Skip to contentOracle Commerce vulnerabilities
- fasterxml jackson-databind, debian linux, netapp cloud backup +56 more +58 moreUnsafe Deserialization in jackson-databindCVE-2020-36184Public exploitFix available8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +42 more +44 moreUnsafe Deserialization in jackson-databindCVE-2020-36185Fix available8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +42 more +44 moreUnsafe Deserialization in jackson-databindCVE-2020-36186Fix available8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +42 more +44 moreUnsafe Deserialization in jackson-databindCVE-2020-36187Fix available8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +42 more +44 moreUnsafe Deserialization in jackson-databindCVE-2020-36188Public exploitFix available8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +37 more +39 moreUnsafe Deserialization in jackson-databindCVE-2020-36189Fix available8.1 High
- fasterxml jackson-databind, debian linux, netapp service level manager +55 more +57 moreUnsafe Deserialization in jackson-databindCVE-2020-36181Fix available8.1 High
- fasterxml jackson-databind, debian linux, netapp service level manager +37 more +39 moreSerialization gadget exploit in jackson-databindCVE-2020-35728Public exploitFix availableEPSS 12.5%8.1 High
- apache karaf, bouncycastle bc-java, oracle banking corporate lending process management +17 more +19 moreLogic error in Legion of the Bouncy Castle BC JavaCVE-2020-28052Public exploitFix available8.1 High
- google guava, netapp active iq unified manager, oracle commerce guided search +10 more +12 moreTemp directory permission issue in GuavaCVE-2020-8908Fix available3.3 Low
- ckeditor, oracle agile product lifecycle management, application express +6 more +8 moreImproper Neutralization of Input During Web Page Generation in CKEditor4CVE-2020-27193Fix available6.1 Medium
- apache iotdb, fasterxml jackson-databind, fedoraproject fedora +36 more +38 moreXML External Entity (XXE) Injection in Jackson DatabindCVE-2020-25649Fix availableEPSS 17.7%7.5 High
- apache httpclient, netapp active iq unified manager, snapcenter +14 more +16 moreCross-site scripting in Apache HttpClientCVE-2020-13956Fix available5.3 Medium
- spring by vmware framework, vmware spring framework, netapp oncommand insight +36 more +38 moreRFD Protection Bypass via jsessionidCVE-2020-5421Public exploitFix availableEPSS 11.6%8.7 High
- joyent json, oracle commerce guided search, financial services crime and compliance management studio +2 more +4 moreCommand InjectionCVE-2020-7712Fix available7.2 High
- oracle suitecommerce advanced, oracle corporation netsuite service +1 moreVulnerability in SuiteCommerce Advanced (SCA) Sites component of Oracle NetSuite service....CVE-2020-147295.4 Medium
- oracle suitecommerce advanced, oracle corporation netsuite service +1 moreVulnerability in the SuiteCommerce Advanced (SCA) component of Oracle NetSuite service. Supported...CVE-2020-147285.4 Medium
- oracle commerce experience manager, commerce guided search, oracle corporation commerce guided search / oracle commerce experience manager +2 moreVulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product...CVE-2020-145367.4 High
- oracle commerce service center, oracle corporation commerce platform +1 moreVulnerability in the Oracle Commerce Service Center product of Oracle Commerce (component:...CVE-2020-145357.4 High
- oracle commerce platformVulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo...CVE-2020-145333.5 Low
- oracle commerce platformVulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo...CVE-2020-145324.7 Medium
- apache tomcat, canonical ubuntu linux, debian linux +15 more +17 moreInfinite Loop in Apache TomcatCVE-2020-13935Public exploitFix availableEPSS 86.6%7.5 High
- apache cxf, oracle commerce guided search, communications element manager +4 more +6 moreReflected Cross-Site Scripting in Apache CXFCVE-2019-17573Public exploitFix available6.1 Medium
- apache cxf, oracle commerce guided search, communications diameter signaling router +5 more +7 morePrivate key leak in Apache CXFCVE-2019-12423Fix available7.5 High
- oracle graalvm, oracle corporation java, canonical ubuntu linux +25 more +27 moreVulnerability in the Oracle GraalVM Enterprise Edition product of Oracle GraalVM (component: Java...CVE-2020-2604Fix available8.1 High
