Oracle Primavera Unifier vulnerabilities

• apache tika, oracle primavera unifier +1 more Apache Tika Regular Expression Denial of Service in Standards Extractor CVE-2022-30126 Fix available 5.5 MediumMay 16, 2022
• apache tika, oracle primavera unifier +1 more Apache Tika BPGParser Memory Usage DoS CVE-2022-25169 Fix available 5.5 MediumMay 16, 2022
• fasterxml jackson-databind, debian linux, netapp active iq unified manager +33 more +35 more Deeply nested json in jackson-databind CVE-2020-36518 Public exploitFix available 7.5 HighMarch 11, 2022
• apache log4j, apache software foundation log4j2, cisco cloudcenter +20 more +22 more Apache Log4j2 vulnerable to RCE via JDBC Appender when attacker controls configuration CVE-2021-44832 Public exploitFix available EPSS 97.9% 6.6 MediumDecember 28, 2021
• apache log4j, apache software foundation log4j2, debian linux +114 more +116 more Apache Log4j2 does not always protect from infinite recursion in lookup evaluation CVE-2021-45105 Public exploitFix available EPSS 100.0% 5.9 MediumDecember 18, 2021
• linuxfoundation dojo, debian linux, oracle communications policy management +2 more +4 more Prototype Pollution CVE-2021-23450 Fix available EPSS 30.4% 7.5 HighDecember 17, 2021
• jquery jquery-ui, jqueryui jquery ui, drupal +25 more +27 more XSS in the `of` option of the `.position()` util CVE-2021-41184 Public exploitFix available EPSS 40.8% 6.5 MediumOctober 26, 2021
• jquery jquery-ui, jqueryui jquery ui, debian linux +27 more +29 more XSS in the `altField` option of the Datepicker widget CVE-2021-41182 Public exploitFix available EPSS 39.4% 6.5 MediumOctober 26, 2021
• owasp java html sanitizer, oracle middleware common libraries and tools, primavera unifier +2 more Policies not properly enforced in OWASP Java HTML Sanitizer CVE-2021-42575 Fix available 9.8 CriticalOctober 18, 2021
• apache kafka, oracle communications brm - elastic charging engine, communications cloud native core policy +5 more +7 more Timing Attack Vulnerability for Apache Kafka Connect and Clients CVE-2021-38153 Fix available 5.9 MediumSeptember 22, 2021
• jhy jsoup, netapp management services for element software and netapp hci, oracle banking trade finance +13 more +15 more Crafted input may cause the jsoup HTML and XML parser to get stuck, timeout, or throw unchecked exceptions CVE-2021-37714 Fix available 7.5 HighAugust 18, 2021
• oracle advanced networking option, agile engineering data management, agile product lifecycle management +108 more +110 more Vulnerability in the Advanced Networking Option component of Oracle Database Server. Supported... CVE-2021-2351 8.3 HighJuly 20, 2021
• apache ant, oracle agile engineering data management, agile product lifecycle management +33 more +35 more Apache Ant ZIP, and ZIP based, archive denial of service vulerability CVE-2021-36374 Fix available 5.5 MediumJuly 14, 2021
• apache ant, oracle agile product lifecycle management, banking trade finance +29 more +31 more Apache Ant TAR archive denial of service vulnerability CVE-2021-36373 Fix available 5.5 MediumJuly 14, 2021
• apache commons compress, netapp active iq unified manager, oncommand insight +31 more +33 more Apache Commons Compress 1.0 to 1.20 denial of service vulnerability CVE-2021-36090 Fix available EPSS 12.9% 7.5 HighJuly 13, 2021
• apache commons compress, netapp active iq unified manager, oncommand insight +24 more +26 more Apache Commons Compress 1.1 to 1.20 denial of service vulnerability CVE-2021-35517 Fix available EPSS 10.6% 7.5 HighJuly 13, 2021
• apache commons compress, netapp active iq unified manager, oncommand insight +21 more +23 more Apache Commons Compress 1.6 to 1.20 denial of service vulnerability CVE-2021-35516 Fix available EPSS 12.4% 7.5 HighJuly 13, 2021
• apache commons compress, netapp active iq unified manager, oncommand insight +23 more +25 more Apache Commons Compress 1.6 to 1.20 denial of service vulnerability CVE-2021-35515 Fix available EPSS 11.6% 7.5 HighJuly 13, 2021
• apache pdfbox, fedoraproject fedora, oracle banking corporate lending process management +9 more +11 more A carefully crafted PDF file can trigger an OutOfMemory-Exception while loading a tiny file CVE-2021-31811 Fix available 5.5 MediumJune 12, 2021
• apache commons io, debian linux, netapp active iq unified manager +57 more +59 more Possible limited path traversal vulnerabily in Apache Commons IO CVE-2021-29425 Public exploitFix available EPSS 10.5% 4.8 MediumApril 13, 2021
• apache tika, oracle communications messaging server, healthcare foundation +2 more +4 more Infinite loop in Apache Tika's MP3 parser CVE-2021-28657 Fix available 5.5 MediumMarch 31, 2021
• openssl, checkpoint multi-domain management firmware, quantum security gateway firmware +103 more +105 more NULL pointer deref in signature_algorithms processing CVE-2021-3449 Public exploitFix available EPSS 63.5% 5.9 MediumMarch 25, 2021
• apache pdfbox, fedoraproject fedora, oracle banking corporate lending process management +16 more +18 more A carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file CVE-2021-27906 Fix available 5.5 MediumMarch 19, 2021
