Skip to contentOracle Enterpriseone Tools vulnerabilities
- mozilla nss, fedoraproject fedora, mozilla network security services +4 more +6 moreA flaw was found in the way NSS handled CCS (ChangeCipherSpec) messages in TLS 1.3. This flaw...CVE-2020-25648Fix available7.5 High
- apache iotdb, fasterxml jackson-databind, fedoraproject fedora +36 more +38 moreXML External Entity (XXE) Injection in Jackson DatabindCVE-2020-25649Fix availableEPSS 17.7%7.5 High
- apache httpclient, netapp active iq unified manager, snapcenter +14 more +16 moreCross-site scripting in Apache HttpClientCVE-2020-13956Fix available5.3 Medium
- lodash, oracle banking corporate lending process management, banking credit facilities process management +15 more +17 morePrototype Pollution in lodashCVE-2020-8203Public exploitFix available7.4 High
- apache batik, oracle api gateway, business intelligence +15 more +17 moreServer-side request forgery (SSRF) in Apache BatikCVE-2019-17566Fix availableEPSS 10.9%7.5 High
- jquery, debian linux, drupal +49 more +51 morePotential XSS vulnerability in jQueryCVE-2020-11023In KEVPublic exploitFix availableEPSS 84.9%6.9 Medium
- oracle jd edwards enterpriseone toolsVulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component:...CVE-2020-2733Public exploitEPSS 18.6%9.8 Critical
- fasterxml jackson-databind, debian linux, netapp active iq unified manager +15 more +17 morejackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-11620Fix available8.1 High
- fasterxml jackson-databind, debian linux, netapp active iq unified manager +18 more +20 morejackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-11619Fix available8.1 High
- fasterxml jackson-databind, debian linux, netapp steelstore cloud integrated storage +29 more +31 morejackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-11111Fix available8.8 High
- fasterxml jackson-databind, debian linux, netapp steelstore cloud integrated storage +29 more +31 morejackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-11112Fix available8.8 High
- fasterxml jackson-databind, debian linux, netapp steelstore cloud integrated storage +30 more +32 morejackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-11113Public exploitFix available8.8 High
- fasterxml jackson-databind, debian linux, netapp steelstore cloud integrated storage +29 more +31 morejackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-10968Fix available8.8 High
- fasterxml jackson-databind, debian linux, netapp steelstore cloud integrated storage +29 more +31 morejackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-10969Fix available8.8 High
- fasterxml jackson-databind, debian linux, netapp steelstore cloud integrated storage +29 more +31 morejackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-10672Fix available8.8 High
- fasterxml jackson-databind, debian linux, netapp steelstore cloud integrated storage +29 more +31 morejackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-10673Public exploitFix available8.8 High
- ckeditor, drupal, fedoraproject fedora +8 more +10 moreCKEditor 4.0 vulnerability in the HTML Data ProcessorCVE-2020-9281Fix available6.1 Medium
- fasterxml jackson-databind, debian linux, netapp active iq unified manager +28 more +30 morejackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-9546Fix available9.8 Critical
- fasterxml jackson-databind, debian linux, netapp active iq unified manager +13 more +15 morejackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-9547Public exploitFix availableEPSS 18.4%9.8 Critical
- fasterxml jackson-databind, debian linux, netapp active iq unified manager +22 more +24 morejackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-9548Public exploitFix availableEPSS 18.9%9.8 Critical
- fasterxml jackson-databind, debian linux, netapp active iq unified manager +27 more +29 moreDeserialization of Untrusted Data in jackson-databindCVE-2019-20330Fix available9.8 Critical
- apache hadoop, connect2id nimbus jose\+jwt, oracle communications cloud native core security edge protection proxy +12 more +14 moreImproper Check for Unusual or Exceptional Conditions in Connect2id Nimbus JOSE+JWTCVE-2019-17195Public exploitFix availableEPSS 11.1%9.8 Critical
- fasterxml jackson-databind, debian linux, netapp oncommand workflow automation +19 more +21 morejackson-databind polymorphic typing issueCVE-2019-17531Fix available9.8 Critical
