Skip to contentOracle Customer Management And Segmentation Foundation vulnerabilities
- vmware spring framework, cisco cx cloud agent, oracle commerce platform +35 more +37 moreRemote Code Execution in Spring FrameworkCVE-2022-22965In KEVPublic exploitFix availableEPSS 99.6%9.8 Critical
- apache mina, oracle banking payments, banking trade finance process management +6 more +8 moreApache MINA HTTP listener DOSCVE-2021-41973Fix available6.5 Medium
- jhy jsoup, netapp management services for element software and netapp hci, oracle banking trade finance +13 more +15 moreCrafted input may cause the jsoup HTML and XML parser to get stuck, timeout, or throw unchecked exceptionsCVE-2021-37714Fix available7.5 High
- apache sshd, apache software foundation mina sshd, oracle banking payments +7 more +9 moreDoS/OOM leak vulnerability in Apache Mina SSHD ServerCVE-2021-30129Fix available6.5 Medium
- apache pdfbox, fedoraproject fedora, oracle banking corporate lending process management +4 more +6 moreA carefully crafted PDF file can trigger an infinite loop while loading the fileCVE-2021-31812Fix available5.5 Medium
- apache pdfbox, fedoraproject fedora, oracle banking corporate lending process management +9 more +11 moreA carefully crafted PDF file can trigger an OutOfMemory-Exception while loading a tiny fileCVE-2021-31811Fix available5.5 Medium
- vmware spring framework, netapp hci, management services for element software +29 more +31 moreImproper Privilege Management in Spring FrameworkCVE-2021-22118Fix available7.8 High
- apache pdfbox, fedoraproject fedora, oracle banking corporate lending process management +16 more +18 moreA carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the fileCVE-2021-27906Fix available5.5 Medium
- apache pdfbox, fedoraproject fedora, oracle banking trade finance process management +12 more +14 moreA carefully crafted PDF file can trigger an infinite loop while loading the fileCVE-2021-27807Fix available5.5 Medium
- lodash, netapp active iq unified manager, cloud manager +20 more +22 moreCommand InjectionCVE-2021-23337Public exploitFix availableEPSS 20.2%7.2 High
- lodash, oracle banking corporate lending process management, banking credit facilities process management +16 more +18 moreRegular Expression Denial of Service (ReDoS)CVE-2020-28500Fix available5.3 Medium
- oracle retail customer management and segmentation foundationVulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of...CVE-2021-20576.3 Medium
- fasterxml jackson-databind, debian linux, netapp cloud backup +54 more +56 moreUnsafe Deserialization in jackson-databindCVE-2020-36179Public exploitFix availableEPSS 17.1%8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +56 more +58 moreUnsafe Deserialization in jackson-databindCVE-2020-36180Public exploitFix available8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +56 more +58 moreUnsafe Deserialization in jackson-databindCVE-2020-36182Fix available8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +42 more +44 moreUnsafe Deserialization in jackson-databindCVE-2020-36183Fix available8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +56 more +58 moreUnsafe Deserialization in jackson-databindCVE-2020-36184Public exploitFix available8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +42 more +44 moreUnsafe Deserialization in jackson-databindCVE-2020-36185Fix available8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +42 more +44 moreUnsafe Deserialization in jackson-databindCVE-2020-36186Fix available8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +42 more +44 moreUnsafe Deserialization in jackson-databindCVE-2020-36187Fix available8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +42 more +44 moreUnsafe Deserialization in jackson-databindCVE-2020-36188Public exploitFix available8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +37 more +39 moreUnsafe Deserialization in jackson-databindCVE-2020-36189Fix available8.1 High
- fasterxml jackson-databind, debian linux, netapp service level manager +55 more +57 moreUnsafe Deserialization in jackson-databindCVE-2020-36181Fix available8.1 High
- fasterxml jackson-databind, debian linux, netapp service level manager +37 more +39 moreSerialization gadget exploit in jackson-databindCVE-2020-35728Public exploitFix availableEPSS 12.5%8.1 High
- fasterxml jackson-databind, debian linux, netapp service level manager +23 more +25 moreSerialization gadgets exploit in jackson-databindCVE-2020-35491Fix available8.1 High
