Oracle Rest Data Services vulnerabilities

• oracle rest data services Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are... CVE-2026-46843 5.3 MediumMay 28, 2026
• oracle rest data services Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are... CVE-2026-46842 5.3 MediumMay 28, 2026
• oracle rest data services Vulnerability in Oracle REST Data Services (component: General). Supported versions that are... CVE-2026-46841 5.3 MediumMay 28, 2026
• oracle rest data services Vulnerability in Oracle REST Data Services (component: Backend-as-a-Service). Supported versions... CVE-2026-46840 10.0 CriticalMay 28, 2026
• oracle rest data services Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are... CVE-2026-46839 9.9 CriticalMay 28, 2026
• oracle rest data services Vulnerability in Oracle REST Data Services (component: Mongoapi). Supported versions that are... CVE-2026-46830 5.3 MediumMay 28, 2026
• oracle rest data services Vulnerability in Oracle REST Data Services (component: Mongoapi). Supported versions that are... CVE-2026-46829 7.5 HighMay 28, 2026
• oracle rest data services Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are... CVE-2026-46775 9.9 CriticalMay 28, 2026
• oracle rest data services Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are... CVE-2026-35277 8.1 HighMay 28, 2026
• oracle rest data services Vulnerability in Oracle REST Data Services (component: Core). Supported versions that are... CVE-2026-35266 7.9 HighMay 28, 2026
• oracle rest data services Vulnerability in Oracle REST Data Services (component: General). The supported version that is... CVE-2025-30756 6.1 MediumJuly 15, 2025
• jquery jquery-ui, jqueryui jquery ui, drupal +25 more +27 more XSS in the `of` option of the `.position()` util CVE-2021-41184 Public exploitFix available EPSS 40.8% 6.5 MediumOctober 26, 2021
• jquery jquery-ui, jqueryui jquery ui, debian linux +26 more +28 more XSS in `*Text` options of the Datepicker widget CVE-2021-41183 Fix available 6.5 MediumOctober 26, 2021
• jquery jquery-ui, jqueryui jquery ui, debian linux +27 more +29 more XSS in the `altField` option of the Datepicker widget CVE-2021-41182 Public exploitFix available EPSS 39.4% 6.5 MediumOctober 26, 2021
• sheetjs, sheetjs pro, oracle rest data services +2 more Denial of Service in SheetJS Pro CVE-2021-32014 Fix available 5.5 MediumJuly 19, 2021
• sheetjs project sheetjs, pro, oracle rest data services +2 more Denial of Service in SheetsJS Pro CVE-2021-32013 Fix available 5.5 MediumJuly 19, 2021
• sheetjs project sheetjs, pro, oracle rest data services +2 more Denial of Service in SheetJS Pro CVE-2021-32012 Fix available 5.5 MediumJuly 19, 2021
• eclipse jetty, the eclipse foundation eclipse jetty, netapp e-series santricity os controller +16 more +18 more Encoded URIs can access WEB-INF directory in Eclipse Jetty CVE-2021-34429 Public exploitFix available EPSS 99.3% 5.3 MediumJuly 15, 2021
• eclipse jetty, the eclipse foundation eclipse jetty, debian linux +14 more +16 more SessionListener can prevent a session from being invalidated breaking logout CVE-2021-34428 Public exploitFix available 2.9 LowJune 22, 2021
• eclipse jetty, the eclipse foundation eclipse jetty, debian linux +6 more +8 more Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations CVE-2021-28169 Fix available EPSS 78.5% 5.3 MediumJune 9, 2021
• apache commons io, debian linux, netapp active iq unified manager +57 more +59 more Possible limited path traversal vulnerabily in Apache Commons IO CVE-2021-29425 Public exploitFix available EPSS 10.5% 4.8 MediumApril 13, 2021
• eclipse jetty, the eclipse foundation eclipse jetty, jenkins +19 more +21 more Jetty vulnerable to incorrect handling of invalid large TLS frame, exhausting CPU resources CVE-2021-28165 Public exploitFix available EPSS 53.9% 7.5 HighApril 1, 2021
• eclipse jetty, the eclipse foundation eclipse jetty, apache nifi +14 more +16 more DOS vulnerability for Quoted Quality CSV headers CVE-2020-27223 Public exploitFix available EPSS 78.0% 5.2 MediumFebruary 26, 2021
• eclipse jetty, the eclipse foundation eclipse jetty, apache kafka +15 more +17 more Buffer not correctly recycled in Gzip Request inflation CVE-2020-27218 Fix available 4.8 MediumNovember 28, 2020
• oracle rest data services Vulnerability in the Oracle REST Data Services product of Oracle REST Data Services (component:... CVE-2020-14745 4.3 MediumOctober 21, 2020
• oracle rest data services Vulnerability in the Oracle REST Data Services product of Oracle REST Data Services (component:... CVE-2020-14744 6.5 MediumOctober 21, 2020
• jquery, debian linux, drupal +49 more +51 more Potential XSS vulnerability in jQuery CVE-2020-11023 In KEVPublic exploitFix available EPSS 84.9% 6.9 MediumApril 29, 2020
• hibernate hibernate-validator, netapp active iq unified manager, element +185 more +187 more The SafeHtml annotation in Hibernate-Validator does not properly guard against XSS attacks CVE-2019-10219 Public exploitFix available 6.5 MediumNovember 8, 2019
• eclipse jetty, the eclipse foundation eclipse jetty, netapp element +23 more +25 more Information Exposure vulnerability in Eclipse Jetty CVE-2019-10246 Fix available 5.3 MediumApril 22, 2019
• eclipse jetty, the eclipse foundation eclipse jetty, apache activemq +5 more +7 more Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations CVE-2019-10241 Fix available 6.1 MediumApril 22, 2019
• backdropcms backdrop, drupal, jquery +102 more +104 more XSS in jQuery as used in Drupal, Backdrop CMS, and other products CVE-2019-11358 Public exploitFix available EPSS 86.8% 6.1 MediumApril 17, 2019
• eclipse jetty, the eclipse foundation eclipse jetty, debian linux +17 more +19 more Jetty vulnerable to authorization bypass due to inconsistent HTTP request handling (HTTP Request Smuggling) CVE-2017-7658 Fix available EPSS 19.0% 9.8 CriticalJune 26, 2018
• eclipse jetty, the eclipse foundation eclipse jetty, debian linux +15 more +17 more Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations CVE-2017-7657 Fix available EPSS 14.4% 9.8 CriticalJune 26, 2018
• eclipse jetty, debian linux, oracle communications cloud native core policy +4 more +6 more Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations CVE-2017-9735 Fix available 7.5 HighJune 16, 2017