Oracle Middleware Common Libraries And Tools vulnerabilities

• apache chainsaw, log4j, apache software foundation log4j 1.x +24 more +26 more A deserialization flaw in the Chainsaw component of Log4j 1 can lead to malicious code execution. CVE-2022-23307 Fix available EPSS 54.4% 8.8 HighJanuary 18, 2022
• apache log4j, apache software foundation log4j 1.x, broadcom brocade sannav +26 more +28 more SQL injection in JDBC Appender in Apache Log4j V1 CVE-2022-23305 Public exploitFix available EPSS 66.5% 9.8 CriticalJanuary 18, 2022
• apache log4j, apache software foundation log4j 1.x, broadcom brocade sannav +24 more +26 more Deserialization of untrusted data in JMSSink in Apache Log4j 1.x CVE-2022-23302 Fix available EPSS 63.8% 8.8 HighJanuary 18, 2022
• apache log4j, apache software foundation log4j 1.x, fedoraproject fedora +44 more +46 more Deserialization of untrusted data in JMSAppender in Apache Log4j 1.2 CVE-2021-4104 Public exploitFix available EPSS 80.6% 7.5 HighDecember 14, 2021
• apache mina, oracle banking payments, banking trade finance process management +6 more +8 more Apache MINA HTTP listener DOS CVE-2021-41973 Fix available 6.5 MediumNovember 1, 2021
• owasp java html sanitizer, oracle middleware common libraries and tools, primavera unifier +2 more Policies not properly enforced in OWASP Java HTML Sanitizer CVE-2021-42575 Fix available 9.8 CriticalOctober 18, 2021
• apache tomcat, debian linux, netapp hci +15 more +17 more DoS via memory leak with WebSocket connections CVE-2021-42340 Fix available EPSS 11.8% 7.5 HighOctober 14, 2021
• jhy jsoup, netapp management services for element software and netapp hci, oracle banking trade finance +13 more +15 more Crafted input may cause the jsoup HTML and XML parser to get stuck, timeout, or throw unchecked exceptions CVE-2021-37714 Fix available 7.5 HighAugust 18, 2021
• antisamy project antisamy, netapp active iq unified manager, oracle banking enterprise default management +8 more +10 more Cross-site Scripting in OWASP AntiSamy CVE-2021-35043 Fix available 6.1 MediumJuly 19, 2021
• apache sshd, apache software foundation mina sshd, oracle banking payments +7 more +9 more DoS/OOM leak vulnerability in Apache Mina SSHD Server CVE-2021-30129 Fix available 6.5 MediumJuly 12, 2021
• apache xmlbeans, debian linux, netapp oncommand unified manager core package +4 more +6 more XMLBeans XML Entity Expansion CVE-2021-23926 Fix available 9.1 CriticalJanuary 14, 2021