Oracle Retail Predictive Application Server vulnerabilities

• apache log4j, apache software foundation log4j2, debian linux +114 more +116 more Apache Log4j2 does not always protect from infinite recursion in lookup evaluation CVE-2021-45105 Public exploitFix available EPSS 100.0% 5.9 MediumDecember 18, 2021
• oracle advanced networking option, agile engineering data management, agile product lifecycle management +108 more +110 more Vulnerability in the Advanced Networking Option component of Oracle Database Server. Supported... CVE-2021-2351 8.3 HighJuly 20, 2021
• apache ant, oracle agile engineering data management, agile product lifecycle management +33 more +35 more Apache Ant ZIP, and ZIP based, archive denial of service vulerability CVE-2021-36374 Fix available 5.5 MediumJuly 14, 2021
• apache ant, oracle agile product lifecycle management, banking trade finance +29 more +31 more Apache Ant TAR archive denial of service vulnerability CVE-2021-36373 Fix available 5.5 MediumJuly 14, 2021
• vmware spring framework, netapp hci, management services for element software +29 more +31 more Improper Privilege Management in Spring Framework CVE-2021-22118 Fix available 7.8 HighMay 27, 2021
• apache ant, fedoraproject fedora, gradle +34 more +36 more Code injection in Apache Ant CVE-2020-11979 Fix available 7.5 HighOctober 1, 2020
• spring by vmware framework, vmware spring framework, netapp oncommand insight +36 more +38 more RFD Protection Bypass via jsessionid CVE-2020-5421 Public exploitFix available EPSS 11.6% 8.7 HighSeptember 19, 2020
• apache ant, canonical ubuntu linux, fedoraproject fedora +47 more +49 more Sensitive Data Exposure in Apache Ant CVE-2020-1945 Fix available 6.3 MediumMay 14, 2020
• apache log4j, debian linux, oracle communications application session controller +43 more +45 more Improper validation of certificate with host mismatch in Apache Log4j SMTP appender CVE-2020-9488 Public exploitFix available 3.7 LowApril 27, 2020
• spring framework, vmware spring framework, oracle application testing suite +25 more +27 more CSRF Attack via CORS Preflight Requests with Spring MVC or Spring WebFlux CVE-2020-5397 Fix available 5.3 MediumJanuary 17, 2020
• spring framework, vmware spring framework, netapp data availability services +31 more +33 more RFD Attack via "Content-Disposition" Header Sourced from Request Input by Spring MVC or Spring WebFlux Application CVE-2020-5398 Public exploitFix available EPSS 88.3% 8.0 HighJanuary 16, 2020
• hibernate hibernate-validator, netapp active iq unified manager, element +185 more +187 more The SafeHtml annotation in Hibernate-Validator does not properly guard against XSS attacks CVE-2019-10219 Public exploitFix available 6.5 MediumNovember 8, 2019
• apache poi, oracle application testing suite, banking enterprise originations +24 more +26 more Improper Restriction of XML External Entity Reference in Apache POI CVE-2019-12415 Fix available 5.5 MediumOctober 23, 2019
• dell bsafe crypto-j, rsa bsafe crypto-j, bsafe cert-j +16 more +18 more RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to an Information Exposure Through... CVE-2019-3740 6.5 MediumSeptember 18, 2019
• dell bsafe crypto-j, rsa bsafe crypto-j, bsafe cert-j +14 more +16 more RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to Information Exposure Through Timing... CVE-2019-3739 6.5 MediumSeptember 18, 2019
• dell bsafe crypto-j, rsa bsafe crypto-j, bsafe cert-j +14 more +16 more RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to an Improper Verification of... CVE-2019-3738 6.5 MediumSeptember 18, 2019
