Oracle Communications Services Gatekeeper vulnerabilities

• apache log4j, apache software foundation log4j2, debian linux +114 more +116 more Apache Log4j2 does not always protect from infinite recursion in lookup evaluation CVE-2021-45105 Public exploitFix available EPSS 100.0% 5.9 MediumDecember 18, 2021
• oracle advanced networking option, agile engineering data management, agile product lifecycle management +108 more +110 more Vulnerability in the Advanced Networking Option component of Oracle Database Server. Supported... CVE-2021-2351 8.3 HighJuly 20, 2021
• eclipse jetty, the eclipse foundation eclipse jetty, debian linux +14 more +16 more SessionListener can prevent a session from being invalidated breaking logout CVE-2021-34428 Public exploitFix available 2.9 LowJune 22, 2021
• eclipse jetty, the eclipse foundation eclipse jetty, jenkins +19 more +21 more Jetty vulnerable to incorrect handling of invalid large TLS frame, exhausting CPU resources CVE-2021-28165 Public exploitFix available EPSS 53.9% 7.5 HighApril 1, 2021
• eclipse jetty, the eclipse foundation eclipse jetty, apache ignite +21 more +23 more Directory exposure in jetty CVE-2021-28163 Fix available 2.7 LowApril 1, 2021
• lodash, netapp active iq unified manager, cloud manager +20 more +22 more Command Injection CVE-2021-23337 Public exploitFix available EPSS 21.3% 7.2 HighFebruary 15, 2021
• lodash, oracle banking corporate lending process management, banking credit facilities process management +16 more +18 more Regular Expression Denial of Service (ReDoS) CVE-2020-28500 Fix available 5.3 MediumFebruary 15, 2021
• fasterxml jackson-databind, debian linux, netapp cloud backup +54 more +56 more Unsafe Deserialization in jackson-databind CVE-2020-36179 Public exploitFix available EPSS 17.1% 8.1 HighJanuary 6, 2021
• fasterxml jackson-databind, debian linux, netapp cloud backup +56 more +58 more Unsafe Deserialization in jackson-databind CVE-2020-36180 Public exploitFix available 8.1 HighJanuary 6, 2021
• fasterxml jackson-databind, debian linux, netapp cloud backup +56 more +58 more Unsafe Deserialization in jackson-databind CVE-2020-36182 Fix available 8.1 HighJanuary 6, 2021
• fasterxml jackson-databind, debian linux, netapp cloud backup +42 more +44 more Unsafe Deserialization in jackson-databind CVE-2020-36183 Fix available 8.1 HighJanuary 6, 2021
• fasterxml jackson-databind, debian linux, netapp cloud backup +56 more +58 more Unsafe Deserialization in jackson-databind CVE-2020-36184 Public exploitFix available 8.1 HighJanuary 6, 2021
• fasterxml jackson-databind, debian linux, netapp cloud backup +42 more +44 more Unsafe Deserialization in jackson-databind CVE-2020-36185 Fix available 8.1 HighJanuary 6, 2021
• fasterxml jackson-databind, debian linux, netapp cloud backup +42 more +44 more Unsafe Deserialization in jackson-databind CVE-2020-36186 Fix available 8.1 HighJanuary 6, 2021
• fasterxml jackson-databind, debian linux, netapp cloud backup +42 more +44 more Unsafe Deserialization in jackson-databind CVE-2020-36187 Fix available 8.1 HighJanuary 6, 2021
• fasterxml jackson-databind, debian linux, netapp cloud backup +42 more +44 more Unsafe Deserialization in jackson-databind CVE-2020-36188 Public exploitFix available 8.1 HighJanuary 6, 2021
• fasterxml jackson-databind, debian linux, netapp cloud backup +37 more +39 more Unsafe Deserialization in jackson-databind CVE-2020-36189 Fix available 8.1 HighJanuary 6, 2021
• fasterxml jackson-databind, debian linux, netapp service level manager +55 more +57 more Unsafe Deserialization in jackson-databind CVE-2020-36181 Fix available 8.1 HighJanuary 6, 2021
• fasterxml jackson-databind, debian linux, netapp service level manager +37 more +39 more Serialization gadget exploit in jackson-databind CVE-2020-35728 Public exploitFix available EPSS 12.5% 8.1 HighDecember 27, 2020
• fasterxml jackson-databind, debian linux, netapp service level manager +22 more +24 more Serialization gadgets exploit in jackson-databind CVE-2020-35490 Fix available 8.1 HighDecember 17, 2020
• fasterxml jackson-databind, debian linux, netapp service level manager +23 more +25 more Serialization gadgets exploit in jackson-databind CVE-2020-35491 Fix available 8.1 HighDecember 17, 2020
• apache groovy, atlas, netapp snapcenter +18 more +20 more Information Disclosure in Apache Groovy CVE-2020-17521 Fix available 5.5 MediumDecember 7, 2020
• eclipse jetty, the eclipse foundation eclipse jetty, apache kafka +15 more +17 more Buffer not correctly recycled in Gzip Request inflation CVE-2020-27218 Fix available 4.8 MediumNovember 28, 2020
