Oracle Blockchain Platform vulnerabilities

• oracle advanced networking option, agile engineering data management, agile product lifecycle management +108 more +110 more Vulnerability in the Advanced Networking Option component of Oracle Database Server. Supported... CVE-2021-2351 8.3 HighJuly 20, 2021
• f5 nginx, fedoraproject fedora, netapp ontap select deploy administration utility +10 more +12 more A security issue in nginx resolver was identified, which might allow an attacker who is able to... CVE-2021-23017 Public exploitFix available EPSS 53.5% 7.7 HighMay 25, 2021
• apache commons io, debian linux, netapp active iq unified manager +57 more +59 more Possible limited path traversal vulnerabily in Apache Commons IO CVE-2021-29425 Public exploitFix available EPSS 10.5% 4.8 MediumApril 13, 2021
• fasterxml jackson-databind, debian linux, netapp cloud backup +54 more +56 more Unsafe Deserialization in jackson-databind CVE-2020-36179 Public exploitFix available EPSS 17.1% 8.1 HighJanuary 6, 2021
• fasterxml jackson-databind, debian linux, netapp cloud backup +56 more +58 more Unsafe Deserialization in jackson-databind CVE-2020-36180 Public exploitFix available 8.1 HighJanuary 6, 2021
• fasterxml jackson-databind, debian linux, netapp cloud backup +56 more +58 more Unsafe Deserialization in jackson-databind CVE-2020-36182 Fix available 8.1 HighJanuary 6, 2021
• fasterxml jackson-databind, debian linux, netapp cloud backup +42 more +44 more Unsafe Deserialization in jackson-databind CVE-2020-36183 Fix available 8.1 HighJanuary 6, 2021
• fasterxml jackson-databind, debian linux, netapp cloud backup +56 more +58 more Unsafe Deserialization in jackson-databind CVE-2020-36184 Public exploitFix available 8.1 HighJanuary 6, 2021
• fasterxml jackson-databind, debian linux, netapp cloud backup +42 more +44 more Unsafe Deserialization in jackson-databind CVE-2020-36185 Fix available 8.1 HighJanuary 6, 2021
• fasterxml jackson-databind, debian linux, netapp cloud backup +42 more +44 more Unsafe Deserialization in jackson-databind CVE-2020-36186 Fix available 8.1 HighJanuary 6, 2021
• fasterxml jackson-databind, debian linux, netapp cloud backup +42 more +44 more Unsafe Deserialization in jackson-databind CVE-2020-36187 Fix available 8.1 HighJanuary 6, 2021
• fasterxml jackson-databind, debian linux, netapp cloud backup +42 more +44 more Unsafe Deserialization in jackson-databind CVE-2020-36188 Public exploitFix available 8.1 HighJanuary 6, 2021
• fasterxml jackson-databind, debian linux, netapp cloud backup +37 more +39 more Unsafe Deserialization in jackson-databind CVE-2020-36189 Fix available 8.1 HighJanuary 6, 2021
• fasterxml jackson-databind, debian linux, netapp service level manager +55 more +57 more Unsafe Deserialization in jackson-databind CVE-2020-36181 Fix available 8.1 HighJanuary 6, 2021
• fasterxml jackson-databind, debian linux, netapp service level manager +37 more +39 more Serialization gadget exploit in jackson-databind CVE-2020-35728 Public exploitFix available EPSS 12.5% 8.1 HighDecember 27, 2020
• apache karaf, bouncycastle bc-java, oracle banking corporate lending process management +17 more +19 more Logic error in Legion of the Bouncy Castle BC Java CVE-2020-28052 Public exploitFix available 8.1 HighDecember 18, 2020
• fasterxml jackson-databind, debian linux, netapp service level manager +22 more +24 more Serialization gadgets exploit in jackson-databind CVE-2020-35490 Fix available 8.1 HighDecember 17, 2020
• fasterxml jackson-databind, debian linux, netapp service level manager +23 more +25 more Serialization gadgets exploit in jackson-databind CVE-2020-35491 Fix available 8.1 HighDecember 17, 2020
• apache tomcat, debian linux, netapp element plug-in +9 more +11 more Apache Tomcat: Request header mix-up between HTTP/2 streams CVE-2020-17527 Public exploitFix available EPSS 24.6% 7.5 HighDecember 3, 2020
• eclipse jetty, the eclipse foundation eclipse jetty, apache kafka +15 more +17 more Buffer not correctly recycled in Gzip Request inflation CVE-2020-27218 Fix available 4.8 MediumNovember 28, 2020