• apache commons beanutils, nifi, debian linux +57 more +59 more Insecure Deserialization in Apache Commons Beanutils CVE-2019-10086 Fix available EPSS 29.1% 7.3 HighAugust 20, 2019
• dell bsafe, oracle application testing suite, communications analytics +9 more +11 more RSA BSAFE Micro Edition Suite versions prior to 4.0.11 (in 4.0.x series) and versions prior to 4... CVE-2018-15769 7.5 HighNovember 16, 2018
• pivotal spring framework, debian linux, oracle agile product lifecycle management +37 more +39 more DoS Attack via Range Requests CVE-2018-15756 Fix available 7.5 HighOctober 18, 2018
• dell bsafe, bsafe micro edition suite, bsafe crypto-c +12 more +14 more RSA BSAFE Micro Edition Suite, versions prior to 4.0.11 (in 4.0.x) and prior to 4.1.6 (in 4.1.x),... CVE-2018-11058 7.5 HighSeptember 14, 2018
• dell bsafe, bsafe micro edition suite, oracle application testing suite +10 more +12 more RSA BSAFE Micro Edition Suite, versions prior to 4.0.11 (in 4.0.x) and prior to 4.1.6.1 (in 4.1.x... CVE-2018-11057 5.9 MediumAugust 31, 2018
• dell bsafe, bsafe crypto-c micro edition, bsafe micro edition suite +12 more +14 more RSA BSAFE Micro Edition Suite, prior to 4.1.6.1 (in 4.1.x), and RSA BSAFE Crypto-C Micro Edition... CVE-2018-11056 6.5 MediumAugust 31, 2018
• dell bsafe, bsafe micro edition suite, oracle application testing suite +10 more +12 more RSA BSAFE Micro Edition Suite, versions prior to 4.0.11 (in 4.0.x) and prior to 4.1.6.1 (in 4.1.x... CVE-2018-11055 4.4 MediumAugust 31, 2018
• dell bsafe, bsafe micro edition suite, oracle application testing suite +10 more +12 more RSA BSAFE Micro Edition Suite, version 4.1.6, contains an integer overflow vulnerability. A... CVE-2018-11054 7.5 HighAugust 31, 2018
• pivotal spring framework, debian linux, oracle agile product lifecycle management +25 more +27 more Moderate severity vulnerability that affects org.springframework:spring-core CVE-2018-11040 Fix available 7.5 HighJune 25, 2018
• pivotal spring framework, debian linux, oracle agile product lifecycle management +30 more +32 more Spring Framework Cross Site Tracing (XST) CVE-2018-11039 Fix available 5.9 MediumJune 25, 2018
• pivotal spring framework, oracle agile product lifecycle management, application testing suite +27 more +29 more Denial of Service in org.springframework:spring-core CVE-2018-1257 Fix available 6.5 MediumMay 11, 2018
• spring by pivotal framework, vmware spring framework, oracle application testing suite +17 more +19 more Spring Framework has Improperly Implemented Security Check for Standard CVE-2018-1275 Fix available EPSS 57.7% 9.8 CriticalApril 11, 2018
• spring by pivotal framework, vmware spring framework, oracle application testing suite +23 more +25 more Possible privilege escalation in org.springframework:spring-core CVE-2018-1272 Fix available 7.5 HighApril 6, 2018
• spring by pivotal framework, vmware spring framework, oracle application testing suite +26 more +28 more Path Traversal in org.springframework:spring-core CVE-2018-1271 Fix available EPSS 30.3% 5.9 MediumApril 6, 2018
• spring by pivotal framework, vmware spring framework, debian linux +26 more +28 more Spring Framework allows applications to expose STOMP over WebSocket endpoints CVE-2018-1270 Public exploitFix available EPSS 77.6% 9.8 CriticalApril 6, 2018
• apache log4j, netapp oncommand api services, oncommand insight +76 more +78 more Deserialization of Untrusted Data in Log4j CVE-2017-5645 Public exploitFix available EPSS 89.4% 9.8 CriticalApril 17, 2017
• openssl, debian linux, fujitsu m10-1 firmware +42 more +44 more A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in... CVE-2016-8610 Public exploitFix available EPSS 39.9% 7.5 HighOctober 24, 2016