Oracle Insurance Calculation Engine vulnerabilities

• spring framework, vmware spring framework, oracle application testing suite +25 more +27 more CSRF Attack via CORS Preflight Requests with Spring MVC or Spring WebFlux CVE-2020-5397 Fix available 5.3 MediumJanuary 17, 2020
• spring framework, vmware spring framework, netapp data availability services +31 more +33 more RFD Attack via "Content-Disposition" Header Sourced from Request Input by Spring MVC or Spring WebFlux Application CVE-2020-5398 Public exploitFix available EPSS 88.3% 8.0 HighJanuary 16, 2020
• pivotal spring framework, debian linux, oracle agile product lifecycle management +37 more +39 more DoS Attack via Range Requests CVE-2018-15756 Fix available 7.5 HighOctober 18, 2018
• pivotal spring framework, debian linux, oracle agile product lifecycle management +25 more +27 more Moderate severity vulnerability that affects org.springframework:spring-core CVE-2018-11040 Fix available 7.5 HighJune 25, 2018
• pivotal spring framework, debian linux, oracle agile product lifecycle management +30 more +32 more Spring Framework Cross Site Tracing (XST) CVE-2018-11039 Fix available 5.9 MediumJune 25, 2018
• apache batik, canonical ubuntu linux, debian linux +18 more +20 more Deserialization of Untrusted Data in Apache Batik CVE-2018-8013 Fix available EPSS 18.6% 9.8 CriticalMay 23, 2018
• pivotal spring framework, pivotal software spring security, netapp oncommand insight +39 more +41 more Spring Framework when used in combination with any versions of Spring Security contains an authorization bypass CVE-2018-1258 Fix available 8.8 HighMay 11, 2018
• pivotal spring framework, oracle agile product lifecycle management, application testing suite +27 more +29 more Denial of Service in org.springframework:spring-core CVE-2018-1257 Fix available 6.5 MediumMay 11, 2018
• spring by pivotal framework, vmware spring framework, oracle application testing suite +17 more +19 more Spring Framework has Improperly Implemented Security Check for Standard CVE-2018-1275 Fix available EPSS 57.7% 9.8 CriticalApril 11, 2018
• spring by pivotal framework, vmware spring framework, oracle application testing suite +23 more +25 more Possible privilege escalation in org.springframework:spring-core CVE-2018-1272 Fix available 7.5 HighApril 6, 2018
• spring by pivotal framework, vmware spring framework, oracle application testing suite +26 more +28 more Path Traversal in org.springframework:spring-core CVE-2018-1271 Fix available EPSS 30.3% 5.9 MediumApril 6, 2018
• spring by pivotal framework, vmware spring framework, debian linux +26 more +28 more Spring Framework allows applications to expose STOMP over WebSocket endpoints CVE-2018-1270 Public exploitFix available EPSS 77.6% 9.8 CriticalApril 6, 2018
• apache log4j, netapp oncommand api services, oncommand insight +76 more +78 more Deserialization of Untrusted Data in Log4j CVE-2017-5645 Public exploitFix available EPSS 89.4% 9.8 CriticalApril 17, 2017
• oracle documaker, enterprise manager ops center, health sciences information manager +8 more +10 more Unspecified vulnerability in the Enterprise Manager Ops Center component in Oracle Enterprise... CVE-2016-0635 8.8 HighJuly 21, 2016