Skip to contentOracle Retail Assortment Planning vulnerabilities
- apache log4j, apache software foundation log4j2, cisco cloudcenter +20 more +22 moreApache Log4j2 vulnerable to RCE via JDBC Appender when attacker controls configurationCVE-2021-44832Public exploitFix availableEPSS 97.9%6.6 Medium
- oracle advanced networking option, agile engineering data management, agile product lifecycle management +108 more +110 moreVulnerability in the Advanced Networking Option component of Oracle Database Server. Supported...CVE-2021-23518.3 High
- vmware spring framework, netapp hci, management services for element software +29 more +31 moreImproper Privilege Management in Spring FrameworkCVE-2021-22118Fix available7.8 High
- apache commons io, debian linux, netapp active iq unified manager +57 more +59 morePossible limited path traversal vulnerabily in Apache Commons IOCVE-2021-29425Public exploitFix availableEPSS 10.5%4.8 Medium
- apache ant, fedoraproject fedora, gradle +34 more +36 moreCode injection in Apache AntCVE-2020-11979Fix available7.5 High
- spring by vmware framework, vmware spring framework, netapp oncommand insight +36 more +38 moreRFD Protection Bypass via jsessionidCVE-2020-5421Public exploitFix availableEPSS 11.6%8.7 High
- apache ant, canonical ubuntu linux, fedoraproject fedora +47 more +49 moreSensitive Data Exposure in Apache AntCVE-2020-1945Fix available6.3 Medium
- apache log4j, debian linux, oracle communications application session controller +43 more +45 moreImproper validation of certificate with host mismatch in Apache Log4j SMTP appenderCVE-2020-9488Public exploitFix available3.7 Low
- spring framework, vmware spring framework, oracle application testing suite +25 more +27 moreCSRF Attack via CORS Preflight Requests with Spring MVC or Spring WebFluxCVE-2020-5397Fix available5.3 Medium
- spring framework, vmware spring framework, netapp data availability services +31 more +33 moreRFD Attack via "Content-Disposition" Header Sourced from Request Input by Spring MVC or Spring WebFlux ApplicationCVE-2020-5398Public exploitFix availableEPSS 88.3%8.0 High
- oracle coherence, access manager, commerce platform +7 more +9 moreVulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Caching...CVE-2020-2555In KEVPublic exploitEPSS 97.1%9.8 Critical
- hibernate hibernate-validator, netapp active iq unified manager, element +185 more +187 moreThe SafeHtml annotation in Hibernate-Validator does not properly guard against XSS attacksCVE-2019-10219Public exploitFix available6.5 Medium
- oracle application testing suite, banking enterprise collections, banking enterprise originations +19 more +21 moreVulnerability in the Oracle JDeveloper and ADF product of Oracle Fusion Middleware (component:...CVE-2019-2904EPSS 14.3%9.8 Critical
- eclipse mojarra, oracle mojarra javaserver faces, application testing suite +20 more +22 moreCross-site Scripting in Eclipse MojarraCVE-2019-17091Fix available6.1 Medium
- dell bsafe crypto-j, rsa bsafe crypto-j, bsafe cert-j +16 more +18 moreRSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to an Information Exposure Through...CVE-2019-37406.5 Medium
- dell bsafe crypto-j, rsa bsafe crypto-j, bsafe cert-j +14 more +16 moreRSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to Information Exposure Through Timing...CVE-2019-37396.5 Medium
- dell bsafe crypto-j, rsa bsafe crypto-j, bsafe cert-j +14 more +16 moreRSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to an Improper Verification of...CVE-2019-37386.5 Medium
- pivotal spring framework, debian linux, oracle agile product lifecycle management +37 more +39 moreDoS Attack via Range RequestsCVE-2018-15756Fix available7.5 High
- pivotal spring framework, debian linux, oracle agile product lifecycle management +30 more +32 moreSpring Framework Cross Site Tracing (XST)CVE-2018-11039Fix available5.9 Medium
- pivotal spring framework, pivotal software spring security, netapp oncommand insight +39 more +41 moreSpring Framework when used in combination with any versions of Spring Security contains an authorization bypassCVE-2018-1258Fix available8.8 High