Oracle Banking Apis vulnerabilities

• ckeditor, ckeditor ckeditor4, drupal +7 more +9 more HTML comments vulnerability allowing to execute JavaScript code CVE-2021-41165 Fix available 8.2 HighNovember 17, 2021
• ckeditor, ckeditor ckeditor4, drupal +8 more +10 more Advanced Content Filter (ACF) vulnerability allowing to execute JavaScript code using malformed HTML CVE-2021-41164 Fix available 8.2 HighNovember 17, 2021
• debian linux, netapp oncommand insight, netty +9 more +11 more SnappyFrameDecoder doesn't restrict chunk length any may buffer skippable chunks in an unnecessary way CVE-2021-37137 Fix available 7.5 HighSeptember 9, 2021
• debian linux, netapp oncommand insight, netty +16 more +18 more Bzip2Decoder doesn't allow setting size restrictions for decompressed data CVE-2021-37136 Fix available 7.5 HighSeptember 9, 2021
• oracle advanced networking option, agile engineering data management, agile product lifecycle management +108 more +110 more Vulnerability in the Advanced Networking Option component of Oracle Database Server. Supported... CVE-2021-2351 8.3 HighJuly 20, 2021
• apache commons compress, netapp active iq unified manager, oncommand insight +31 more +33 more Apache Commons Compress 1.0 to 1.20 denial of service vulnerability CVE-2021-36090 Fix available EPSS 12.9% 7.5 HighJuly 13, 2021
• apache commons compress, netapp active iq unified manager, oncommand insight +24 more +26 more Apache Commons Compress 1.1 to 1.20 denial of service vulnerability CVE-2021-35517 Fix available EPSS 10.6% 7.5 HighJuly 13, 2021
• apache commons io, debian linux, netapp active iq unified manager +57 more +59 more Possible limited path traversal vulnerabily in Apache Commons IO CVE-2021-29425 Public exploitFix available EPSS 10.5% 4.8 MediumApril 13, 2021
• eclipse jetty, the eclipse foundation eclipse jetty, netapp cloud manager +15 more +17 more Authorization Before Parsing and Canonicalization in jetty CVE-2021-28164 Public exploitFix available EPSS 82.4% 5.3 MediumApril 1, 2021
• eclipse jetty, the eclipse foundation eclipse jetty, apache ignite +21 more +23 more Directory exposure in jetty CVE-2021-28163 Fix available 2.7 LowApril 1, 2021
• apache batik, debian linux, fedoraproject fedora +19 more +21 more Server-side request forgery (SSRF) in Apache Batik CVE-2020-11987 Fix available EPSS 13.6% 8.2 HighFebruary 24, 2021
• apache iotdb, fasterxml jackson-databind, fedoraproject fedora +36 more +38 more XML External Entity (XXE) Injection in Jackson Databind CVE-2020-25649 Fix available EPSS 17.7% 7.5 HighOctober 14, 2020
• hibernate hibernate-validator, netapp active iq unified manager, element +185 more +187 more The SafeHtml annotation in Hibernate-Validator does not properly guard against XSS attacks CVE-2019-10219 Public exploitFix available 6.5 MediumNovember 8, 2019
• smartbear swagger ui, oracle banking apis, banking digital experience +3 more +5 more Cross-site scripting in Swagger-UI CVE-2019-17495 Public exploitFix available 9.8 CriticalOctober 10, 2019