Skip to contentOracle Applications vulnerabilities
- fasterxml jackson-databind, debian linux, netapp active iq unified manager +28 more +30 morejackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-9546Fix available9.8 Critical
- oracle financial services analytical applications infrastructureVulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of...CVE-2020-26887.1 High
- oracle applications frameworkVulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component:...CVE-2020-26665.3 Medium
- oracle web applications desktop integratorVulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business...CVE-2020-25918.2 High
- oracle applications dba, oracle corporation pl/sql +1 moreVulnerability in the Oracle Applications DBA component of Oracle Database Server. Supported...CVE-2020-25693.9 Low
- oracle applications dba, oracle corporation database +1 moreVulnerability in the Oracle Applications DBA component of Oracle Database Server. Supported...CVE-2020-25683.9 Low
- oracle applications frameworkVulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component:...CVE-2020-25664.7 Medium
- apache kafka, oracle banking corporate lending process management, banking credit facilities process management +10 more +12 moreExposure of Sensitive Information to an Unauthorized Actor in Apache KafkaCVE-2019-12399Fix available7.5 High
- hibernate hibernate-validator, netapp active iq unified manager, element +185 more +187 moreThe SafeHtml annotation in Hibernate-Validator does not properly guard against XSS attacksCVE-2019-10219Public exploitFix available6.5 Medium
- apache poi, oracle application testing suite, banking enterprise originations +24 more +26 moreImproper Restriction of XML External Entity Reference in Apache POICVE-2019-12415Fix available5.5 Medium
- oracle food and beverage applications, oracle corporation hospitality reporting and analytics +1 moreVulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and...CVE-2019-29526.1 Medium
- oracle food and beverage applications, oracle corporation hospitality reporting and analytics +1 moreVulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and...CVE-2019-29477.1 High
- apache tomee, bouncycastle bc-java, netapp active iq unified manager +18 more +20 moreOut-of-Memory Error in Bouncy Castle CryptoCVE-2019-17359Fix available7.5 High
- fasterxml jackson-databind, debian linux, fedoraproject fedora +14 more +16 morePolymorphic Typing issue in FasterXML jackson-databindCVE-2019-16335Fix available9.8 Critical
- fasterxml jackson-databind, debian linux, fedoraproject fedora +16 more +18 morePolymorphic Typing issue in FasterXML jackson-databindCVE-2019-14540Public exploitFix availableEPSS 10.8%9.8 Critical
- fasterxml jackson-databind, apache drill, debian linux +15 more +17 moreDeserialization of untrusted data in FasterXML jackson-databindCVE-2019-14439Public exploitFix availableEPSS 10.8%7.5 High
- fasterxml jackson-databind, apple xcode, debian linux +21 more +23 moreDeserialization of untrusted data in FasterXML jackson-databindCVE-2019-14379Fix available9.8 Critical
- oracle food and beverage applications, oracle corporation hospitality simphony +1 moreVulnerability in the Oracle Hospitality Simphony component of Oracle Food and Beverage...CVE-2019-28367.5 High
- oracle food and beverage applications, oracle corporation hospitality simphony +1 moreVulnerability in the Oracle Hospitality Simphony component of Oracle Food and Beverage...CVE-2019-28337.7 High
- manageengine applications managerVulnerability in the Oracle Applications Manager component of Oracle E-Business Suite ...CVE-2019-28256.5 Medium
- oracle financial services analytical applications infrastructureVulnerability in the Oracle Financial Services Analytical Applications Infrastructure component...CVE-2019-28235.4 Medium
- oracle food and beverage applications, oracle corporation hospitality gift and loyalty +1 moreVulnerability in the Oracle Hospitality Gift and Loyalty component of Oracle Food and Beverage...CVE-2019-27638.2 High
- apache axis 1.4, axis, oracle agile engineering data management +35 more +37 moreServer Side Request Forgery in Apache AxisCVE-2019-0227Public exploitFix availableEPSS 91.9%7.5 High
- oracle applications frameworkVulnerability in the Oracle Applications Framework component of Oracle E-Business Suite ...CVE-2019-26828.2 High
