Skip to contentOracle Primavera Gateway vulnerabilities
- oracle primavera gatewayVulnerability in the Primavera Gateway product of Oracle Construction and Engineering (component:...CVE-2023-218885.4 Medium
- fasterxml jackson-databind, debian linux, netapp active iq unified manager +33 more +35 moreDeeply nested json in jackson-databindCVE-2020-36518Public exploitFix available7.5 High
- apache software foundation xerces, apache xerces-j, netapp active iq unified manager +27 more +29 moreInfinite loop within Apache XercesJ xml parserCVE-2022-23437Fix availableEPSS 11.6%6.5 Medium
- apache log4j, apache software foundation log4j2, cisco cloudcenter +20 more +22 moreApache Log4j2 vulnerable to RCE via JDBC Appender when attacker controls configurationCVE-2021-44832Public exploitFix availableEPSS 97.9%6.6 Medium
- apache log4j, apache software foundation log4j2, debian linux +114 more +116 moreApache Log4j2 does not always protect from infinite recursion in lookup evaluationCVE-2021-45105Public exploitFix availableEPSS 100.0%5.9 Medium
- jquery jquery-ui, jqueryui jquery ui, debian linux +26 more +28 moreXSS in `*Text` options of the Datepicker widgetCVE-2021-41183Fix available6.5 Medium
- oracle advanced networking option, agile engineering data management, agile product lifecycle management +108 more +110 moreVulnerability in the Advanced Networking Option component of Oracle Database Server. Supported...CVE-2021-23518.3 High
- apache ant, oracle agile engineering data management, agile product lifecycle management +33 more +35 moreApache Ant ZIP, and ZIP based, archive denial of service vulerabilityCVE-2021-36374Fix available5.5 Medium
- apache ant, oracle agile product lifecycle management, banking trade finance +29 more +31 moreApache Ant TAR archive denial of service vulnerabilityCVE-2021-36373Fix available5.5 Medium
- apache commons compress, netapp active iq unified manager, oncommand insight +31 more +33 moreApache Commons Compress 1.0 to 1.20 denial of service vulnerabilityCVE-2021-36090Fix availableEPSS 12.9%7.5 High
- netty, debian linux, netapp oncommand api services +15 more +17 morePossible request smuggling in HTTP/2 due missing validation of content-lengthCVE-2021-21409Fix available5.9 Medium
- lodash, netapp active iq unified manager, cloud manager +20 more +22 moreCommand InjectionCVE-2021-23337Public exploitFix availableEPSS 20.2%7.2 High
- lodash, oracle banking corporate lending process management, banking credit facilities process management +16 more +18 moreRegular Expression Denial of Service (ReDoS)CVE-2020-28500Fix available5.3 Medium
- fasterxml jackson-databind, debian linux, netapp cloud backup +54 more +56 moreUnsafe Deserialization in jackson-databindCVE-2020-36179Public exploitFix availableEPSS 17.1%8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +56 more +58 moreUnsafe Deserialization in jackson-databindCVE-2020-36180Public exploitFix available8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +56 more +58 moreUnsafe Deserialization in jackson-databindCVE-2020-36182Fix available8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +42 more +44 moreUnsafe Deserialization in jackson-databindCVE-2020-36183Fix available8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +56 more +58 moreUnsafe Deserialization in jackson-databindCVE-2020-36184Public exploitFix available8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +42 more +44 moreUnsafe Deserialization in jackson-databindCVE-2020-36185Fix available8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +42 more +44 moreUnsafe Deserialization in jackson-databindCVE-2020-36186Fix available8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +42 more +44 moreUnsafe Deserialization in jackson-databindCVE-2020-36187Fix available8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +42 more +44 moreUnsafe Deserialization in jackson-databindCVE-2020-36188Public exploitFix available8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +37 more +39 moreUnsafe Deserialization in jackson-databindCVE-2020-36189Fix available8.1 High
- fasterxml jackson-databind, debian linux, netapp service level manager +55 more +57 moreUnsafe Deserialization in jackson-databindCVE-2020-36181Fix available8.1 High
- fasterxml jackson-databind, debian linux, netapp service level manager +37 more +39 moreSerialization gadget exploit in jackson-databindCVE-2020-35728Public exploitFix availableEPSS 12.5%8.1 High
