Skip to contentOracle Enterprise Manager vulnerabilities
- fasterxml jackson-databind, debian linux, netapp service level manager +55 more +57 moreUnsafe Deserialization in jackson-databindCVE-2020-36181Fix available8.1 High
- openssl, debian linux, fedoraproject fedora +41 more +43 moreEDIPARTYNAME NULL pointer dereferenceCVE-2020-1971Public exploitFix available5.9 Medium
- codemirror, oracle application express, enterprise manager express user interface +3 more +5 moreRegular Expression Denial of Service (ReDoS)CVE-2020-7760Fix available5.3 Medium
- xmlsoft libxml2, debian linux, fedoraproject fedora +18 more +20 moreGNOME project libxml2 v2.9.10 and earlier have a global Buffer Overflow vulnerability in...CVE-2020-24977Fix available6.5 Medium
- apache http server, canonical ubuntu linux, debian linux +10 more +12 moreApache HTTP Server versions 2.4.20 to 2.4.43 When trace/debug was enabled for the HTTP/2 module...CVE-2020-11993Fix availableEPSS 56.6%7.5 High
- apache http server, canonical ubuntu linux, debian linux +10 more +12 moreApache HTTP server 2.4.32 to 2.4.44 mod_proxy_uwsgi info disclosure and possible RCECVE-2020-11984Public exploitFix availableEPSS 90.0%9.8 Critical
- apache http server, canonical ubuntu linux, debian linux +22 more +24 moreApache HTTP Server versions 2.4.20 to 2.4.43. A specially crafted value for the 'Cache-Digest'...CVE-2020-9490Fix availableEPSS 88.8%7.5 High
- oracle enterprise manager base platformVulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager ...CVE-2020-29827.1 High
- apache camel, oracle communications diameter signaling router, enterprise manager base platform +1 more +3 moreServer side template injection in Apache CamelCVE-2020-11994Fix available7.5 High
- sqlite, apple icloud, ipados +16 more +18 moreIn SQLite before 3.32.3, select.c mishandles query-flattener optimization, leading to a...CVE-2020-15358Fix available5.5 Medium
- python, fedoraproject fedora, opensuse leap +4 more +6 moreIncorrect Calculation and Use of Insufficiently Random Values in PythonCVE-2020-14422Fix availableEPSS 12.7%5.9 Medium
- sqlite, debian linux, fedoraproject fedora +12 more +14 moreSQLite 3.32.2 has a use-after-free in resetAccumulator in select.c because the parse tree rewrite...CVE-2020-13871Fix available7.5 High
- perl, fedoraproject fedora, netapp oncommand workflow automation +16 more +18 moreCVE-2020-12723 does not affect BellSoft softwareCVE-2020-12723Fix available7.5 High
- perl, fedoraproject fedora, netapp oncommand workflow automation +17 more +19 moreCVE-2020-10878 does not affect BellSoft softwareCVE-2020-10878Fix available8.6 High
- perl, fedoraproject fedora, opensuse leap +15 more +17 moreCVE-2020-10543 does not affect BellSoft softwareCVE-2020-10543Fix availableEPSS 11.3%8.2 High
- apache camel, oracle communications diameter signaling router, enterprise manager base platform +1 more +3 moreDeserialization of Untrusted Data in Apache Camel RabbitMQCVE-2020-11972Fix available9.8 Critical
- apache camel, oracle communications diameter signaling router, enterprise manager base platform +1 more +3 moreApache Camel Netty enables Java deserialization by defaultCVE-2020-11973Fix available9.8 Critical
- apache camel, oracle communications diameter intelligence hub, communications diameter signaling router +2 more +4 moreImproper Input Validation in Apache CamelCVE-2020-11971Fix availableEPSS 14.0%7.5 High
- apache ant, canonical ubuntu linux, fedoraproject fedora +47 more +49 moreSensitive Data Exposure in Apache AntCVE-2020-1945Fix available6.3 Medium
- jquery, debian linux, drupal +67 more +69 morejQuery has a potential XSS vulnerabilityCVE-2020-11022Public exploitFix availableEPSS 99.2%6.9 Medium
- dom4j project dom4j, canonical ubuntu linux, netapp oncommand api services +35 more +37 moredom4j allows External Entities by default which might enable XXE attacksCVE-2020-10683Fix available9.8 Critical
- apache log4j, debian linux, oracle communications application session controller +43 more +45 moreImproper validation of certificate with host mismatch in Apache Log4j SMTP appenderCVE-2020-9488Public exploitFix available3.7 Low
- openssl, broadcom fabric operating system, debian linux +23 more +25 moreSegmentation fault in SSL_check_chainCVE-2020-1967Public exploitFix availableEPSS 53.3%7.5 High
- oracle enterprise manager base platformVulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager ...CVE-2020-29619.8 Critical
- sqlite, canonical ubuntu linux, debian linux +18 more +20 moreSQLite through 3.31.1 allows attackers to cause a denial of service (segmentation fault) via a...CVE-2020-11655Fix available7.5 High
