Oracle Banking Digital Experience vulnerabilities

• ckeditor, ckeditor ckeditor4, drupal +7 more +9 more HTML comments vulnerability allowing to execute JavaScript code CVE-2021-41165 Fix available 8.2 HighNovember 17, 2021
• ckeditor, ckeditor ckeditor4, drupal +8 more +10 more Advanced Content Filter (ACF) vulnerability allowing to execute JavaScript code using malformed HTML CVE-2021-41164 Fix available 8.2 HighNovember 17, 2021
• debian linux, netapp oncommand insight, netty +9 more +11 more SnappyFrameDecoder doesn't restrict chunk length any may buffer skippable chunks in an unnecessary way CVE-2021-37137 Fix available 7.5 HighSeptember 9, 2021
• debian linux, netapp oncommand insight, netty +16 more +18 more Bzip2Decoder doesn't allow setting size restrictions for decompressed data CVE-2021-37136 Fix available 7.5 HighSeptember 9, 2021
• oracle advanced networking option, agile engineering data management, agile product lifecycle management +108 more +110 more Vulnerability in the Advanced Networking Option component of Oracle Database Server. Supported... CVE-2021-2351 8.3 HighJuly 20, 2021
• apache commons compress, netapp active iq unified manager, oncommand insight +31 more +33 more Apache Commons Compress 1.0 to 1.20 denial of service vulnerability CVE-2021-36090 Fix available EPSS 12.9% 7.5 HighJuly 13, 2021
• apache commons compress, netapp active iq unified manager, oncommand insight +24 more +26 more Apache Commons Compress 1.1 to 1.20 denial of service vulnerability CVE-2021-35517 Fix available EPSS 10.6% 7.5 HighJuly 13, 2021
• apache commons compress, netapp active iq unified manager, oncommand insight +21 more +23 more Apache Commons Compress 1.6 to 1.20 denial of service vulnerability CVE-2021-35516 Fix available EPSS 12.4% 7.5 HighJuly 13, 2021
• apache commons compress, netapp active iq unified manager, oncommand insight +23 more +25 more Apache Commons Compress 1.6 to 1.20 denial of service vulnerability CVE-2021-35515 Fix available EPSS 11.6% 7.5 HighJuly 13, 2021
• apache commons io, debian linux, netapp active iq unified manager +57 more +59 more Possible limited path traversal vulnerabily in Apache Commons IO CVE-2021-29425 Public exploitFix available EPSS 10.5% 4.8 MediumApril 13, 2021
• eclipse jetty, the eclipse foundation eclipse jetty, netapp cloud manager +15 more +17 more Authorization Before Parsing and Canonicalization in jetty CVE-2021-28164 Public exploitFix available EPSS 82.4% 5.3 MediumApril 1, 2021
• eclipse jetty, the eclipse foundation eclipse jetty, apache ignite +21 more +23 more Directory exposure in jetty CVE-2021-28163 Fix available 2.7 LowApril 1, 2021
• apache batik, debian linux, fedoraproject fedora +19 more +21 more Server-side request forgery (SSRF) in Apache Batik CVE-2020-11987 Fix available EPSS 13.6% 8.2 HighFebruary 24, 2021
• fasterxml jackson-databind, debian linux, netapp cloud backup +54 more +56 more Unsafe Deserialization in jackson-databind CVE-2020-36179 Public exploitFix available EPSS 17.1% 8.1 HighJanuary 6, 2021
• fasterxml jackson-databind, debian linux, netapp cloud backup +56 more +58 more Unsafe Deserialization in jackson-databind CVE-2020-36180 Public exploitFix available 8.1 HighJanuary 6, 2021
• fasterxml jackson-databind, debian linux, netapp cloud backup +56 more +58 more Unsafe Deserialization in jackson-databind CVE-2020-36182 Fix available 8.1 HighJanuary 6, 2021
• fasterxml jackson-databind, debian linux, netapp cloud backup +56 more +58 more Unsafe Deserialization in jackson-databind CVE-2020-36184 Public exploitFix available 8.1 HighJanuary 6, 2021
• fasterxml jackson-databind, debian linux, netapp service level manager +55 more +57 more Unsafe Deserialization in jackson-databind CVE-2020-36181 Fix available 8.1 HighJanuary 6, 2021
• fasterxml jackson-databind, debian linux, netapp active iq unified manager +11 more +13 more Deserialization of untrusted data in Jackson Databind CVE-2020-14195 Public exploitFix available 8.1 HighJune 16, 2020
