Skip to contentOracle Commerce vulnerabilities
- vmware spring framework, cisco cx cloud agent, oracle commerce platform +35 more +37 moreRemote Code Execution in Spring FrameworkCVE-2022-22965In KEVPublic exploitFix availableEPSS 99.6%9.8 Critical
- ckeditor, ckeditor ckeditor4, drupal +7 more +9 moreRegular expression Denial of Service in dialog pluginCVE-2022-24729Fix available6.5 Medium
- ckeditor, ckeditor ckeditor4, drupal +7 more +9 moreCross-site Scripting in CKEditor4CVE-2022-24728Fix available5.4 Medium
- fasterxml jackson-databind, debian linux, netapp active iq unified manager +33 more +35 moreDeeply nested json in jackson-databindCVE-2020-36518Public exploitFix available7.5 High
- vmware spring cloud gateway, oracle commerce guided search, communications cloud native core binding support function +3 more +5 moreIn spring cloud gateway versions prior to 3.1.1+ , applications that are configured to enable...CVE-2022-229465.5 Medium
- vmware spring cloud gateway, oracle commerce guided search, communications cloud native core binding support function +7 more +9 moreSpring Cloud Gateway vulnerable to Code Injection when Gateway Actuator endpoint enabled, exposed, unsecuredCVE-2022-22947In KEVPublic exploitFix availableEPSS 98.3%10.0 Critical
- x-stream xstream, debian linux, fedoraproject fedora +8 more +10 moreDenial of Service by injecting highly recursive collections or maps in XStreamCVE-2021-43859Fix available7.5 High
- oracle commerce platformVulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo...CVE-2022-213875.3 Medium
- ckeditor, ckeditor ckeditor4, drupal +7 more +9 moreHTML comments vulnerability allowing to execute JavaScript codeCVE-2021-41165Fix available8.2 High
- ckeditor, ckeditor ckeditor4, drupal +8 more +10 moreAdvanced Content Filter (ACF) vulnerability allowing to execute JavaScript code using malformed HTMLCVE-2021-41164Fix available8.2 High
- apache software foundation santuario, apache cxf, santuario xml security for java +16 more +18 moreBypass of the secureValidation propertyCVE-2021-40690Fix available7.5 High
- haxx curl, apple macos, debian linux +26 more +28 moreWhen curl >= 7.20.0 and <= 7.78.0 connects to an IMAP or POP3 server to retrieve data using...CVE-2021-22947Fix available5.9 Medium
- haxx curl, apple macos, debian linux +29 more +31 moreA user can tell curl >= 7.20.0 and <= 7.78.0 to require a successful upgrade to TLS when speaking...CVE-2021-22946Fix available7.5 High
- debian linux, netapp oncommand insight, netty +9 more +11 moreSnappyFrameDecoder doesn't restrict chunk length any may buffer skippable chunks in an unnecessary wayCVE-2021-37137Fix available7.5 High
- debian linux, netapp oncommand insight, netty +16 more +18 moreBzip2Decoder doesn't allow setting size restrictions for decompressed dataCVE-2021-37136Fix available7.5 High
- x-stream xstream, debian linux, fedoraproject fedora +12 more +14 moreA Server-Side Forgery Request vulnerability in XStream via PriorityQueue unmarshalingCVE-2021-39150Fix available8.5 High
- x-stream xstream, debian linux, fedoraproject fedora +12 more +14 moreA Server-Side Forgery Request vulnerability in XStream via HashMap unmarshalingCVE-2021-39152Fix availableEPSS 11.4%8.5 High
- x-stream xstream, debian linux, fedoraproject fedora +12 more +14 moreXStream can cause a Denial of ServiceCVE-2021-39140Fix available6.5 Medium
- x-stream xstream, debian linux, fedoraproject fedora +12 more +14 moreXStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-39149Fix available8.5 High
- x-stream xstream, debian linux, fedoraproject fedora +12 more +14 moreXStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-39148Fix available8.5 High
- x-stream xstream, debian linux, fedoraproject fedora +12 more +14 moreXStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-39147Fix available8.5 High
- x-stream xstream, debian linux, fedoraproject fedora +12 more +14 moreXStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-39146Fix availableEPSS 14.3%8.5 High
- x-stream xstream, debian linux, fedoraproject fedora +12 more +14 moreXStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-39145Fix available8.5 High
- x-stream xstream, debian linux, fedoraproject fedora +12 more +14 moreXStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-39141Public exploitFix availableEPSS 16.1%8.5 High
- x-stream xstream, debian linux, fedoraproject fedora +12 more +14 moreXStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-39151Fix available8.5 High
