Skip to contentOracle Business Process Management Suite vulnerabilities
- oracle business process management suiteVulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware...CVE-2026-913588.2 High
- oracle business process management suiteVulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware...CVE-2026-912439.6 Critical
- oracle business process management suiteVulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware...CVE-2026-912229.9 Critical
- oracle business process management suiteVulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware...CVE-2026-912209.8 Critical
- oracle business process management suiteVulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware...CVE-2026-912138.8 High
- oracle business process management suiteVulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware...CVE-2026-605429.9 Critical
- oracle business process management suiteVulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware...CVE-2026-342846.1 Medium
- apache chainsaw, log4j, apache software foundation log4j 1.x +24 more +26 moreA deserialization flaw in the Chainsaw component of Log4j 1 can lead to malicious code execution.CVE-2022-23307Fix availableEPSS 54.4%8.8 High
- apache log4j, apache software foundation log4j 1.x, broadcom brocade sannav +26 more +28 moreSQL injection in JDBC Appender in Apache Log4j V1CVE-2022-23305Public exploitFix availableEPSS 66.5%9.8 Critical
- apache log4j, apache software foundation log4j 1.x, broadcom brocade sannav +24 more +26 moreDeserialization of untrusted data in JMSSink in Apache Log4j 1.xCVE-2022-23302Fix availableEPSS 63.8%8.8 High
- apache log4j, apache software foundation log4j 1.x, fedoraproject fedora +44 more +46 moreDeserialization of untrusted data in JMSAppender in Apache Log4j 1.2CVE-2021-4104Public exploitFix availableEPSS 80.6%7.5 High
- jhy jsoup, netapp management services for element software and netapp hci, oracle banking trade finance +13 more +15 moreCrafted input may cause the jsoup HTML and XML parser to get stuck, timeout, or throw unchecked exceptionsCVE-2021-37714Fix available7.5 High
- apache commons compress, netapp active iq unified manager, oncommand insight +31 more +33 moreApache Commons Compress 1.0 to 1.20 denial of service vulnerabilityCVE-2021-36090Fix availableEPSS 12.9%7.5 High
- apache commons compress, netapp active iq unified manager, oncommand insight +24 more +26 moreApache Commons Compress 1.1 to 1.20 denial of service vulnerabilityCVE-2021-35517Fix availableEPSS 10.6%7.5 High
- apache commons compress, netapp active iq unified manager, oncommand insight +21 more +23 moreApache Commons Compress 1.6 to 1.20 denial of service vulnerabilityCVE-2021-35516Fix availableEPSS 12.4%7.5 High
- apache commons compress, netapp active iq unified manager, oncommand insight +23 more +25 moreApache Commons Compress 1.6 to 1.20 denial of service vulnerabilityCVE-2021-35515Fix availableEPSS 11.6%7.5 High
- apache groovy, atlas, netapp snapcenter +18 more +20 moreInformation Disclosure in Apache GroovyCVE-2020-17521Fix available5.5 Medium
- apache ant, canonical ubuntu linux, fedoraproject fedora +47 more +49 moreSensitive Data Exposure in Apache AntCVE-2020-1945Fix available6.3 Medium
- dom4j project dom4j, canonical ubuntu linux, netapp oncommand api services +35 more +37 moredom4j allows External Entities by default which might enable XXE attacksCVE-2020-10683Fix available9.8 Critical
- apache tika, canonical ubuntu linux, debian linux +3 more +5 moreInfinite Loop in Apache TikaCVE-2020-1951Fix available5.5 Medium
- apache tika, canonical ubuntu linux, debian linux +3 more +5 moreUncontrolled Resource Consumption in Apache TikaCVE-2020-1950Fix available5.5 Medium
- hibernate hibernate-validator, netapp active iq unified manager, element +185 more +187 moreThe SafeHtml annotation in Hibernate-Validator does not properly guard against XSS attacksCVE-2019-10219Public exploitFix available6.5 Medium
- oracle application testing suite, banking enterprise collections, banking enterprise originations +19 more +21 moreVulnerability in the Oracle JDeveloper and ADF product of Oracle Fusion Middleware (component:...CVE-2019-2904EPSS 14.3%9.8 Critical
- apache tomee, bouncycastle bc-java, netapp active iq unified manager +18 more +20 moreOut-of-Memory Error in Bouncy Castle CryptoCVE-2019-17359Fix available7.5 High
- oracle business process management suiteVulnerability in the Oracle Business Process Management Suite component of Oracle Fusion...CVE-2019-27068.2 High
- backdropcms backdrop, drupal, jquery +102 more +104 moreXSS in jQuery as used in Drupal, Backdrop CMS, and other productsCVE-2019-11358Public exploitFix availableEPSS 86.8%6.1 Medium
- fasterxml jackson-databind, debian linux, oracle business process management suite +9 more +11 morecom.fasterxml.jackson.core:jackson-databind vulnerable to Deserialization of Untrusted DataCVE-2018-19362Fix availableEPSS 10.6%9.8 Critical
- fasterxml jackson-databind, debian linux, oracle business process management suite +9 more +11 moreDeserialization of Untrusted Data in jackson-databindCVE-2018-19361Fix availableEPSS 10.6%9.8 Critical
- fasterxml jackson-databind, debian linux, oracle business process management suite +9 more +11 moreDeserialization of Untrusted Data in jackson-databind due to polymorphic deserializationCVE-2018-19360Fix availableEPSS 10.6%9.8 Critical
- fasterxml jackson-databind, debian linux, netapp oncommand workflow automation +17 more +19 moreArbitrary Code Execution in jackson-databindCVE-2018-14719Fix available9.8 Critical
- fasterxml jackson-databind, debian linux, netapp oncommand workflow automation +22 more +24 moreArbitrary Code Execution in jackson-databindCVE-2018-14718Fix availableEPSS 12.7%9.8 Critical
- oracle weblogic server, banking platform, business process management suite +6 more +8 moreVulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent:...CVE-2018-32467.5 High
- apache tika, oracle business process management suite +1 moreHigh severity vulnerability that affects org.apache.tika:tika-coreCVE-2018-11761Public exploitFix available7.5 High
- oracle business process management suiteVulnerability in the Oracle Business Process Management Suite component of Oracle Fusion...CVE-2018-31009.1 Critical
- bouncycastle bc-java, netapp oncommand workflow automation, opensuse leap +21 more +23 moreDeserialization of Untrusted Data in Bouncy castleCVE-2018-1000613Fix available9.8 Critical
- bouncycastle bc-java, fips java api, debian linux +17 more +19 moreBouncy Castle has a flaw in the Low-level interface to RSA key pair generatorCVE-2018-1000180Fix available7.5 High
- jquery, oracle agile product lifecycle management for process, banking platform +44 more +46 moreCross-Site Scripting (XSS) in jqueryCVE-2015-9251Public exploitFix availableEPSS 29.7%6.1 Medium