- sqlite, netapp ontap select deploy administration utility, oracle communications messaging server +12 more +14 moreIn SQLite through 3.31.1, the ALTER TABLE implementation has a use-after-free, as demonstrated by...CVE-2020-11656Fix available9.8 Critical
- fasterxml jackson-databind, debian linux, netapp active iq unified manager +15 more +17 morejackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-11620Fix available8.1 High
- fasterxml jackson-databind, debian linux, netapp active iq unified manager +18 more +20 morejackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-11619Fix available8.1 High
- apache http server, broadcom brocade fabric operating system, canonical ubuntu linux +11 more +13 moreIn Apache HTTP Server 2.4.0 to 2.4.41, redirects configured with mod_rewrite that were intended...CVE-2020-1927Fix availableEPSS 56.7%6.1 Medium
- apache cxf, netapp oncommand workflow automation, snapmanager +7 more +9 moreApache CXF JMX Integration is vulnerable to a MITM attackCVE-2020-1954Fix available5.3 Medium
- apache http server, canonical ubuntu linux, debian linux +8 more +10 moreIn Apache HTTP Server 2.4.0 to 2.4.41, mod_proxy_ftp may use uninitialized memory when proxying...CVE-2020-1934Fix availableEPSS 52.0%5.3 Medium
- fasterxml jackson-databind, debian linux, netapp steelstore cloud integrated storage +29 more +31 morejackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-11111Fix available8.8 High
- fasterxml jackson-databind, debian linux, netapp steelstore cloud integrated storage +29 more +31 morejackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-11112Fix available8.8 High
- fasterxml jackson-databind, debian linux, netapp steelstore cloud integrated storage +30 more +32 morejackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-11113Public exploitFix available8.8 High
- fasterxml jackson-databind, debian linux, netapp steelstore cloud integrated storage +29 more +31 morejackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-10968Fix available8.8 High
- fasterxml jackson-databind, debian linux, netapp steelstore cloud integrated storage +29 more +31 morejackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-10969Fix available8.8 High
- fasterxml jackson-databind, debian linux, netapp steelstore cloud integrated storage +29 more +31 morejackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-10672Fix available8.8 High
- fasterxml jackson-databind, debian linux, netapp steelstore cloud integrated storage +29 more +31 morejackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-10673Public exploitFix available8.8 High
- fasterxml jackson-databind, debian linux, netapp active iq unified manager +28 more +30 morejackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-9546Fix available9.8 Critical
- fasterxml jackson-databind, debian linux, netapp active iq unified manager +13 more +15 morejackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-9547Public exploitFix availableEPSS 18.4%9.8 Critical
- fasterxml jackson-databind, debian linux, netapp active iq unified manager +22 more +24 morejackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-9548Public exploitFix availableEPSS 18.9%9.8 Critical
- sqlite, canonical ubuntu linux, netapp cloud backup +11 more +13 moreIn SQLite 3.31.1, isAuxiliaryVtabOperator allows attackers to trigger a NULL pointer dereference...CVE-2020-9327Fix available7.5 High
- xmlsoft libxml2, canonical ubuntu linux, debian linux +24 more +26 morelibxml as used in Nokogiri has an infinite loop in a certain end-of-file situationCVE-2020-7595Fix available7.5 High
- xmlsoft libxml2, debian linux, fedoraproject fedora +24 more +26 morexmlSchemaPreRun in xmlschemas.c in libxml2 2.9.10 allows an xmlSchemaValidateStream memory leak.CVE-2019-20388Fix available7.5 High
- spring framework, vmware spring framework, oracle application testing suite +25 more +27 moreCSRF Attack via CORS Preflight Requests with Spring MVC or Spring WebFluxCVE-2020-5397Fix available5.3 Medium
- spring framework, vmware spring framework, netapp data availability services +31 more +33 moreRFD Attack via "Content-Disposition" Header Sourced from Request Input by Spring MVC or Spring WebFlux ApplicationCVE-2020-5398Public exploitFix availableEPSS 88.3%8.0 High
- oracle enterprise manager base platformVulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager ...CVE-2020-26465.4 Medium
- oracle enterprise manager base platformVulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager ...CVE-2020-26456.0 Medium
- oracle enterprise manager base platformVulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager ...CVE-2020-26446.0 Medium
- oracle enterprise manager base platformVulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager ...CVE-2020-26436.0 Medium
- Show moreLoading…