Oracle Retail Bulk Data Integration vulnerabilities

• vmware spring framework, cisco cx cloud agent, oracle commerce platform +35 more +37 more Remote Code Execution in Spring Framework CVE-2022-22965 In KEVPublic exploitFix available EPSS 99.6% 9.8 CriticalMarch 31, 2022
• apache software foundation xerces, apache xerces-j, netapp active iq unified manager +27 more +29 more Infinite loop within Apache XercesJ xml parser CVE-2022-23437 Fix available EPSS 11.6% 6.5 MediumJanuary 24, 2022
• apache software foundation santuario, apache cxf, santuario xml security for java +16 more +18 more Bypass of the secureValidation property CVE-2021-40690 Fix available 7.5 HighSeptember 19, 2021
• apache ant, oracle agile engineering data management, agile product lifecycle management +33 more +35 more Apache Ant ZIP, and ZIP based, archive denial of service vulerability CVE-2021-36374 Fix available 5.5 MediumJuly 14, 2021
• apache ant, oracle agile product lifecycle management, banking trade finance +29 more +31 more Apache Ant TAR archive denial of service vulnerability CVE-2021-36373 Fix available 5.5 MediumJuly 14, 2021
• apache groovy, atlas, netapp snapcenter +18 more +20 more Information Disclosure in Apache Groovy CVE-2020-17521 Fix available 5.5 MediumDecember 7, 2020
• spring by vmware framework, vmware spring framework, netapp oncommand insight +36 more +38 more RFD Protection Bypass via jsessionid CVE-2020-5421 Public exploitFix available EPSS 11.6% 8.7 HighSeptember 19, 2020
• apache ant, canonical ubuntu linux, fedoraproject fedora +47 more +49 more Sensitive Data Exposure in Apache Ant CVE-2020-1945 Fix available 6.3 MediumMay 14, 2020
• apache log4j, debian linux, oracle communications application session controller +43 more +45 more Improper validation of certificate with host mismatch in Apache Log4j SMTP appender CVE-2020-9488 Public exploitFix available 3.7 LowApril 27, 2020
• spring framework, vmware spring framework, netapp data availability services +31 more +33 more RFD Attack via "Content-Disposition" Header Sourced from Request Input by Spring MVC or Spring WebFlux Application CVE-2020-5398 Public exploitFix available EPSS 88.3% 8.0 HighJanuary 16, 2020
• eclipse mojarra, oracle mojarra javaserver faces, application testing suite +20 more +22 more Cross-site Scripting in Eclipse Mojarra CVE-2019-17091 Fix available 6.1 MediumOctober 2, 2019
• oracle retail bulk data integration Vulnerability in the Oracle Retail Bulk Data Integration component of Oracle Retail Applications ... CVE-2018-2891 6.1 MediumJuly 18, 2018