Skip to contentOracle Retail Order Broker vulnerabilities
- google gson, debian linux, netapp active iq unified manager +3 more +5 moreDeserialization of Untrusted DataCVE-2022-25647Fix availableEPSS 12.2%7.7 High
- apache log4j, apache software foundation log4j2, cisco cloudcenter +20 more +22 moreApache Log4j2 vulnerable to RCE via JDBC Appender when attacker controls configurationCVE-2021-44832Public exploitFix availableEPSS 97.9%6.6 Medium
- apache log4j, apache software foundation log4j2, debian linux +114 more +116 moreApache Log4j2 does not always protect from infinite recursion in lookup evaluationCVE-2021-45105Public exploitFix availableEPSS 100.0%5.9 Medium
- oracle advanced networking option, agile engineering data management, agile product lifecycle management +108 more +110 moreVulnerability in the Advanced Networking Option component of Oracle Database Server. Supported...CVE-2021-23518.3 High
- vmware spring framework, netapp hci, management services for element software +29 more +31 moreImproper Privilege Management in Spring FrameworkCVE-2021-22118Fix available7.8 High
- apache commons io, debian linux, netapp active iq unified manager +57 more +59 morePossible limited path traversal vulnerabily in Apache Commons IOCVE-2021-29425Public exploitFix availableEPSS 10.5%4.8 Medium
- apache velocity engine, wss4j, debian linux +13 more +15 moreVelocity Sandbox BypassCVE-2020-13936Fix availableEPSS 22.7%8.8 High
- apache batik, debian linux, fedoraproject fedora +19 more +21 moreServer-side request forgery (SSRF) in Apache BatikCVE-2020-11987Fix availableEPSS 13.6%8.2 High
- apache cxf, netapp snap creator framework, vasa provider for clustered data ontap +3 more +5 moreApache CXF Reflected XSS in the services listing page via the styleSheetPathCVE-2020-13954Fix availableEPSS 40.9%6.1 Medium
- spring by vmware framework, vmware spring framework, netapp oncommand insight +36 more +38 moreRFD Protection Bypass via jsessionidCVE-2020-5421Public exploitFix availableEPSS 11.6%8.7 High
- apache batik, oracle api gateway, business intelligence +15 more +17 moreServer-side request forgery (SSRF) in Apache BatikCVE-2019-17566Fix availableEPSS 10.9%7.5 High
- tibco jasperreports library, jasperreports server, tibco software inc. jasperreports library for activematrix bpm +3 more +5 moreTIBCO JasperReports LibraryCVE-2020-9410Fix available7.3 High
- tibco jasperreports server, tibco software inc. jasperreports server for activematrix bpm, jasperreports server for aws marketplace +1 more +3 moreTIBCO JasperReports Server Fails To Enforce Access RestrictionsCVE-2020-9409Fix available9.8 Critical
- apache tomcat, canonical ubuntu linux, debian linux +23 more +25 morePotential remote code execution in Apache TomcatCVE-2020-9484Public exploitFix availableEPSS 55.5%7.0 High
- dom4j project dom4j, canonical ubuntu linux, netapp oncommand api services +35 more +37 moredom4j allows External Entities by default which might enable XXE attacksCVE-2020-10683Fix available9.8 Critical
- apache log4j, debian linux, oracle communications application session controller +43 more +45 moreImproper validation of certificate with host mismatch in Apache Log4j SMTP appenderCVE-2020-9488Public exploitFix available3.7 Low
- apache tomcat, canonical ubuntu linux, debian linux +17 more +19 morePotential HTTP request smuggling in Apache TomcatCVE-2020-1935Fix available4.8 Medium
- spring framework, vmware spring framework, oracle application testing suite +25 more +27 moreCSRF Attack via CORS Preflight Requests with Spring MVC or Spring WebFluxCVE-2020-5397Fix available5.3 Medium
- spring framework, vmware spring framework, netapp data availability services +31 more +33 moreRFD Attack via "Content-Disposition" Header Sourced from Request Input by Spring MVC or Spring WebFlux ApplicationCVE-2020-5398Public exploitFix availableEPSS 88.3%8.0 High
- apache cxf, oracle commerce guided search, communications element manager +4 more +6 moreReflected Cross-Site Scripting in Apache CXFCVE-2019-17573Public exploitFix available6.1 Medium
- apache cxf, oracle commerce guided search, communications diameter signaling router +5 more +7 morePrivate key leak in Apache CXFCVE-2019-12423Fix available7.5 High
- apache tomcat, canonical ubuntu linux, debian linux +8 more +10 moreIn Apache Tomcat, when using FORM authentication there was a narrow window where an attacker could perform a session fixation attackCVE-2019-17563Fix availableEPSS 10.7%7.5 High
