Oracle Communications Network Integrity vulnerabilities

• apache chainsaw, log4j, apache software foundation log4j 1.x +24 more +26 more A deserialization flaw in the Chainsaw component of Log4j 1 can lead to malicious code execution. CVE-2022-23307 Fix available EPSS 54.4% 8.8 HighJanuary 18, 2022
• apache log4j, apache software foundation log4j 1.x, broadcom brocade sannav +26 more +28 more SQL injection in JDBC Appender in Apache Log4j V1 CVE-2022-23305 Public exploitFix available EPSS 66.5% 9.8 CriticalJanuary 18, 2022
• apache log4j, apache software foundation log4j 1.x, broadcom brocade sannav +24 more +26 more Deserialization of untrusted data in JMSSink in Apache Log4j 1.x CVE-2022-23302 Fix available EPSS 63.8% 8.8 HighJanuary 18, 2022
• apache log4j, apache software foundation log4j2, debian linux +114 more +116 more Apache Log4j2 does not always protect from infinite recursion in lookup evaluation CVE-2021-45105 Public exploitFix available EPSS 100.0% 5.9 MediumDecember 18, 2021
• apache log4j, apache software foundation log4j 1.x, fedoraproject fedora +44 more +46 more Deserialization of untrusted data in JMSAppender in Apache Log4j 1.2 CVE-2021-4104 Public exploitFix available EPSS 80.6% 7.5 HighDecember 14, 2021
• oracle advanced networking option, agile engineering data management, agile product lifecycle management +108 more +110 more Vulnerability in the Advanced Networking Option component of Oracle Database Server. Supported... CVE-2021-2351 8.3 HighJuly 20, 2021
• eclipse mojarra, oracle banking enterprise default management, banking platform +6 more +8 more Directory traversal in Eclipse Mojarra CVE-2020-6950 Public exploitFix available EPSS 10.1% 6.5 MediumJune 2, 2021
• vmware spring framework, netapp hci, management services for element software +29 more +31 more Improper Privilege Management in Spring Framework CVE-2021-22118 Fix available 7.8 HighMay 27, 2021
• apache velocity engine, wss4j, debian linux +13 more +15 more Velocity Sandbox Bypass CVE-2020-13936 Fix available EPSS 22.7% 8.8 HighMarch 10, 2021
• apache log4j, bookkeeper, canonical ubuntu linux +14 more +16 more Deserialization of Untrusted Data in Log4j CVE-2019-17571 Public exploitFix available EPSS 70.0% 9.8 CriticalDecember 20, 2019
• hibernate hibernate-validator, netapp active iq unified manager, element +185 more +187 more The SafeHtml annotation in Hibernate-Validator does not properly guard against XSS attacks CVE-2019-10219 Public exploitFix available 6.5 MediumNovember 8, 2019
• oracle application testing suite, banking enterprise collections, banking enterprise originations +19 more +21 more Vulnerability in the Oracle JDeveloper and ADF product of Oracle Fusion Middleware (component:... CVE-2019-2904 EPSS 14.3% 9.8 CriticalOctober 16, 2019
• eclipse mojarra, oracle mojarra javaserver faces, application testing suite +20 more +22 more Cross-site Scripting in Eclipse Mojarra CVE-2019-17091 Fix available 6.1 MediumOctober 2, 2019
• dell bsafe crypto-j, rsa bsafe crypto-j, bsafe cert-j +16 more +18 more RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to an Information Exposure Through... CVE-2019-3740 6.5 MediumSeptember 18, 2019
• dell bsafe crypto-j, rsa bsafe crypto-j, bsafe cert-j +14 more +16 more RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to Information Exposure Through Timing... CVE-2019-3739 6.5 MediumSeptember 18, 2019
• dell bsafe crypto-j, rsa bsafe crypto-j, bsafe cert-j +14 more +16 more RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to an Improper Verification of... CVE-2019-3738 6.5 MediumSeptember 18, 2019
• apache commons beanutils, nifi, debian linux +57 more +59 more Insecure Deserialization in Apache Commons Beanutils CVE-2019-10086 Fix available EPSS 29.1% 7.3 HighAugust 20, 2019
• oracle weblogic server, communications diameter signaling router, communications network integrity +6 more +8 more Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent:... CVE-2019-2729 Public exploit EPSS 88.8% 9.8 CriticalJune 19, 2019
• apache axis 1.4, axis, oracle agile engineering data management +35 more +37 more Server Side Request Forgery in Apache Axis CVE-2019-0227 Public exploitFix available EPSS 91.9% 7.5 HighMay 1, 2019
• apache axis, debian linux, oracle agile engineering data management +35 more +37 more Moderate severity vulnerability that affects apache axis CVE-2018-8032 Public exploitFix available EPSS 10.6% 6.1 MediumAugust 2, 2018
• pivotal spring framework, debian linux, oracle agile product lifecycle management +25 more +27 more Moderate severity vulnerability that affects org.springframework:spring-core CVE-2018-11040 Fix available 7.5 HighJune 25, 2018
• pivotal spring framework, debian linux, oracle agile product lifecycle management +30 more +32 more Spring Framework Cross Site Tracing (XST) CVE-2018-11039 Fix available 5.9 MediumJune 25, 2018
• pivotal spring framework, pivotal software spring security, netapp oncommand insight +39 more +41 more Spring Framework when used in combination with any versions of Spring Security contains an authorization bypass CVE-2018-1258 Fix available 8.8 HighMay 11, 2018
• apache log4j, netapp oncommand api services, oncommand insight +76 more +78 more Deserialization of Untrusted Data in Log4j CVE-2017-5645 Public exploitFix available EPSS 89.4% 9.8 CriticalApril 17, 2017