Skip to contentOracle Financial Services Crime And Compliance Management Studio vulnerabilities
- spring security, vmware spring security, netapp active iq unified manager +1 more +3 moreInteger overflow in BCrypt class in Spring SecurityCVE-2022-22976Public exploitFix available5.3 Medium
- spring security, vmware spring security, netapp active iq unified manager +1 more +3 moreAuthorization bypass in Spring SecurityCVE-2022-22978Public exploitFix availableEPSS 12.4%9.8 Critical
- vmware spring framework, netapp cloud secure agent, oncommand insight +1 more +3 moreAllocation of Resources Without Limits or Throttling in Spring FrameworkCVE-2022-22971Public exploitFix available6.5 Medium
- vmware spring framework, netapp active iq unified manager, brocade san navigator +3 more +5 moreDenial of service in Spring FrameworkCVE-2022-22970Public exploitFix available5.3 Medium
- netty, netapp active iq unified manager, oncommand workflow automation +2 more +4 moreLocal Information Disclosure Vulnerability in io.netty:netty-codec-httpCVE-2022-24823Fix available5.5 Medium
- google gson, debian linux, netapp active iq unified manager +3 more +5 moreDeserialization of Untrusted DataCVE-2022-25647Fix availableEPSS 12.2%7.7 High
- fasterxml jackson-databind, debian linux, netapp active iq unified manager +33 more +35 moreDeeply nested json in jackson-databindCVE-2020-36518Public exploitFix available7.5 High
- apache spark, oracle financial services crime and compliance management studio +1 moreApache Spark Key Negotiation VulnerabilityCVE-2021-38296Fix available7.5 High
- apache tomcat, debian linux, oracle agile engineering data management +4 more +6 moreLocal privilege escalation with FileStoreCVE-2022-23181Fix available7.0 High
- apache software foundation xerces, apache xerces-j, netapp active iq unified manager +27 more +29 moreInfinite loop within Apache XercesJ xml parserCVE-2022-23437Fix availableEPSS 11.6%6.5 Medium
- apache shiro, oracle financial services crime and compliance management studio +1 moreApache Shiro before 1.8.0, when using Apache Shiro with Spring Boot, a specially crafted HTTP request may cause an authentication bypassCVE-2021-41303Fix availableEPSS 76.1%9.8 Critical
- jhy jsoup, netapp management services for element software and netapp hci, oracle banking trade finance +13 more +15 moreCrafted input may cause the jsoup HTML and XML parser to get stuck, timeout, or throw unchecked exceptionsCVE-2021-37714Fix available7.5 High
- eclipse jetty, the eclipse foundation eclipse jetty, netapp e-series santricity os controller +16 more +18 moreEncoded URIs can access WEB-INF directory in Eclipse JettyCVE-2021-34429Public exploitFix availableEPSS 99.3%5.3 Medium
- apache commons compress, netapp active iq unified manager, oncommand insight +31 more +33 moreApache Commons Compress 1.0 to 1.20 denial of service vulnerabilityCVE-2021-36090Fix availableEPSS 12.9%7.5 High
- apache commons compress, netapp active iq unified manager, oncommand insight +24 more +26 moreApache Commons Compress 1.1 to 1.20 denial of service vulnerabilityCVE-2021-35517Fix availableEPSS 10.6%7.5 High
- apache commons compress, netapp active iq unified manager, oncommand insight +21 more +23 moreApache Commons Compress 1.6 to 1.20 denial of service vulnerabilityCVE-2021-35516Fix availableEPSS 12.4%7.5 High
- apache commons compress, netapp active iq unified manager, oncommand insight +23 more +25 moreApache Commons Compress 1.6 to 1.20 denial of service vulnerabilityCVE-2021-35515Fix availableEPSS 11.6%7.5 High
- lodash, netapp active iq unified manager, cloud manager +20 more +22 moreCommand InjectionCVE-2021-23337Public exploitFix availableEPSS 20.2%7.2 High
- lodash, oracle banking corporate lending process management, banking credit facilities process management +16 more +18 moreRegular Expression Denial of Service (ReDoS)CVE-2020-28500Fix available5.3 Medium
- apache hadoop, solr, oracle financial services crime and compliance management studio +2 moreImproper Privilege Management in Apache HadoopCVE-2020-9492Fix available8.8 High
- joyent json, oracle commerce guided search, financial services crime and compliance management studio +2 more +4 moreCommand InjectionCVE-2020-7712Fix available7.2 High
- broadcom spring data commons, pivotal software spring data rest, apache ignite +3 more +5 moreSpring Data Commons remote code injection vulnerabilityCVE-2018-1273In KEVPublic exploitFix availableEPSS 97.0%9.8 Critical