BusApache Log4j StrSubstitutor Uncontrolled Recursion Denial-of-Service Vulnerability

5.9

First published (updated )

CVE-2021-45105

Oracle Primavera UnifierPrototype Pollution

9.8

First published (updated )

CVE-2021-23450

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Oracle Primavera UnifierXSS in the `of` option of the `.position()` util

7.2

First published (updated )

CVE-2021-41184

Oracle Primavera UnifierXSS in the `altField` option of the Datepicker widget

7.2

First published (updated )

CVE-2021-41182

Oracle Primavera UnifierThe OWASP Java HTML Sanitizer before 20211018.1 does not properly enforce policies associated with t…

9.8

First published (updated )

CVE-2021-42575

Oracle Financial Services Enterprise Case ManagementTiming Attack Vulnerability for Apache Kafka Connect and Clients

5.9

First published (updated )

CVE-2021-38153

Oracle Banking Digital ExperienceVulnerability in the Advanced Networking Option component of Oracle Database Server. Supported versi…

8.3

First published (updated )

CVE-2021-2351

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Oracle Utilities FrameworkApache Ant ZIP, and ZIP based, archive denial of service vulerability

5.5

First published (updated )

CVE-2021-36374

Oracle Insurance Policy AdministrationApache Commons Compress 1.6 to 1.20 denial of service vulnerability

7.5

First published (updated )

CVE-2021-35515

Oracle Banking Digital ExperienceApache Commons Compress 1.6 to 1.20 denial of service vulnerability

7.5

First published (updated )

CVE-2021-35516

Oracle Banking ApisApache Commons Compress 1.0 to 1.20 denial of service vulnerability

7.5

First published (updated )

CVE-2021-36090

Oracle Banking ApisApache Commons Compress 1.1 to 1.20 denial of service vulnerability

7.5

First published (updated )

CVE-2021-35517

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Oracle Utilities FrameworkApache Ant TAR archive denial of service vulnerability

5.5

First published (updated )

CVE-2021-36373

Oracle Primavera UnifierA carefully crafted PDF file can trigger an OutOfMemory-Exception while loading a tiny file

5.5

First published (updated )

CVE-2021-31811

Oracle Banking ApisPossible limited path traversal vulnerabily in Apache Commons IO

5.8

First published (updated )

CVE-2021-29425

Oracle Primavera UnifierInfinite loop in Apache Tika's MP3 parser

5.5

First published (updated )

CVE-2021-28657

Nodejs Node.jsNULL pointer deref in signature_algorithms processing

7.5

First published (updated )

CVE-2021-3449

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Oracle Retail Xstore Point of ServiceA carefully crafted PDF file can trigger an infinite loop while loading the file

5.5

First published (updated )

CVE-2021-27807

Oracle Retail Xstore Point of ServiceA carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file

5.5

First published (updated )

CVE-2021-27906

Oracle Primavera GatewayCommand Injection

7.2

First published (updated )

CVE-2021-23337

Oracle Primavera GatewayRegular Expression Denial of Service (ReDoS)

7.5

First published (updated )

CVE-2020-28500

Oracle Primavera UnifierFasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadg…

9.8

First published (updated )

CVE-2020-36180

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Oracle Primavera UnifierFasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadg…

9.8

First published (updated )

CVE-2020-36182

Oracle Primavera UnifierFasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadg…

9.8

First published (updated )

CVE-2020-36183

Oracle Primavera GatewayFasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadg…

9.8

First published (updated )

CVE-2020-36179

Oracle Primavera UnifierFasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadg…

9.8

First published (updated )

CVE-2020-36181

Oracle Banking PlatformFasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadg…

9.8

First published (updated )

CVE-2020-36189

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Oracle Primavera GatewayA flaw was found in jackson-databind. FasterXML mishandles the interaction between serialization gad…

8.1

First published (updated )

CVE-2020-35728

Oracle Primavera UnifierFasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadg…

9.8

First published (updated )

CVE-2020-36188

Oracle Primavera UnifierFasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadg…

9.8

First published (updated )

CVE-2020-36185

Oracle Primavera UnifierFasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadg…

9.8

First published (updated )

CVE-2020-36186

Oracle Primavera UnifierFasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadg…

9.8

First published (updated )

CVE-2020-36184

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Oracle Primavera UnifierFasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadg…

9.8

First published (updated )

CVE-2020-36187

Oracle Primavera UnifierPath Traversal

5.3

First published (updated )

CVE-2020-35460

Oracle Primavera UnifierInfoleak

5.5

First published (updated )

CVE-2020-17521

Oracle Primavera UnifierInput Validation

7.5

First published (updated )

CVE-2020-13956

Oracle Banking PlatformCode Injection

7.5

First published (updated )

CVE-2020-11979

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Oracle Primavera UnifierTemp directory permission issue in Guava

5.4

First published (updated )

CVE-2020-8908

Oracle Primavera UnifierXEE

9.8

First published (updated )

CVE-2020-25020

Oracle Utilities Frameworkjackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a lar…

7.5

First published (updated )

CVE-2020-36518

Oracle Primavera UnifierVulnerability in the Primavera Unifier product of Oracle Construction and Engineering (component: Pl…

5.7

First published (updated )

CVE-2020-14617

Oracle Retail Integration BusLast updated 24 July 2024

6.5

First published (updated )

CVE-2020-1945

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Oracle Retail Order Broker Cloud ServiceImproper validation of certificate with host mismatch in Apache Log4j SMTP appender prior to version…

4.3

First published (updated )

CVE-2020-9488

Oracle Primavera UnifierA carefully crafted or corrupt file may trigger a System.exit in Tika's OneNote Parser. Crafted or c…

5.5

First published (updated )

CVE-2020-9489

Oracle Primavera UnifierFasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadg…

9.8

First published (updated )

CVE-2020-11620

Oracle Primavera UnifierFasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadg…

9.8

First published (updated )

CVE-2020-11619

Oracle Banking Digital ExperienceFasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadg…

9.8

First published (updated )

CVE-2020-11113

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.