Latest vulnerabilities for "oracle webcenter portal"

4.4

First published (updated )

CVE-2024-20992

Oracle Retail Integration BusApache Log4j StrSubstitutor Uncontrolled Recursion Denial-of-Service Vulnerability

critical

9.8

First published (updated )

CVE-2021-45105

Oracle Banking ApisHTML comments vulnerability allowing to execute JavaScript code

8.2

First published (updated )

CVE-2021-41165

Oracle Banking ApisAdvanced Content Filter (ACF) vulnerability allowing to execute JavaScript code using malformed HTML

8.2

First published (updated )

CVE-2021-41164

Oracle Banking Digital ExperienceLast updated 24 July 2024

7.5

First published (updated )

CVE-2021-37137

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Oracle Banking Digital ExperienceLast updated 24 July 2024

7.5

First published (updated )

CVE-2021-37136

Oracle Utilities FrameworkXStream Remote Code Execution Vulnerability

8.5

Exploited

First published (updated )

CVE-2021-39144

Oracle Utilities FrameworkXStream is vulnerable to an Arbitrary Code Execution attack

8.8

First published (updated )

CVE-2021-39139

Oracle Utilities FrameworkXStream is vulnerable to an Arbitrary Code Execution attack

8.5

First published (updated )

CVE-2021-39147

Oracle Utilities FrameworkXStream is vulnerable to an Arbitrary Code Execution attack

8.5

First published (updated )

CVE-2021-39151

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Oracle Utilities FrameworkXStream is vulnerable to an Arbitrary Code Execution attack

8.5

First published (updated )

CVE-2021-39148

Oracle Utilities FrameworkXStream is vulnerable to an Arbitrary Code Execution attack

8.5

First published (updated )

CVE-2021-39145

Oracle Utilities FrameworkXStream is vulnerable to an Arbitrary Code Execution attack

8.5

First published (updated )

CVE-2021-39146

Oracle Utilities FrameworkXStream is vulnerable to an Arbitrary Code Execution attack

8.5

First published (updated )

CVE-2021-39149

Oracle Utilities FrameworkXStream is vulnerable to an Arbitrary Code Execution attack

8.5

First published (updated )

CVE-2021-39153

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Oracle Utilities FrameworkA Server-Side Forgery Request vulnerability in XStream via PriorityQueue unmarshaling

8.5

First published (updated )

CVE-2021-39150

Oracle Utilities FrameworkA Server-Side Forgery Request vulnerability in XStream via HashMap unmarshaling

8.5

First published (updated )

CVE-2021-39152

Oracle Utilities FrameworkXStream is vulnerable to an Arbitrary Code Execution attack

8.5

First published (updated )

CVE-2021-39154

Oracle Utilities FrameworkXStream is vulnerable to an Arbitrary Code Execution attack

8.5

First published (updated )

CVE-2021-39141

Oracle Utilities FrameworkXStream can cause a Denial of Service

6.5

First published (updated )

CVE-2021-39140

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

redhat/eap7-apache-cxfCrafted input may cause the jsoup HTML and XML parser to get stuck, timeout, or throw unchecked exceptions

7.5

First published (updated )

CVE-2021-37714

Oracle Banking Digital ExperienceApache Commons Compress 1.6 to 1.20 denial of service vulnerability

7.5

First published (updated )

CVE-2021-35516

Oracle Banking ApisApache Commons Compress 1.0 to 1.20 denial of service vulnerability

7.5

First published (updated )

CVE-2021-36090

Oracle Banking ApisApache Commons Compress 1.1 to 1.20 denial of service vulnerability

7.5

First published (updated )

CVE-2021-35517

Oracle Communications Unified Inventory ManagementXStream is vulnerable to a Remote Command Execution attack

8.8

First published (updated )

CVE-2021-29505

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Oracle Banking ApisPossible limited path traversal vulnerabily in Apache Commons IO

5.8

First published (updated )

CVE-2021-29425

Oracle Primavera UnifierInfinite loop in Apache Tika's MP3 parser

5.5

First published (updated )

CVE-2021-28657

Oracle Communications Unified Inventory ManagementXStream is vulnerable to a Remote Command Execution attack

critical

9.9

First published (updated )

CVE-2021-21345

Oracle Communications Unified Inventory ManagementXStream can cause a Denial of Service

7.5

First published (updated )

CVE-2021-21341

Oracle Communications Unified Inventory ManagementA Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host

8.6

First published (updated )

CVE-2021-21349

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.