• fasterxml jackson-databind, netapp active iq unified manager, steelstore cloud integrated storage +9 more +11 more Deserialization of untrusted data in Jackson Databind CVE-2020-14060 Fix available 8.1 HighJune 14, 2020
• fasterxml jackson-databind, debian linux, netapp active iq unified manager +12 more +14 more Deserialization of untrusted data in Jackson Databind CVE-2020-14061 Fix available 8.1 HighJune 14, 2020
• fasterxml jackson-databind, debian linux, netapp active iq unified manager +10 more +12 more Deserialization of untrusted data in Jackson Databind CVE-2020-14062 Fix available 8.1 HighJune 14, 2020
• jquery, debian linux, drupal +67 more +69 more jQuery has a potential XSS vulnerability CVE-2020-11022 Public exploitFix available EPSS 99.2% 6.9 MediumApril 29, 2020
• fasterxml jackson-databind, debian linux, netapp steelstore cloud integrated storage +29 more +31 more jackson-databind mishandles the interaction between serialization gadgets and typing CVE-2020-11111 Fix available 8.8 HighMarch 31, 2020
• fasterxml jackson-databind, debian linux, netapp steelstore cloud integrated storage +29 more +31 more jackson-databind mishandles the interaction between serialization gadgets and typing CVE-2020-11112 Fix available 8.8 HighMarch 31, 2020
• fasterxml jackson-databind, debian linux, netapp steelstore cloud integrated storage +30 more +32 more jackson-databind mishandles the interaction between serialization gadgets and typing CVE-2020-11113 Public exploitFix available 8.8 HighMarch 31, 2020
• fasterxml jackson-databind, debian linux, netapp steelstore cloud integrated storage +29 more +31 more jackson-databind mishandles the interaction between serialization gadgets and typing CVE-2020-10968 Fix available 8.8 HighMarch 26, 2020
• fasterxml jackson-databind, debian linux, netapp steelstore cloud integrated storage +29 more +31 more jackson-databind mishandles the interaction between serialization gadgets and typing CVE-2020-10969 Fix available 8.8 HighMarch 26, 2020
• fasterxml jackson-databind, debian linux, netapp steelstore cloud integrated storage +29 more +31 more jackson-databind mishandles the interaction between serialization gadgets and typing CVE-2020-10672 Fix available 8.8 HighMarch 18, 2020
• fasterxml jackson-databind, debian linux, netapp steelstore cloud integrated storage +29 more +31 more jackson-databind mishandles the interaction between serialization gadgets and typing CVE-2020-10673 Public exploitFix available 8.8 HighMarch 18, 2020
• fasterxml jackson-databind, debian linux, netapp active iq unified manager +28 more +30 more jackson-databind mishandles the interaction between serialization gadgets and typing CVE-2020-9546 Fix available 9.8 CriticalMarch 2, 2020
• fasterxml jackson-databind, debian linux, netapp active iq unified manager +22 more +24 more jackson-databind mishandles the interaction between serialization gadgets and typing CVE-2020-9548 Public exploitFix available EPSS 18.9% 9.8 CriticalMarch 2, 2020
• hibernate hibernate-validator, netapp active iq unified manager, element +185 more +187 more The SafeHtml annotation in Hibernate-Validator does not properly guard against XSS attacks CVE-2019-10219 Public exploitFix available 6.5 MediumNovember 8, 2019
• oracle banking digital experience Vulnerability in the Oracle Banking Digital Experience product of Oracle Financial Services... CVE-2019-3019 5.4 MediumOctober 16, 2019
• smartbear swagger ui, oracle banking apis, banking digital experience +3 more +5 more Cross-site scripting in Swagger-UI CVE-2019-17495 Public exploitFix available 9.8 CriticalOctober 10, 2019
• backdropcms backdrop, drupal, jquery +102 more +104 more XSS in jQuery as used in Drupal, Backdrop CMS, and other products CVE-2019-11358 Public exploitFix available EPSS 86.8% 6.1 MediumApril 17, 2019