Oracle Communications Design Studio vulnerabilities

• pivotal spring security oauth, spring security oauth, oracle communications design studio +2 more Denial of service in Spring Security OAuth2 CVE-2022-22969 Fix available 6.5 MediumApril 21, 2022
• netty, debian linux, netapp oncommand workflow automation +15 more +17 more HTTP fails to validate against control chars in header names which may lead to HTTP request smuggling CVE-2021-43797 Fix available 6.5 MediumDecember 9, 2021
• oracle advanced networking option, agile engineering data management, agile product lifecycle management +108 more +110 more Vulnerability in the Advanced Networking Option component of Oracle Database Server. Supported... CVE-2021-2351 8.3 HighJuly 20, 2021
• apache commons io, debian linux, netapp active iq unified manager +57 more +59 more Possible limited path traversal vulnerabily in Apache Commons IO CVE-2021-29425 Public exploitFix available EPSS 10.5% 4.8 MediumApril 13, 2021
• netty, debian linux, netapp oncommand api services +15 more +17 more Possible request smuggling in HTTP/2 due missing validation of content-length CVE-2021-21409 Fix available 5.9 MediumMarch 30, 2021
• lodash, netapp active iq unified manager, cloud manager +20 more +22 more Command Injection CVE-2021-23337 Public exploitFix available EPSS 21.3% 7.2 HighFebruary 15, 2021
• lodash, oracle banking corporate lending process management, banking credit facilities process management +16 more +18 more Regular Expression Denial of Service (ReDoS) CVE-2020-28500 Fix available 5.3 MediumFebruary 15, 2021
• netty, debian linux, netapp active iq unified manager +10 more +12 more Local Information Disclosure Vulnerability in Netty on Unix-Like systems due temporary files CVE-2021-21290 Fix available 6.2 MediumFebruary 8, 2021
• spring by vmware framework, vmware spring framework, netapp oncommand insight +36 more +38 more RFD Protection Bypass via jsessionid CVE-2020-5421 Public exploitFix available EPSS 11.6% 8.7 HighSeptember 19, 2020
• netty, debian linux, fedoraproject fedora +10 more +12 more Denial of Service in Netty CVE-2020-11612 Fix available 7.5 HighApril 7, 2020
• hibernate hibernate-validator, netapp active iq unified manager, element +185 more +187 more The SafeHtml annotation in Hibernate-Validator does not properly guard against XSS attacks CVE-2019-10219 Public exploitFix available 6.5 MediumNovember 8, 2019
• sqlite, canonical ubuntu linux, debian linux +20 more +22 more In SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other... CVE-2019-16168 Fix available 6.5 MediumSeptember 9, 2019
• apache commons beanutils, nifi, debian linux +57 more +59 more Insecure Deserialization in Apache Commons Beanutils CVE-2019-10086 Fix available EPSS 29.1% 7.3 HighAugust 20, 2019
• apache axis 1.4, axis, oracle agile engineering data management +35 more +37 more Server Side Request Forgery in Apache Axis CVE-2019-0227 Public exploitFix available EPSS 91.9% 7.5 HighMay 1, 2019
• apache axis, debian linux, oracle agile engineering data management +35 more +37 more Moderate severity vulnerability that affects apache axis CVE-2018-8032 Public exploitFix available EPSS 10.6% 6.1 MediumAugust 2, 2018