- oracle common applicationsVulnerability in the Oracle Common Applications component of Oracle E-Business Suite ...CVE-2019-26658.2 High
- backdropcms backdrop, drupal, jquery +102 more +104 moreXSS in jQuery as used in Drupal, Backdrop CMS, and other productsCVE-2019-11358Public exploitFix availableEPSS 86.8%6.1 Medium
- broadcom spring web services, spring web services, oracle financial services analytical applications infrastructure +1 more +3 moreSpring Web Services XML External Entity Injection (XXE)CVE-2019-3773Fix available9.8 Critical
- fasterxml jackson-databind, debian linux, oracle banking platform +9 more +11 moreServer-Side Request Forgery (SSRF) in jackson-databindCVE-2018-14721Fix availableEPSS 10.5%10.0 Critical
- fasterxml jackson-databind, debian linux, oracle banking platform +9 more +11 moreXML External Entity Reference (XXE) in jackson-databindCVE-2018-14720Fix available9.8 Critical
- fasterxml jackson-databind, debian linux, netapp oncommand workflow automation +17 more +19 moreArbitrary Code Execution in jackson-databindCVE-2018-14719Fix available9.8 Critical
- fasterxml jackson-databind, debian linux, netapp oncommand workflow automation +22 more +24 moreArbitrary Code Execution in jackson-databindCVE-2018-14718Fix availableEPSS 12.7%9.8 Critical
- pivotal spring framework, debian linux, oracle agile product lifecycle management +37 more +39 moreDoS Attack via Range RequestsCVE-2018-15756Fix available7.5 High
- oracle applications frameworkVulnerability in the Oracle Applications Framework component of Oracle E-Business Suite ...CVE-2018-32438.2 High
- manageengine applications managerVulnerability in the Oracle Applications Manager component of Oracle E-Business Suite ...CVE-2018-32375.3 Medium
- manageengine applications managerVulnerability in the Oracle Applications Manager component of Oracle E-Business Suite ...CVE-2018-32358.2 High
- oracle applications frameworkVulnerability in the Oracle Applications Framework component of Oracle E-Business Suite ...CVE-2018-29714.3 Medium
- apache axis, debian linux, oracle agile engineering data management +35 more +37 moreModerate severity vulnerability that affects apache axisCVE-2018-8032Public exploitFix availableEPSS 10.6%6.1 Medium
- manageengine applications managerVulnerability in the Oracle Applications Manager component of Oracle E-Business Suite ...CVE-2018-29967.5 High
- apache batik, canonical ubuntu linux, debian linux +18 more +20 moreDeserialization of Untrusted Data in Apache BatikCVE-2018-8013Fix availableEPSS 18.6%9.8 Critical
- jquery, oracle agile product lifecycle management for process, banking platform +44 more +46 moreCross-Site Scripting (XSS) in jqueryCVE-2015-9251Public exploitFix availableEPSS 29.7%6.1 Medium
- oracle financial services analytical applications reconciliation frameworkVulnerability in the Oracle Financial Services Analytical Applications Reconciliation Framework...CVE-2018-27326.1 Medium
- oracle financial services analytical applications infrastructureVulnerability in the Oracle Financial Services Analytical Applications Infrastructure component...CVE-2018-26616.1 Medium
- oracle financial services analytical applications infrastructureVulnerability in the Oracle Financial Services Analytical Applications Infrastructure component...CVE-2018-26607.4 High
- oracle applications dbaVulnerability in the Oracle Applications DBA component of Oracle E-Business Suite (subcomponent:...CVE-2018-25804.4 Medium
- fasterxml jackson-databind, debian linux, netapp oncommand balance +21 more +23 morejackson-databind vulnerable to deserialization flaw leading to unauthenticated remote code executionCVE-2017-15095Fix available9.8 Critical
- oracle common applicationsVulnerability in the Oracle Common Applications component of Oracle E-Business Suite ...CVE-2017-103309.1 Critical
- oracle common applications calendarVulnerability in the Oracle Common Applications Calendar component of Oracle E-Business Suite ...CVE-2017-103268.2 High
- oracle common applications calendarVulnerability in the Oracle Common Applications Calendar component of Oracle E-Business Suite ...CVE-2017-103258.2 High
- oracle web applications desktop integratorVulnerability in the Oracle Web Applications Desktop Integrator component of Oracle E-Business...CVE-2017-103238.2 High
- oracle common applications calendarVulnerability in the Oracle Common Applications Calendar component of Oracle E-Business Suite ...CVE-2017-103225.3 Medium
- Show moreLoading…