- oracle coherence, access manager, commerce platform +7 more +9 moreVulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Caching...CVE-2020-2555In KEVPublic exploitEPSS 97.1%9.8 Critical
- hibernate hibernate-validator, netapp active iq unified manager, element +185 more +187 moreThe SafeHtml annotation in Hibernate-Validator does not properly guard against XSS attacksCVE-2019-10219Public exploitFix available6.5 Medium
- apache cxf, oracle commerce guided search, enterprise manager base platform +2 more +4 morePotential session hijack in Apache CXFCVE-2019-12419Fix availableEPSS 13.8%9.8 Critical
- apache cxf, oracle commerce guided search, flexcube private banking +1 more +3 morePotential DOS attack due to unrestricted attachment count in messagesCVE-2019-12406Fix available6.5 Medium
- oracle commerce merchandisingVulnerability in the Oracle Commerce Merchandising component of Oracle Commerce (subcomponent:...CVE-2019-27136.5 Medium
- oracle commerce platformVulnerability in the Oracle Commerce Platform component of Oracle Commerce (subcomponent: Dynamo...CVE-2019-27126.1 Medium
- oracle commerce platformVulnerability in the Oracle Commerce Platform component of Oracle Commerce (subcomponent: Dynamo...CVE-2019-26596.1 Medium
- oracle retail open commerce platform, oracle corporation retail open commerce platform cloud service +1 moreVulnerability in the Oracle Retail Open Commerce Platform component of Oracle Retail Applications...CVE-2018-31226.8 Medium
- pivotal spring framework, oracle agile product lifecycle management, application testing suite +27 more +29 moreDenial of Service in org.springframework:spring-coreCVE-2018-1257Fix available6.5 Medium
- spring by pivotal framework, vmware spring framework, oracle application testing suite +17 more +19 moreSpring Framework has Improperly Implemented Security Check for StandardCVE-2018-1275Fix availableEPSS 57.7%9.8 Critical
- spring by pivotal framework, vmware spring framework, oracle application testing suite +23 more +25 morePossible privilege escalation in org.springframework:spring-coreCVE-2018-1272Fix available7.5 High
- spring by pivotal framework, vmware spring framework, oracle application testing suite +26 more +28 morePath Traversal in org.springframework:spring-coreCVE-2018-1271Fix availableEPSS 30.3%5.9 Medium
- spring by pivotal framework, vmware spring framework, debian linux +26 more +28 moreSpring Framework allows applications to expose STOMP over WebSocket endpointsCVE-2018-1270Public exploitFix availableEPSS 77.6%9.8 Critical
- oracle retail open commerce platform cloud serviceVulnerability in the Oracle Retail Open Commerce Platform component of Oracle Retail Applications...CVE-2017-101735.8 Medium
- oracle retail open commerce platform cloud serviceVulnerability in the Oracle Retail Open Commerce Platform component of Oracle Retail Applications...CVE-2017-101726.1 Medium
- oracle commerce, oracle corporation commerce guided search / oracle commerce experience manager +1 moreVulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager component...CVE-2017-35727.5 High
- oracle retail open commerce platform cloud serviceVulnerability in the Oracle Retail Open Commerce Platform component of Oracle Retail Applications...CVE-2017-34515.4 Medium
- apache log4j, netapp oncommand api services, oncommand insight +76 more +78 moreDeserialization of Untrusted Data in Log4jCVE-2017-5645Public exploitFix availableEPSS 89.4%9.8 Critical
- oracle commerce platformVulnerability in the Oracle Commerce Platform component of Oracle Commerce (subcomponent: Dynamo...CVE-2017-32964.3 Medium
- oracle commerce service centerUnspecified vulnerability in the Oracle Commerce Service Center component in Oracle Commerce 10.0...CVE-2016-54918.2 High
- oracle commerce guided searchUnspecified vulnerability in the Oracle Commerce Guided Search component in Oracle Commerce 6.2.2...CVE-2016-54828.2 High
- oracle retail open commerce platform cloud serviceUnspecified vulnerability in the Oracle Retail Open Commerce Platform Cloud Service component in...CVE-2016-05227.5 High
- oracle commerce platformUnspecified vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience...CVE-2015-26536.4 Medium
- oracle commerce platformUnspecified vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience...CVE-2015-26075.0 Medium
- oracle commerce platformUnspecified vulnerability in the Oracle Commerce Platform component in Oracle Commerce Platform 9...CVE-2015-05104.3 Medium
- Show moreLoading…