- fasterxml jackson-databind, debian linux, fedoraproject fedora +23 more +25 morejackson-databind polymorphic typing issueCVE-2019-16943Fix available9.8 Critical
- fasterxml jackson-databind, debian linux, fedoraproject fedora +25 more +27 morePolymorphic Typing in FasterXML jackson-databindCVE-2019-16942Fix available9.8 Critical
- apache commons beanutils, nifi, debian linux +57 more +59 moreInsecure Deserialization in Apache Commons BeanutilsCVE-2019-10086Fix availableEPSS 29.1%7.3 High
- fasterxml jackson-databind, apache drill, debian linux +15 more +17 moreDeserialization of untrusted data in FasterXML jackson-databindCVE-2019-14439Public exploitFix availableEPSS 10.8%7.5 High
- fasterxml jackson-databind, apple xcode, debian linux +21 more +23 moreDeserialization of untrusted data in FasterXML jackson-databindCVE-2019-14379Fix available9.8 Critical
- oracle jd edwards enterpriseone toolsVulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products ...CVE-2019-25644.3 Medium
- backdropcms backdrop, drupal, jquery +102 more +104 moreXSS in jQuery as used in Drupal, Backdrop CMS, and other productsCVE-2019-11358Public exploitFix availableEPSS 86.8%6.1 Medium
- fasterxml jackson-databind, debian linux, fedoraproject fedora +8 more +10 moreDeserialization of Untrusted DataCVE-2018-12023Fix available7.5 High
- fasterxml jackson-databind, debian linux, fedoraproject fedora +8 more +10 morejackson-databind Deserialization of Untrusted Data vulnerabilityCVE-2018-12022Fix available7.5 High
- openssl, canonical ubuntu linux, debian linux +79 more +81 more0-byte record padding oracleCVE-2019-1559Fix availableEPSS 17.1%5.9 Medium
- fasterxml jackson-databind, debian linux, netapp oncommand workflow automation +22 more +24 moreArbitrary Code Execution in jackson-databindCVE-2018-14718Fix availableEPSS 12.7%9.8 Critical
- dell bsafe, oracle application testing suite, communications analytics +9 more +11 moreRSA BSAFE Micro Edition Suite versions prior to 4.0.11 (in 4.0.x series) and versions prior to 4...CVE-2018-157697.5 High
- dell bsafe, bsafe micro edition suite, bsafe crypto-c +12 more +14 moreRSA BSAFE Micro Edition Suite, versions prior to 4.0.11 (in 4.0.x) and prior to 4.1.6 (in 4.1.x),...CVE-2018-110587.5 High
- dell bsafe, bsafe micro edition suite, oracle application testing suite +10 more +12 moreRSA BSAFE Micro Edition Suite, versions prior to 4.0.11 (in 4.0.x) and prior to 4.1.6.1 (in 4.1.x...CVE-2018-110575.9 Medium
- dell bsafe, bsafe crypto-c micro edition, bsafe micro edition suite +12 more +14 moreRSA BSAFE Micro Edition Suite, prior to 4.1.6.1 (in 4.1.x), and RSA BSAFE Crypto-C Micro Edition...CVE-2018-110566.5 Medium
- dell bsafe, bsafe micro edition suite, oracle application testing suite +10 more +12 moreRSA BSAFE Micro Edition Suite, versions prior to 4.0.11 (in 4.0.x) and prior to 4.1.6.1 (in 4.1.x...CVE-2018-110554.4 Medium
- dell bsafe, bsafe micro edition suite, oracle application testing suite +10 more +12 moreRSA BSAFE Micro Edition Suite, version 4.1.6, contains an integer overflow vulnerability. A...CVE-2018-110547.5 High
- oracle jd edwards enterpriseone toolsVulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products ...CVE-2018-30066.1 Medium
- oracle jd edwards enterpriseone toolsVulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products ...CVE-2018-29996.1 Medium
- oracle jd edwards enterpriseone toolsVulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products ...CVE-2018-29506.1 Medium
- oracle jd edwards enterpriseone toolsVulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products ...CVE-2018-29496.1 Medium
- oracle jd edwards enterpriseone toolsVulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products ...CVE-2018-29486.1 Medium
- oracle jd edwards enterpriseone toolsVulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products ...CVE-2018-29476.5 Medium
- oracle jd edwards enterpriseone toolsVulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products ...CVE-2018-29466.1 Medium
- oracle jd edwards enterpriseone toolsVulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products ...CVE-2018-29456.1 Medium
- oracle jd edwards enterpriseone toolsVulnerability in the JD Edwards EnterpriseOne Tools component of Oracle JD Edwards Products ...CVE-2018-29447.5 High
- apache batik, canonical ubuntu linux, debian linux +18 more +20 moreDeserialization of Untrusted Data in Apache BatikCVE-2018-8013Fix availableEPSS 18.6%9.8 Critical
- Show moreLoading…