Skip to contentOracle Applications vulnerabilities
- oracle advanced networking option, adaptive access manager, data integrator +3 more +5 moreVulnerability in the Advanced Networking Option component of Oracle Database Server. Supported...CVE-2021-20188.3 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +54 more +56 moreUnsafe Deserialization in jackson-databindCVE-2020-36179Public exploitFix availableEPSS 17.1%8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +56 more +58 moreUnsafe Deserialization in jackson-databindCVE-2020-36180Public exploitFix available8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +56 more +58 moreUnsafe Deserialization in jackson-databindCVE-2020-36182Fix available8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +56 more +58 moreUnsafe Deserialization in jackson-databindCVE-2020-36184Public exploitFix available8.1 High
- fasterxml jackson-databind, debian linux, netapp service level manager +55 more +57 moreUnsafe Deserialization in jackson-databindCVE-2020-36181Fix available8.1 High
- ckeditor, oracle agile product lifecycle management, application express +6 more +8 moreImproper Neutralization of Input During Web Page Generation in CKEditor4CVE-2020-27193Fix available6.1 Medium
- manageengine applications managerVulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component:...CVE-2020-148265.3 Medium
- oracle financial services analytical applications infrastructureVulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of...CVE-2020-148248.6 High
- manageengine applications managerVulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component:...CVE-2020-148115.3 Medium
- manageengine applications managerVulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component:...CVE-2020-147616.5 Medium
- oracle applications frameworkVulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component:...CVE-2020-147464.7 Medium
- apache ant, fedoraproject fedora, gradle +34 more +36 moreCode injection in Apache AntCVE-2020-11979Fix available7.5 High
- spring by vmware framework, vmware spring framework, netapp oncommand insight +36 more +38 moreRFD Protection Bypass via jsessionidCVE-2020-5421Public exploitFix availableEPSS 11.6%8.7 High
- oracle common applicationsVulnerability in the Oracle Common Applications product of Oracle E-Business Suite (component:...CVE-2020-147174.7 Medium
- oracle common applicationsVulnerability in the Oracle Common Applications product of Oracle E-Business Suite (component:...CVE-2020-147164.7 Medium
- oracle common applicationsVulnerability in the Oracle Common Applications product of Oracle E-Business Suite (component:...CVE-2020-146888.2 High
- oracle financial services analytical applications infrastructureVulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of...CVE-2020-146856.5 Medium
- oracle financial services analytical applications infrastructureVulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of...CVE-2020-146844.3 Medium
- oracle financial services analytical applications infrastructureVulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of...CVE-2020-146626.3 Medium
- oracle food and beverage applications, oracle corporation hospitality reporting and analytics +1 moreVulnerability in the Oracle Hospitality Reporting and Analytics product of Oracle Food and...CVE-2020-146162.7 Low
- oracle financial services analytical applications infrastructureVulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of...CVE-2020-146156.1 Medium
- oracle applications frameworkVulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component:...CVE-2020-146107.6 High
- oracle financial services analytical applications infrastructureVulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of...CVE-2020-146056.5 Medium
- oracle financial services analytical applications infrastructureVulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of...CVE-2020-146045.3 Medium
- oracle financial services analytical applications infrastructureVulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of...CVE-2020-146035.3 Medium
- oracle financial services analytical applications infrastructureVulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of...CVE-2020-146027.1 High
- oracle financial services analytical applications infrastructureVulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of...CVE-2020-146016.1 Medium
- oracle food and beverage applications, oracle corporation hospitality reporting and analytics +1 moreVulnerability in the Oracle Hospitality Reporting and Analytics product of Oracle Food and...CVE-2020-145946.5 Medium
- oracle applications frameworkVulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component:...CVE-2020-145902.7 Low
- oracle communications applications, oracle corporation communications session border controller +1 moreVulnerability in the Oracle Communications Session Border Controller product of Oracle...CVE-2020-145808.2 High
- oracle food and beverage applications, oracle corporation hospitality reporting and analytics +1 moreVulnerability in the Oracle Hospitality Reporting and Analytics product of Oracle Food and...CVE-2020-145617.3 High
- oracle applications framework, oracle corporation project planning and control +1 moreVulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component:...CVE-2020-145348.2 High
- apache batik, oracle api gateway, business intelligence +15 more +17 moreServer-side request forgery (SSRF) in Apache BatikCVE-2019-17566Fix availableEPSS 10.9%7.5 High
- apache ant, canonical ubuntu linux, fedoraproject fedora +47 more +49 moreSensitive Data Exposure in Apache AntCVE-2020-1945Fix available6.3 Medium
- jquery, debian linux, drupal +67 more +69 morejQuery has a potential XSS vulnerabilityCVE-2020-11022Public exploitFix availableEPSS 99.2%6.9 Medium
- dom4j project dom4j, canonical ubuntu linux, netapp oncommand api services +35 more +37 moredom4j allows External Entities by default which might enable XXE attacksCVE-2020-10683Fix available9.8 Critical
- apache log4j, debian linux, oracle communications application session controller +43 more +45 moreImproper validation of certificate with host mismatch in Apache Log4j SMTP appenderCVE-2020-9488Public exploitFix available3.7 Low
- oracle applications frameworkVulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component:...CVE-2020-28908.2 High
- oracle applications frameworkVulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component:...CVE-2020-28665.3 Medium
- oracle common applications calendarVulnerability in the Oracle Common Applications Calendar product of Oracle E-Business Suite ...CVE-2020-28238.2 High
- oracle common applications calendarVulnerability in the Oracle Common Applications Calendar product of Oracle E-Business Suite ...CVE-2020-28208.2 High
- oracle financial services analytical applications infrastructureVulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of...CVE-2020-27937.1 High
- fasterxml jackson-databind, debian linux, netapp steelstore cloud integrated storage +29 more +31 morejackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-11111Fix available8.8 High
- fasterxml jackson-databind, debian linux, netapp steelstore cloud integrated storage +29 more +31 morejackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-11112Fix available8.8 High
- fasterxml jackson-databind, debian linux, netapp steelstore cloud integrated storage +30 more +32 morejackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-11113Public exploitFix available8.8 High
- fasterxml jackson-databind, debian linux, netapp steelstore cloud integrated storage +29 more +31 morejackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-10968Fix available8.8 High
- fasterxml jackson-databind, debian linux, netapp steelstore cloud integrated storage +29 more +31 morejackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-10969Fix available8.8 High
- fasterxml jackson-databind, debian linux, netapp steelstore cloud integrated storage +29 more +31 morejackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-10672Fix available8.8 High
- fasterxml jackson-databind, debian linux, netapp steelstore cloud integrated storage +29 more +31 morejackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-10673Public exploitFix available8.8 High
- Show moreLoading…