• apache pdfbox, fedoraproject fedora, oracle banking trade finance process management +12 more +14 more A carefully crafted PDF file can trigger an infinite loop while loading the file CVE-2021-27807 Fix available 5.5 MediumMarch 19, 2021
• lodash, netapp active iq unified manager, cloud manager +20 more +22 more Command Injection CVE-2021-23337 Public exploitFix available EPSS 21.3% 7.2 HighFebruary 15, 2021
• lodash, oracle banking corporate lending process management, banking credit facilities process management +16 more +18 more Regular Expression Denial of Service (ReDoS) CVE-2020-28500 Fix available 5.3 MediumFebruary 15, 2021
• fasterxml jackson-databind, debian linux, netapp cloud backup +54 more +56 more Unsafe Deserialization in jackson-databind CVE-2020-36179 Public exploitFix available EPSS 17.1% 8.1 HighJanuary 6, 2021
• fasterxml jackson-databind, debian linux, netapp cloud backup +56 more +58 more Unsafe Deserialization in jackson-databind CVE-2020-36180 Public exploitFix available 8.1 HighJanuary 6, 2021
• fasterxml jackson-databind, debian linux, netapp cloud backup +56 more +58 more Unsafe Deserialization in jackson-databind CVE-2020-36182 Fix available 8.1 HighJanuary 6, 2021
• fasterxml jackson-databind, debian linux, netapp cloud backup +42 more +44 more Unsafe Deserialization in jackson-databind CVE-2020-36183 Fix available 8.1 HighJanuary 6, 2021
• fasterxml jackson-databind, debian linux, netapp cloud backup +56 more +58 more Unsafe Deserialization in jackson-databind CVE-2020-36184 Public exploitFix available 8.1 HighJanuary 6, 2021
• fasterxml jackson-databind, debian linux, netapp cloud backup +42 more +44 more Unsafe Deserialization in jackson-databind CVE-2020-36185 Fix available 8.1 HighJanuary 6, 2021
• fasterxml jackson-databind, debian linux, netapp cloud backup +42 more +44 more Unsafe Deserialization in jackson-databind CVE-2020-36186 Fix available 8.1 HighJanuary 6, 2021
• fasterxml jackson-databind, debian linux, netapp cloud backup +42 more +44 more Unsafe Deserialization in jackson-databind CVE-2020-36187 Fix available 8.1 HighJanuary 6, 2021
• fasterxml jackson-databind, debian linux, netapp cloud backup +42 more +44 more Unsafe Deserialization in jackson-databind CVE-2020-36188 Public exploitFix available 8.1 HighJanuary 6, 2021
• fasterxml jackson-databind, debian linux, netapp cloud backup +37 more +39 more Unsafe Deserialization in jackson-databind CVE-2020-36189 Fix available 8.1 HighJanuary 6, 2021
• fasterxml jackson-databind, debian linux, netapp service level manager +55 more +57 more Unsafe Deserialization in jackson-databind CVE-2020-36181 Fix available 8.1 HighJanuary 6, 2021
• fasterxml jackson-databind, debian linux, netapp service level manager +37 more +39 more Serialization gadget exploit in jackson-databind CVE-2020-35728 Public exploitFix available EPSS 12.5% 8.1 HighDecember 27, 2020
• mpxj, oracle primavera unifier +1 more MPXJ path Traversal vulnerability CVE-2020-35460 Public exploitFix available 5.3 MediumDecember 14, 2020
• google guava, netapp active iq unified manager, oracle commerce guided search +10 more +12 more Temp directory permission issue in Guava CVE-2020-8908 Fix available 3.3 LowDecember 10, 2020
• apache groovy, atlas, netapp snapcenter +18 more +20 more Information Disclosure in Apache Groovy CVE-2020-17521 Fix available 5.5 MediumDecember 7, 2020
• apache httpclient, netapp active iq unified manager, snapcenter +14 more +16 more Cross-site scripting in Apache HttpClient CVE-2020-13956 Fix available 5.3 MediumOctober 10, 2020
• apache ant, fedoraproject fedora, gradle +34 more +36 more Code injection in Apache Ant CVE-2020-11979 Fix available 7.5 HighOctober 1, 2020
• mpxj, oracle primavera unifier +1 more Improper Restriction of XML External Entity Reference in MPXJ CVE-2020-25020 Fix available 9.8 CriticalAugust 29, 2020
• oracle primavera unifier Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering (component:... CVE-2020-14618 5.9 MediumJuly 15, 2020
• oracle primavera unifier Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering (component:... CVE-2020-14617 5.7 MediumJuly 15, 2020
• apache ant, canonical ubuntu linux, fedoraproject fedora +47 more +49 more Sensitive Data Exposure in Apache Ant CVE-2020-1945 Fix available 6.3 MediumMay 14, 2020
• apache log4j, debian linux, oracle communications application session controller +43 more +45 more Improper validation of certificate with host mismatch in Apache Log4j SMTP appender CVE-2020-9488 Public exploitFix available 3.7 LowApril 27, 2020
• apache tika, the apache software foundation apache tika, oracle communications messaging server +3 more +5 more Missing Release of Memory after Effective Lifetime in Apache Tika CVE-2020-9489 Fix available 5.5 MediumApril 27, 2020
• fasterxml jackson-databind, debian linux, netapp active iq unified manager +15 more +17 more jackson-databind mishandles the interaction between serialization gadgets and typing CVE-2020-11620 Fix available 8.1 HighApril 7, 2020
• Show olderLoading…