- x-stream xstream, debian linux, fedoraproject fedora +12 more +14 moreXStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-39139Fix available8.5 High
- x-stream xstream, debian linux, fedoraproject fedora +12 more +14 moreXStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-39154Fix available8.5 High
- x-stream xstream, debian linux, fedoraproject fedora +12 more +14 moreXStream is vulnerable to a Remote Command Execution attackCVE-2021-39144In KEVPublic exploitFix availableEPSS 98.1%8.5 High
- ckeditor, ckeditor ckeditor4, debian linux +10 more +12 moreExecution of JavaScript code using malformed HTML in ckeditorCVE-2021-37695Fix available7.3 High
- ckeditor, ckeditor ckeditor4, fedoraproject fedora +8 more +10 moreArbitrary HTML injection vulnerability in ckeditorCVE-2021-32809Fix available4.6 Medium
- ckeditor, ckeditor ckeditor4, fedoraproject fedora +11 more +13 moreCross-site scripting in ckeditor via abuse of undo functionalityCVE-2021-32808Fix available7.6 High
- oracle commerce platformVulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo...CVE-2021-24639.8 Critical
- oracle commerce service centerVulnerability in the Oracle Commerce Service Center product of Oracle Commerce (component:...CVE-2021-24626.1 Medium
- oracle advanced networking option, agile engineering data management, agile product lifecycle management +108 more +110 moreVulnerability in the Advanced Networking Option component of Oracle Database Server. Supported...CVE-2021-23518.3 High
- oracle commerce experience manager, commerce guided search, oracle corporation commerce guided search / oracle commerce experience manager +2 moreVulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product...CVE-2021-23484.3 Medium
- oracle commerce experience manager, commerce guided search, oracle corporation commerce guided search / oracle commerce experience manager +2 moreVulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product...CVE-2021-23465.4 Medium
- oracle commerce experience manager, commerce guided search, oracle corporation commerce guided search / oracle commerce experience manager +2 moreVulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product...CVE-2021-23455.4 Medium
- apache commons compress, netapp active iq unified manager, oncommand insight +31 more +33 moreApache Commons Compress 1.0 to 1.20 denial of service vulnerabilityCVE-2021-36090Fix availableEPSS 12.9%7.5 High
- apache commons compress, netapp active iq unified manager, oncommand insight +24 more +26 moreApache Commons Compress 1.1 to 1.20 denial of service vulnerabilityCVE-2021-35517Fix availableEPSS 10.6%7.5 High
- apache commons compress, netapp active iq unified manager, oncommand insight +21 more +23 moreApache Commons Compress 1.6 to 1.20 denial of service vulnerabilityCVE-2021-35516Fix availableEPSS 12.4%7.5 High
- apache commons compress, netapp active iq unified manager, oncommand insight +23 more +25 moreApache Commons Compress 1.6 to 1.20 denial of service vulnerabilityCVE-2021-35515Fix availableEPSS 11.6%7.5 High
- vmware spring framework, netapp hci, management services for element software +29 more +31 moreImproper Privilege Management in Spring FrameworkCVE-2021-22118Fix available7.8 High
- apache commons io, debian linux, netapp active iq unified manager +57 more +59 morePossible limited path traversal vulnerabily in Apache Commons IOCVE-2021-29425Public exploitFix availableEPSS 10.5%4.8 Medium
- openssl, fedoraproject fedora, freebsd +30 more +32 moreCA certificate check bypass with X509_V_FLAG_X509_STRICTCVE-2021-3450Public exploitFix availableEPSS 18.3%7.4 High
- ckeditor, oracle agile product lifecycle management, application express +7 more +9 moreInclusion of Functionality from Untrusted Control Sphere in CKEditor 4CVE-2021-26272Fix available6.5 Medium
- fasterxml jackson-databind, apache nifi, debian linux +6 more +8 moreDeserialization of untrusted data in jackson-databindCVE-2021-20190Fix available8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +54 more +56 moreUnsafe Deserialization in jackson-databindCVE-2020-36179Public exploitFix availableEPSS 17.1%8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +56 more +58 moreUnsafe Deserialization in jackson-databindCVE-2020-36180Public exploitFix available8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +56 more +58 moreUnsafe Deserialization in jackson-databindCVE-2020-36182Fix available8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +42 more +44 moreUnsafe Deserialization in jackson-databindCVE-2020-36183Fix available8.1 High
- Show moreLoading…