• nodejs node, node.js, c-ares project c-ares +6 more +8 more Uncontrolled Resource Consumption in node CVE-2020-8277 Public exploitFix available EPSS 54.2% 7.5 HighNovember 19, 2020
• apache iotdb, fasterxml jackson-databind, fedoraproject fedora +36 more +38 more XML External Entity (XXE) Injection in Jackson Databind CVE-2020-25649 Fix available EPSS 17.7% 7.5 HighOctober 14, 2020
• fasterxml jackson-databind, debian linux, oracle agile product lifecycle management +23 more +25 more Unsafe Deserialization in jackson-databind CVE-2020-24750 Public exploitFix available 8.1 HighSeptember 17, 2020
• fasterxml jackson-databind, debian linux, netapp active iq unified manager +22 more +24 more Code Injection in jackson-databind CVE-2020-24616 Public exploitFix available 8.1 HighAugust 25, 2020
• lodash, oracle banking corporate lending process management, banking credit facilities process management +15 more +17 more Prototype Pollution in lodash CVE-2020-8203 Public exploitFix available 7.4 HighJuly 15, 2020
• apache tomcat, canonical ubuntu linux, debian linux +15 more +17 more Infinite Loop in Apache Tomcat CVE-2020-13935 Public exploitFix available EPSS 86.6% 7.5 HighJuly 14, 2020
• openldap, redhat enterprise linux, mcafee policy auditor +2 more +4 more libldap in certain third-party OpenLDAP packages has a certificate-validation flaw when the third... CVE-2020-15719 Fix available 4.2 MediumJuly 14, 2020
• nodejs node.js, oracle banking extensibility workbench, blockchain platform +2 more +4 more TLS session reuse can lead to host certificate verification bypass in node version < 12.18.0 and ... CVE-2020-8172 Fix available 7.4 HighJune 8, 2020
• netapp active iq unified manager, oncommand insight, oncommand workflow automation +6 more +8 more napi_get_value_string_*() allows various kinds of memory corruption in node < 10.21.0, 12.18.0,... CVE-2020-8174 Fix available 8.1 HighJune 6, 2020
• nghttp2, debian linux, fedoraproject fedora +7 more +9 more Denial of service in nghttp2 CVE-2020-11080 Fix available 3.7 LowJune 3, 2020
• jquery, debian linux, drupal +49 more +51 more Potential XSS vulnerability in jQuery CVE-2020-11023 In KEVPublic exploitFix available EPSS 84.9% 6.9 MediumApril 29, 2020
• jquery, debian linux, drupal +67 more +69 more jQuery has a potential XSS vulnerability CVE-2020-11022 Public exploitFix available EPSS 99.2% 6.9 MediumApril 29, 2020
• dropwizard dropwizard-validation, validation, oracle blockchain platform +2 more Remote Code Execution (RCE) vulnerability in dropwizard-validation CVE-2020-5245 Public exploitFix available 7.9 HighFebruary 24, 2020
• apache kafka, oracle banking corporate lending process management, banking credit facilities process management +10 more +12 more Exposure of Sensitive Information to an Unauthorized Actor in Apache Kafka CVE-2019-12399 Fix available 7.5 HighJanuary 14, 2020
• apache commons beanutils, nifi, debian linux +57 more +59 more Insecure Deserialization in Apache Commons Beanutils CVE-2019-10086 Fix available EPSS 29.1% 7.3 HighAugust 20, 2019
• openldap, apple mac os x, canonical ubuntu linux +9 more +11 more An issue was discovered in OpenLDAP 2.x before 2.4.48. When using SASL authentication and session... CVE-2019-13565 Fix available 7.5 HighJuly 26, 2019
• openldap, apple mac os x, canonical ubuntu linux +9 more +11 more An issue was discovered in the server in OpenLDAP before 2.4.48. When the server administrator... CVE-2019-13057 Fix available 4.9 MediumJuly 26, 2019
• openldap, mcafee policy auditor, opensuse leap +1 more +3 more contrib/slapd-modules/nops/nops.c in OpenLDAP through 2.4.45, when both the nops module and the... CVE-2017-17740 Fix available 7.5 HighDecember 18, 2017
• openldap, oracle blockchain platform +1 more slapd in OpenLDAP 2.4.45 and earlier creates a PID file after dropping privileges to a non-root... CVE-2017-14159 Fix available 4.7 MediumSeptember 5, 2017
• openldap, debian linux, mcafee policy auditor +7 more +9 more servers/slapd/back-mdb/search.c in OpenLDAP through 2.4.44 is prone to a double free... CVE-2017-9287 Fix available 6.5 MediumMay 29, 2017