• eclipse jetty, the eclipse foundation eclipse jetty, apache beam +16 more +18 more Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations CVE-2020-27216 Fix available 7.0 HighOctober 23, 2020
• apache iotdb, fasterxml jackson-databind, fedoraproject fedora +36 more +38 more XML External Entity (XXE) Injection in Jackson Databind CVE-2020-25649 Fix available EPSS 17.7% 7.5 HighOctober 14, 2020
• fasterxml jackson-databind, debian linux, oracle agile product lifecycle management +23 more +25 more Unsafe Deserialization in jackson-databind CVE-2020-24750 Public exploitFix available 8.1 HighSeptember 17, 2020
• fasterxml jackson-databind, debian linux, netapp active iq unified manager +22 more +24 more Code Injection in jackson-databind CVE-2020-24616 Public exploitFix available 8.1 HighAugust 25, 2020
• jquery, debian linux, drupal +49 more +51 more Potential XSS vulnerability in jQuery CVE-2020-11023 In KEVPublic exploitFix available EPSS 84.9% 6.9 MediumApril 29, 2020
• jquery, debian linux, drupal +67 more +69 more jQuery has a potential XSS vulnerability CVE-2020-11022 Public exploitFix available EPSS 99.2% 6.9 MediumApril 29, 2020
• apache log4j, debian linux, oracle communications application session controller +43 more +45 more Improper validation of certificate with host mismatch in Apache Log4j SMTP appender CVE-2020-9488 Public exploitFix available 3.7 LowApril 27, 2020
• vt cryptacular, oracle communications services gatekeeper, webcenter sites +1 more +3 more Denial of Service in Cryptacular CVE-2020-7226 Fix available 7.5 HighJanuary 24, 2020
• hibernate hibernate-validator, netapp active iq unified manager, element +185 more +187 more The SafeHtml annotation in Hibernate-Validator does not properly guard against XSS attacks CVE-2019-10219 Public exploitFix available 6.5 MediumNovember 8, 2019
• oracle application testing suite, banking enterprise collections, banking enterprise originations +19 more +21 more Vulnerability in the Oracle JDeveloper and ADF product of Oracle Fusion Middleware (component:... CVE-2019-2904 EPSS 14.3% 9.8 CriticalOctober 16, 2019
• eclipse jetty, the eclipse foundation eclipse jetty, debian linux +24 more +26 more Installation information leak in Eclipse Jetty CVE-2019-10247 Fix available 5.3 MediumApril 22, 2019
• eclipse jetty, the eclipse foundation eclipse jetty, netapp element +23 more +25 more Information Exposure vulnerability in Eclipse Jetty CVE-2019-10246 Fix available 5.3 MediumApril 22, 2019
• backdropcms backdrop, drupal, jquery +102 more +104 more XSS in jQuery as used in Drupal, Backdrop CMS, and other products CVE-2019-11358 Public exploitFix available EPSS 86.8% 6.1 MediumApril 17, 2019
• pivotal spring framework, debian linux, oracle agile product lifecycle management +25 more +27 more Moderate severity vulnerability that affects org.springframework:spring-core CVE-2018-11040 Fix available 7.5 HighJune 25, 2018
• pivotal spring framework, debian linux, oracle agile product lifecycle management +30 more +32 more Spring Framework Cross Site Tracing (XST) CVE-2018-11039 Fix available 5.9 MediumJune 25, 2018
• pivotal spring framework, pivotal software spring security, netapp oncommand insight +39 more +41 more Spring Framework when used in combination with any versions of Spring Security contains an authorization bypass CVE-2018-1258 Fix available 8.8 HighMay 11, 2018
• pivotal spring framework, oracle agile product lifecycle management, application testing suite +27 more +29 more Denial of Service in org.springframework:spring-core CVE-2018-1257 Fix available 6.5 MediumMay 11, 2018
• spring by pivotal framework, vmware spring framework, oracle application testing suite +17 more +19 more Spring Framework has Improperly Implemented Security Check for Standard CVE-2018-1275 Fix available EPSS 57.7% 9.8 CriticalApril 11, 2018
• spring by pivotal framework, vmware spring framework, oracle application testing suite +23 more +25 more Possible privilege escalation in org.springframework:spring-core CVE-2018-1272 Fix available 7.5 HighApril 6, 2018
• spring by pivotal framework, vmware spring framework, oracle application testing suite +26 more +28 more Path Traversal in org.springframework:spring-core CVE-2018-1271 Fix available EPSS 30.3% 5.9 MediumApril 6, 2018
• spring by pivotal framework, vmware spring framework, debian linux +26 more +28 more Spring Framework allows applications to expose STOMP over WebSocket endpoints CVE-2018-1270 Public exploitFix available EPSS 77.6% 9.8 CriticalApril 6, 2018
• jquery, oracle agile product lifecycle management for process, banking platform +44 more +46 more Cross-Site Scripting (XSS) in jquery CVE-2015-9251 Public exploitFix available EPSS 29.7% 6.1 MediumJanuary 18, 2018