- hibernate hibernate-validator, netapp active iq unified manager, element +185 more +187 moreThe SafeHtml annotation in Hibernate-Validator does not properly guard against XSS attacksCVE-2019-10219Public exploitFix available6.5 Medium
- apache cxf, oracle commerce guided search, enterprise manager base platform +2 more +4 morePotential session hijack in Apache CXFCVE-2019-12419Fix availableEPSS 13.8%9.8 Critical
- apache cxf, oracle commerce guided search, flexcube private banking +1 more +3 morePotential DOS attack due to unrestricted attachment count in messagesCVE-2019-12406Fix available6.5 Medium
- apache poi, oracle application testing suite, banking enterprise originations +24 more +26 moreImproper Restriction of XML External Entity Reference in Apache POICVE-2019-12415Fix available5.5 Medium
- softwareag quartz, apache tomee, atlassian jira service management +28 more +30 moreXML external entity injection in Terracotta Quartz SchedulerCVE-2019-13990Public exploitFix availableEPSS 16.6%9.8 Critical
- apache axis 1.4, axis, oracle agile engineering data management +35 more +37 moreServer Side Request Forgery in Apache AxisCVE-2019-0227Public exploitFix availableEPSS 91.9%7.5 High
- pivotal spring framework, debian linux, oracle agile product lifecycle management +37 more +39 moreDoS Attack via Range RequestsCVE-2018-15756Fix available7.5 High
- apache tomcat, canonical ubuntu linux, debian linux +12 more +14 moreApache Tomcat Open Redirect vulnerabilityCVE-2018-11784Public exploitFix availableEPSS 97.7%4.3 Medium
- apache axis, debian linux, oracle agile engineering data management +35 more +37 moreModerate severity vulnerability that affects apache axisCVE-2018-8032Public exploitFix availableEPSS 10.6%6.1 Medium
- apache tomcat, canonical ubuntu linux, debian linux +1 more +3 moreThe host name verification missing in Apache TomcatCVE-2018-8034Fix availableEPSS 21.0%7.5 High
- apache batik, canonical ubuntu linux, debian linux +18 more +20 moreDeserialization of Untrusted Data in Apache BatikCVE-2018-8013Fix availableEPSS 18.6%9.8 Critical
- pivotal spring framework, oracle agile product lifecycle management, application testing suite +27 more +29 moreDenial of Service in org.springframework:spring-coreCVE-2018-1257Fix available6.5 Medium
- spring by pivotal framework, vmware spring framework, oracle application testing suite +17 more +19 moreSpring Framework has Improperly Implemented Security Check for StandardCVE-2018-1275Fix availableEPSS 57.7%9.8 Critical
- spring by pivotal framework, vmware spring framework, oracle application testing suite +23 more +25 morePossible privilege escalation in org.springframework:spring-coreCVE-2018-1272Fix available7.5 High
- spring by pivotal framework, vmware spring framework, oracle application testing suite +26 more +28 morePath Traversal in org.springframework:spring-coreCVE-2018-1271Fix availableEPSS 30.3%5.9 Medium
- spring by pivotal framework, vmware spring framework, debian linux +26 more +28 moreSpring Framework allows applications to expose STOMP over WebSocket endpointsCVE-2018-1270Public exploitFix availableEPSS 77.6%9.8 Critical
- apache struts, netapp oncommand balance, oracle agile plm framework +9 more +11 moreModerate severity vulnerability that affects org.apache.struts:struts2-rest-pluginCVE-2017-15707Fix available6.2 Medium
- apache tomcat, canonical ubuntu linux, debian linux +55 more +57 moreUnrestricted Upload of File with Dangerous Type Apache TomcatCVE-2017-12617In KEVPublic exploitFix availableEPSS 100.0%8.1 High
- oracle retail order broker cloud serviceUnspecified vulnerability in the Oracle Retail Order Broker component in Oracle Retail...CVE-2016-36115.4 Medium
- oracle retail order brokerUnspecified vulnerability in the Oracle Retail Order Broker component in Oracle Retail...CVE-2016-35657.6 High
- oracle documaker, enterprise manager ops center, health sciences information manager +8 more +10 moreUnspecified vulnerability in the Enterprise Manager Ops Center component in Oracle Enterprise...CVE-2016-06358.8 High
- oracle retail order broker cloud serviceUnspecified vulnerability in the Oracle Retail Order Broker Cloud Service component in Oracle...CVE-2016-05007.5 High
- apache groovy, oracle health sciences clinical development center, retail order broker cloud service +3 more +5 moreImproper Neutralization of Special Elements in Output Used by a Downstream Component in Apache GroovyCVE-2015-3253Fix availableEPSS 41.0%9.8 Critical