- google guava, netapp active iq unified manager, oracle commerce guided search +10 more +12 moreTemp directory permission issue in GuavaCVE-2020-8908Fix available3.3 Low
- hibernate orm, debian linux, oracle communications cloud native core console +2 more +4 moreSQL injection in hibernate-coreCVE-2020-25638Fix available7.4 High
- oracle retail customer management and segmentation foundationVulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of...CVE-2020-147323.1 Low
- oracle retail customer management and segmentation foundationVulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of...CVE-2020-147313.1 Low
- apache httpclient, netapp active iq unified manager, snapcenter +14 more +16 moreCross-site scripting in Apache HttpClientCVE-2020-13956Fix available5.3 Medium
- spring by vmware framework, vmware spring framework, netapp oncommand insight +36 more +38 moreRFD Protection Bypass via jsessionidCVE-2020-5421Public exploitFix availableEPSS 11.6%8.7 High
- spring by vmware integration, vmware spring integration, oracle banking corporate lending process management +6 more +8 moreKryo Configuration Allows Code Execution with Unknown "Serialization Gadgets"CVE-2020-5413Fix available9.8 Critical
- oracle retail customer management and segmentation foundationVulnerability in the Customer Management and Segmentation Foundation product of Oracle Retail...CVE-2020-147105.4 Medium
- oracle retail customer management and segmentation foundationVulnerability in the Customer Management and Segmentation Foundation product of Oracle Retail...CVE-2020-147097.1 High
- oracle retail customer management and segmentation foundationVulnerability in the Customer Management and Segmentation Foundation product of Oracle Retail...CVE-2020-147084.3 Medium
- jquery, debian linux, drupal +67 more +69 morejQuery has a potential XSS vulnerabilityCVE-2020-11022Public exploitFix availableEPSS 99.2%6.9 Medium
- dom4j project dom4j, canonical ubuntu linux, netapp oncommand api services +35 more +37 moredom4j allows External Entities by default which might enable XXE attacksCVE-2020-10683Fix available9.8 Critical
- apache log4j, debian linux, oracle communications application session controller +43 more +45 moreImproper validation of certificate with host mismatch in Apache Log4j SMTP appenderCVE-2020-9488Public exploitFix available3.7 Low
- oracle retail customer management and segmentation foundationVulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of...CVE-2020-29539.8 Critical
- oracle retail customer management and segmentation foundationVulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of...CVE-2020-26506.5 Medium
- oracle retail customer management and segmentation foundationVulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of...CVE-2020-26493.3 Low
- oracle retail customer management and segmentation foundationVulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of...CVE-2020-26486.2 Medium
- oracle retail customer management and segmentation foundationVulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of...CVE-2020-25674.8 Medium
- fasterxml jackson-databind, debian linux, netapp active iq unified manager +27 more +29 moreDeserialization of Untrusted Data in jackson-databindCVE-2019-20330Fix available9.8 Critical
- hibernate hibernate-validator, netapp active iq unified manager, element +185 more +187 moreThe SafeHtml annotation in Hibernate-Validator does not properly guard against XSS attacksCVE-2019-10219Public exploitFix available6.5 Medium
- oracle retail customer management and segmentation foundationVulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of...CVE-2019-28845.9 Medium
- oracle retail customer management and segmentation foundationVulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of...CVE-2019-28834.6 Medium
- fasterxml jackson-databind, debian linux, netapp active iq unified manager +9 more +11 moreImproper Input Validation in jackson-databindCVE-2019-17267Fix available9.8 Critical
- fasterxml jackson-databind, debian linux, fedoraproject fedora +14 more +16 morePolymorphic Typing issue in FasterXML jackson-databindCVE-2019-16335Fix available9.8 Critical
- fasterxml jackson-databind, debian linux, fedoraproject fedora +16 more +18 morePolymorphic Typing issue in FasterXML jackson-databindCVE-2019-14540Public exploitFix availableEPSS 10.8%9.8 Critical
- Show olderLoading…