Oracle Rapid Planning vulnerabilities

• oracle advanced networking option, agile engineering data management, agile product lifecycle management +108 more +110 more Vulnerability in the Advanced Networking Option component of Oracle Database Server. Supported... CVE-2021-2351 8.3 HighJuly 20, 2021
• apache ant, canonical ubuntu linux, fedoraproject fedora +47 more +49 more Sensitive Data Exposure in Apache Ant CVE-2020-1945 Fix available 6.3 MediumMay 14, 2020
• dom4j project dom4j, canonical ubuntu linux, netapp oncommand api services +35 more +37 more dom4j allows External Entities by default which might enable XXE attacks CVE-2020-10683 Fix available 9.8 CriticalApril 29, 2020
• spring framework, vmware spring framework, oracle application testing suite +25 more +27 more CSRF Attack via CORS Preflight Requests with Spring MVC or Spring WebFlux CVE-2020-5397 Fix available 5.3 MediumJanuary 17, 2020
• spring framework, vmware spring framework, netapp data availability services +31 more +33 more RFD Attack via "Content-Disposition" Header Sourced from Request Input by Spring MVC or Spring WebFlux Application CVE-2020-5398 Public exploitFix available EPSS 88.3% 8.0 HighJanuary 16, 2020
• oracle coherence, access manager, commerce platform +7 more +9 more Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Caching... CVE-2020-2555 In KEVPublic exploit EPSS 97.1% 9.8 CriticalJanuary 15, 2020
• apache log4j, bookkeeper, canonical ubuntu linux +14 more +16 more Deserialization of Untrusted Data in Log4j CVE-2019-17571 Public exploitFix available EPSS 70.0% 9.8 CriticalDecember 20, 2019
• hibernate hibernate-validator, netapp active iq unified manager, element +185 more +187 more The SafeHtml annotation in Hibernate-Validator does not properly guard against XSS attacks CVE-2019-10219 Public exploitFix available 6.5 MediumNovember 8, 2019
• oracle application testing suite, banking enterprise collections, banking enterprise originations +19 more +21 more Vulnerability in the Oracle JDeveloper and ADF product of Oracle Fusion Middleware (component:... CVE-2019-2904 EPSS 14.3% 9.8 CriticalOctober 16, 2019
• eclipse mojarra, oracle mojarra javaserver faces, application testing suite +20 more +22 more Cross-site Scripting in Eclipse Mojarra CVE-2019-17091 Fix available 6.1 MediumOctober 2, 2019
• oracle weblogic server, communications diameter signaling router, communications network integrity +6 more +8 more Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent:... CVE-2019-2729 Public exploit EPSS 88.8% 9.8 CriticalJune 19, 2019
• apache axis 1.4, axis, oracle agile engineering data management +35 more +37 more Server Side Request Forgery in Apache Axis CVE-2019-0227 Public exploitFix available EPSS 91.9% 7.5 HighMay 1, 2019
• pivotal spring framework, debian linux, oracle agile product lifecycle management +37 more +39 more DoS Attack via Range Requests CVE-2018-15756 Fix available 7.5 HighOctober 18, 2018
• dom4j project dom4j, debian linux, netapp oncommand workflow automation +11 more +13 more Dom4j contains a XML Injection vulnerability CVE-2018-1000632 Fix available 7.5 HighAugust 20, 2018
• apache axis, debian linux, oracle agile engineering data management +35 more +37 more Moderate severity vulnerability that affects apache axis CVE-2018-8032 Public exploitFix available EPSS 10.6% 6.1 MediumAugust 2, 2018
• spring by pivotal framework, vmware spring framework, oracle application testing suite +26 more +28 more Path Traversal in org.springframework:spring-core CVE-2018-1271 Fix available EPSS 30.3% 5.9 MediumApril 6, 2018
• vmware spring framework, spring security, dell emc spring by pivotal +3 more +5 more Improper Input Validation in org.springframework.security:spring-security-core, org.springframework.security:spring-security-core , and org.springframework:spring-core CVE-2018-1199 Fix available 5.3 MediumMarch 16, 2018
• apache log4j, netapp oncommand api services, oncommand insight +76 more +78 more Deserialization of Untrusted Data in Log4j CVE-2017-5645 Public exploitFix available EPSS 89.4% 9.8 CriticalApril 17, 2017