Skip to contentOracle Portal vulnerabilities
- fasterxml jackson-databind, debian linux, fedoraproject fedora +25 more +27 morePolymorphic Typing in FasterXML jackson-databindCVE-2019-16942Fix available9.8 Critical
- apache commons compress, fedoraproject fedora, oracle banking payments +16 more +18 moreDenial of Service in Apache Commons CompressCVE-2019-12402Fix availableEPSS 16.2%7.5 High
- x-stream xstream, oracle banking platform, business activity monitoring +7 more +9 moreDeserialization of Untrusted Data and Code Injection in xstreamCVE-2019-10173Fix availableEPSS 95.0%7.3 High
- apache axis 1.4, axis, oracle agile engineering data management +35 more +37 moreServer Side Request Forgery in Apache AxisCVE-2019-0227Public exploitFix availableEPSS 91.9%7.5 High
- oracle isupplier portalVulnerability in the Oracle iSupplier Portal component of Oracle E-Business Suite (subcomponent:...CVE-2019-25838.2 High
- oracle webcenter portalVulnerability in the Oracle WebCenter Portal component of Oracle Fusion Middleware (subcomponent:...CVE-2019-24275.3 Medium
- fasterxml jackson-databind, debian linux, oracle business process management suite +9 more +11 morecom.fasterxml.jackson.core:jackson-databind vulnerable to Deserialization of Untrusted DataCVE-2018-19362Fix availableEPSS 10.6%9.8 Critical
- fasterxml jackson-databind, debian linux, oracle business process management suite +9 more +11 moreDeserialization of Untrusted Data in jackson-databindCVE-2018-19361Fix availableEPSS 10.6%9.8 Critical
- fasterxml jackson-databind, debian linux, oracle business process management suite +9 more +11 moreDeserialization of Untrusted Data in jackson-databind due to polymorphic deserializationCVE-2018-19360Fix availableEPSS 10.6%9.8 Critical
- fasterxml jackson-databind, debian linux, oracle banking platform +9 more +11 moreServer-Side Request Forgery (SSRF) in jackson-databindCVE-2018-14721Fix availableEPSS 10.5%10.0 Critical
- fasterxml jackson-databind, debian linux, oracle banking platform +9 more +11 moreXML External Entity Reference (XXE) in jackson-databindCVE-2018-14720Fix available9.8 Critical
- fasterxml jackson-databind, debian linux, netapp oncommand workflow automation +17 more +19 moreArbitrary Code Execution in jackson-databindCVE-2018-14719Fix available9.8 Critical
- fasterxml jackson-databind, debian linux, netapp oncommand workflow automation +22 more +24 moreArbitrary Code Execution in jackson-databindCVE-2018-14718Fix availableEPSS 12.7%9.8 Critical
- oracle webcenter portalVulnerability in the Oracle WebCenter Portal component of Oracle Fusion Middleware (subcomponent:...CVE-2018-32545.3 Medium
- oracle weblogic server, banking platform, business process management suite +6 more +8 moreVulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent:...CVE-2018-32467.5 High
- apache axis, debian linux, oracle agile engineering data management +35 more +37 moreModerate severity vulnerability that affects apache axisCVE-2018-8032Public exploitFix availableEPSS 10.6%6.1 Medium
- oracle webcenter portalVulnerability in the Oracle WebCenter Portal component of Oracle Fusion Middleware (subcomponent:...CVE-2018-31015.3 Medium
- bouncycastle bc-java, netapp oncommand workflow automation, opensuse leap +21 more +23 moreDeserialization of Untrusted Data in Bouncy castleCVE-2018-1000613Fix available9.8 Critical
- bouncycastle bc-java, fips java api, debian linux +17 more +19 moreBouncy Castle has a flaw in the Low-level interface to RSA key pair generatorCVE-2018-1000180Fix available7.5 High
- oracle webcenter portalVulnerability in the Oracle WebCenter Portal component of Oracle Fusion Middleware (subcomponent:...CVE-2018-27138.2 High
- apache struts, netapp oncommand balance, oracle agile plm framework +9 more +11 moreModerate severity vulnerability that affects org.apache.struts:struts2-rest-pluginCVE-2017-15707Fix available6.2 Medium
- fasterxml jackson-databind, debian linux, netapp oncommand balance +21 more +23 morejackson-databind vulnerable to deserialization flaw leading to unauthenticated remote code executionCVE-2017-15095Fix available9.8 Critical
- fasterxml jackson-databind, debian linux, netapp oncommand balance +18 more +20 morejackson-databind is vulnerable to a deserialization flawCVE-2017-7525Public exploitFix availableEPSS 37.7%9.8 Critical