- apache groovy, atlas, netapp snapcenter +18 more +20 moreInformation Disclosure in Apache GroovyCVE-2020-17521Fix available5.5 Medium
- apache iotdb, fasterxml jackson-databind, fedoraproject fedora +36 more +38 moreXML External Entity (XXE) Injection in Jackson DatabindCVE-2020-25649Fix availableEPSS 17.7%7.5 High
- apache ant, fedoraproject fedora, gradle +34 more +36 moreCode injection in Apache AntCVE-2020-11979Fix available7.5 High
- spring by vmware framework, vmware spring framework, netapp oncommand insight +36 more +38 moreRFD Protection Bypass via jsessionidCVE-2020-5421Public exploitFix availableEPSS 11.6%8.7 High
- lodash, oracle banking corporate lending process management, banking credit facilities process management +15 more +17 morePrototype Pollution in lodashCVE-2020-8203Public exploitFix available7.4 High
- apache ant, canonical ubuntu linux, fedoraproject fedora +47 more +49 moreSensitive Data Exposure in Apache AntCVE-2020-1945Fix available6.3 Medium
- jquery, debian linux, drupal +49 more +51 morePotential XSS vulnerability in jQueryCVE-2020-11023In KEVPublic exploitFix availableEPSS 84.9%6.9 Medium
- apache log4j, bookkeeper, canonical ubuntu linux +14 more +16 moreDeserialization of Untrusted Data in Log4jCVE-2019-17571Public exploitFix availableEPSS 70.0%9.8 Critical
- hibernate hibernate-validator, netapp active iq unified manager, element +185 more +187 moreThe SafeHtml annotation in Hibernate-Validator does not properly guard against XSS attacksCVE-2019-10219Public exploitFix available6.5 Medium
- apache poi, oracle application testing suite, banking enterprise originations +24 more +26 moreImproper Restriction of XML External Entity Reference in Apache POICVE-2019-12415Fix available5.5 Medium
- apache hadoop, connect2id nimbus jose\+jwt, oracle communications cloud native core security edge protection proxy +12 more +14 moreImproper Check for Unusual or Exceptional Conditions in Connect2id Nimbus JOSE+JWTCVE-2019-17195Public exploitFix availableEPSS 11.1%9.8 Critical
- fasterxml jackson-databind, debian linux, netapp oncommand workflow automation +19 more +21 morejackson-databind polymorphic typing issueCVE-2019-17531Fix available9.8 Critical
- smartbear swagger ui, oracle banking apis, banking digital experience +3 more +5 moreCross-site scripting in Swagger-UICVE-2019-17495Public exploitFix available9.8 Critical
- fasterxml jackson-databind, debian linux, fedoraproject fedora +23 more +25 morejackson-databind polymorphic typing issueCVE-2019-16943Fix available9.8 Critical
- fasterxml jackson-databind, debian linux, fedoraproject fedora +25 more +27 morePolymorphic Typing in FasterXML jackson-databindCVE-2019-16942Fix available9.8 Critical
- fasterxml jackson-databind, debian linux, fedoraproject fedora +14 more +16 morePolymorphic Typing issue in FasterXML jackson-databindCVE-2019-16335Fix available9.8 Critical
- fasterxml jackson-databind, debian linux, fedoraproject fedora +16 more +18 morePolymorphic Typing issue in FasterXML jackson-databindCVE-2019-14540Public exploitFix availableEPSS 10.8%9.8 Critical
- apache commons compress, fedoraproject fedora, oracle banking payments +16 more +18 moreDenial of Service in Apache Commons CompressCVE-2019-12402Fix availableEPSS 16.2%7.5 High
- apache commons beanutils, nifi, debian linux +57 more +59 moreInsecure Deserialization in Apache Commons BeanutilsCVE-2019-10086Fix availableEPSS 29.1%7.3 High
- fasterxml jackson-databind, apache drill, debian linux +15 more +17 moreDeserialization of untrusted data in FasterXML jackson-databindCVE-2019-14439Public exploitFix availableEPSS 10.8%7.5 High
- fasterxml jackson-databind, apple xcode, debian linux +21 more +23 moreDeserialization of untrusted data in FasterXML jackson-databindCVE-2019-14379Fix available9.8 Critical
- apache axis 1.4, axis, oracle agile engineering data management +35 more +37 moreServer Side Request Forgery in Apache AxisCVE-2019-0227Public exploitFix availableEPSS 91.9%7.5 High
- backdropcms backdrop, drupal, jquery +102 more +104 moreXSS in jQuery as used in Drupal, Backdrop CMS, and other productsCVE-2019-11358Public exploitFix availableEPSS 86.8%6.1 Medium
- pivotal spring framework, debian linux, oracle agile product lifecycle management +37 more +39 moreDoS Attack via Range RequestsCVE-2018-15756Fix available7.5 High
- apache axis, debian linux, oracle agile engineering data management +35 more +37 moreModerate severity vulnerability that affects apache axisCVE-2018-8032Public exploitFix availableEPSS 10.6%6.1 Medium
- Show olderLoading…