- apache struts, oracle banking platform, portal +2 moreImproper Input Validation in Apache StrutsCVE-2016-1181EPSS 12.7%8.1 High
- oracle application server, portal component +1 moreUnspecified vulnerability in the Oracle Portal component in Oracle Application Server 9.0.4.3, 10...CVE-2008-26096.4 Medium
- oracle application server, portal component +1 moreUnspecified vulnerability in the Oracle Portal component in Oracle Application Server 9.0.4.3, 10...CVE-2008-25896.4 Medium
- oracle application server, portal component +1 moreUnspecified vulnerability in the sample Discussion Forum Portlet for the Oracle Portal component...CVE-2008-25834.3 Medium
- oracle application server portalOracle Application Server (OracleAS) Portal 10g allows remote attackers to bypass intended access...CVE-2008-2138Public exploitEPSS 15.5%5.0 Medium
- bea systems weblogic portalBEA WebLogic Portal 10.0 and 9.2 through Maintenance Pack 2, under certain circumstances, can...CVE-2008-08707.5 High
- bea systems weblogic portalCross-site scripting (XSS) vulnerability in Groupspace in BEA WebLogic Portal 10.0 and 9.2...CVE-2008-08684.3 Medium
- bea systems weblogic portalUnspecified vulnerability in BEA WebLogic Portal 8.1 through SP6 allows remote attackers to...CVE-2008-08655.0 Medium
- bea systems weblogic portalAdmin Tools in BEA WebLogic Portal 8.1 SP3 through SP6 can inadvertently remove entitlements for...CVE-2008-08645.0 Medium
- bea tuxedo, weblogic integration, weblogic server +2 more +4 moreBEA Tuxedo 8.0 before RP392 and 8.1 before RP293, and WebLogic Enterprise 5.1 before RP174, echo...CVE-2007-55766.8 Medium
- oracle weblogic portalBEA WebLogic Portal 9.2 GA can corrupt a visitor entitlements role if an administrator provides a...CVE-2007-27033.6 Low
- oracle weblogic portalCross-site scripting (XSS) vulnerability in the GroupSpace application in BEA WebLogic Portal 9.2...CVE-2007-27023.5 Low
- oracle application server portalCross-site scripting (XSS) vulnerability in PORTAL.wwv_main.render_warning_screen in the Oracle...CVE-2007-1506Public exploit4.3 Medium
- oracle weblogic portalBEA WebLogic Portal 9.2, when running in a WebLogic Server clustered environment using WebLogic...CVE-2007-04266.8 Medium
- oracle weblogic portalBEA WebLogic Portal 9.2 does not properly handle when an administrator deletes entitlements for a...CVE-2007-04234.4 Medium
- oracle application server portalMultiple CRLF injection vulnerabilities in Oracle Portal 9.0.2 and possibly other versions allow...CVE-2006-66995.0 Medium
- oracle application server portalCRLF injection vulnerability in webapp/jsp/calendar.jsp in Oracle Portal 10g and earlier,...CVE-2006-6697Public exploitEPSS 13.1%7.5 High
- oracle weblogic portalUnspecified vulnerability in BEA WebLogic Portal 8.1 up to SP5 causes a JSR-168 Portlet to be...CVE-2006-13585.0 Medium
- oracle database server, 10g enterprise manager grid control, application server +9 more +11 moreUnspecified vulnerability in the Net Listener component of Oracle Database server 8.1.7.4, 9.0.1...CVE-2006-05527.5 High
- oracle weblogic portalUnspecified vulnerability in BEA WebLogic Portal 8.1 SP3 through SP5, when using Web Services...CVE-2006-04287.5 High
- oracle weblogic portalBEA WebLogic Portal 8.1 through SP4 allows remote attackers to obtain the source for a deployment...CVE-2006-04255.0 Medium
- oracle weblogic portalBEA WebLogic Portal 8.1 through SP3 stores the password for the RDBMS Authentication provider in...CVE-2006-04237.5 High
- oracle peoplesoft enterprise portalUnspecified vulnerability in Oracle PeopleSoft Enterprise Portal 8.4 Bundle 15, 8.8 Bundle 10,...CVE-2006-028010.0 High
- oracle weblogic portalUnspecified vulnerability in BEA WebLogic Portal 8.1 through SP4, when using entitlements, allows...CVE-2005-26805.0 Medium
- bea weblogic server, oracle weblogic portal +1 moreBuffer overflow in BEA WebLogic Server and WebLogic Express 6.1 Service Pack 4 allows remote...CVE-2005-17495.0 Medium
- bea weblogic server, oracle weblogic portal +1 moreThe embedded LDAP server in BEA WebLogic Server and Express 8.1 through Service Pack 4, and 7.0...CVE-2005-17485.0 Medium
- bea weblogic server, oracle weblogic portal +1 moreMultiple cross-site scripting (XSS) vulnerabilities in BEA WebLogic Server and Express 8.1...CVE-2005-17476.8 Medium
- Show moreLoading…