Skip to contentOracle Retail Service Backbone vulnerabilities
- apache software foundation xerces, apache xerces-j, netapp active iq unified manager +27 more +29 moreInfinite loop within Apache XercesJ xml parserCVE-2022-23437Fix availableEPSS 11.6%6.5 Medium
- apache log4j, apache software foundation log4j2, debian linux +114 more +116 moreApache Log4j2 does not always protect from infinite recursion in lookup evaluationCVE-2021-45105Public exploitFix availableEPSS 100.0%5.9 Medium
- apache software foundation santuario, apache cxf, santuario xml security for java +16 more +18 moreBypass of the secureValidation propertyCVE-2021-40690Fix available7.5 High
- oracle advanced networking option, agile engineering data management, agile product lifecycle management +108 more +110 moreVulnerability in the Advanced Networking Option component of Oracle Database Server. Supported...CVE-2021-23518.3 High
- apache ant, oracle agile engineering data management, agile product lifecycle management +33 more +35 moreApache Ant ZIP, and ZIP based, archive denial of service vulerabilityCVE-2021-36374Fix available5.5 Medium
- apache ant, oracle agile product lifecycle management, banking trade finance +29 more +31 moreApache Ant TAR archive denial of service vulnerabilityCVE-2021-36373Fix available5.5 Medium
- apache commons io, debian linux, netapp active iq unified manager +57 more +59 morePossible limited path traversal vulnerabily in Apache Commons IOCVE-2021-29425Public exploitFix availableEPSS 10.5%4.8 Medium
- apache velocity engine, wss4j, debian linux +13 more +15 moreVelocity Sandbox BypassCVE-2020-13936Fix availableEPSS 22.7%8.8 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +54 more +56 moreUnsafe Deserialization in jackson-databindCVE-2020-36179Public exploitFix availableEPSS 17.1%8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +56 more +58 moreUnsafe Deserialization in jackson-databindCVE-2020-36180Public exploitFix available8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +56 more +58 moreUnsafe Deserialization in jackson-databindCVE-2020-36182Fix available8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +42 more +44 moreUnsafe Deserialization in jackson-databindCVE-2020-36183Fix available8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +56 more +58 moreUnsafe Deserialization in jackson-databindCVE-2020-36184Public exploitFix available8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +42 more +44 moreUnsafe Deserialization in jackson-databindCVE-2020-36185Fix available8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +42 more +44 moreUnsafe Deserialization in jackson-databindCVE-2020-36186Fix available8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +42 more +44 moreUnsafe Deserialization in jackson-databindCVE-2020-36187Fix available8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +42 more +44 moreUnsafe Deserialization in jackson-databindCVE-2020-36188Public exploitFix available8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +37 more +39 moreUnsafe Deserialization in jackson-databindCVE-2020-36189Fix available8.1 High
- fasterxml jackson-databind, debian linux, netapp service level manager +55 more +57 moreUnsafe Deserialization in jackson-databindCVE-2020-36181Fix available8.1 High
- fasterxml jackson-databind, debian linux, netapp service level manager +37 more +39 moreSerialization gadget exploit in jackson-databindCVE-2020-35728Public exploitFix availableEPSS 12.5%8.1 High
- apache iotdb, fasterxml jackson-databind, fedoraproject fedora +36 more +38 moreXML External Entity (XXE) Injection in Jackson DatabindCVE-2020-25649Fix availableEPSS 17.7%7.5 High
- apache ant, fedoraproject fedora, gradle +34 more +36 moreCode injection in Apache AntCVE-2020-11979Fix available7.5 High
- spring by vmware framework, vmware spring framework, netapp oncommand insight +36 more +38 moreRFD Protection Bypass via jsessionidCVE-2020-5421Public exploitFix availableEPSS 11.6%8.7 High
- apache ant, canonical ubuntu linux, fedoraproject fedora +47 more +49 moreSensitive Data Exposure in Apache AntCVE-2020-1945Fix available6.3 Medium
- fasterxml jackson-databind, debian linux, netapp steelstore cloud integrated storage +29 more +31 morejackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-11111Fix available8.8 High
- fasterxml jackson-databind, debian linux, netapp steelstore cloud integrated storage +29 more +31 morejackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-11112Fix available8.8 High
- fasterxml jackson-databind, debian linux, netapp steelstore cloud integrated storage +30 more +32 morejackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-11113Public exploitFix available8.8 High
- fasterxml jackson-databind, debian linux, netapp steelstore cloud integrated storage +29 more +31 morejackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-10968Fix available8.8 High
- fasterxml jackson-databind, debian linux, netapp steelstore cloud integrated storage +29 more +31 morejackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-10969Fix available8.8 High
- fasterxml jackson-databind, debian linux, netapp steelstore cloud integrated storage +29 more +31 morejackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-10672Fix available8.8 High
- fasterxml jackson-databind, debian linux, netapp steelstore cloud integrated storage +29 more +31 morejackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-10673Public exploitFix available8.8 High
- fasterxml jackson-databind, debian linux, netapp active iq unified manager +28 more +30 morejackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-9546Fix available9.8 Critical
- spring framework, vmware spring framework, oracle application testing suite +25 more +27 moreCSRF Attack via CORS Preflight Requests with Spring MVC or Spring WebFluxCVE-2020-5397Fix available5.3 Medium
- spring framework, vmware spring framework, netapp data availability services +31 more +33 moreRFD Attack via "Content-Disposition" Header Sourced from Request Input by Spring MVC or Spring WebFlux ApplicationCVE-2020-5398Public exploitFix availableEPSS 88.3%8.0 High
- apache log4j, bookkeeper, canonical ubuntu linux +14 more +16 moreDeserialization of Untrusted Data in Log4jCVE-2019-17571Public exploitFix availableEPSS 70.0%9.8 Critical
- hibernate hibernate-validator, netapp active iq unified manager, element +185 more +187 moreThe SafeHtml annotation in Hibernate-Validator does not properly guard against XSS attacksCVE-2019-10219Public exploitFix available6.5 Medium
- eclipse mojarra, oracle mojarra javaserver faces, application testing suite +20 more +22 moreCross-site Scripting in Eclipse MojarraCVE-2019-17091Fix available6.1 Medium
- dell bsafe crypto-j, rsa bsafe crypto-j, bsafe cert-j +16 more +18 moreRSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to an Information Exposure Through...CVE-2019-37406.5 Medium
- dell bsafe crypto-j, rsa bsafe crypto-j, bsafe cert-j +14 more +16 moreRSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to Information Exposure Through Timing...CVE-2019-37396.5 Medium
- dell bsafe crypto-j, rsa bsafe crypto-j, bsafe cert-j +14 more +16 moreRSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to an Improper Verification of...CVE-2019-37386.5 Medium
- pivotal spring framework, debian linux, oracle agile product lifecycle management +37 more +39 moreDoS Attack via Range RequestsCVE-2018-15756Fix available7.5 High
- pivotal spring framework, debian linux, oracle agile product lifecycle management +25 more +27 moreModerate severity vulnerability that affects org.springframework:spring-coreCVE-2018-11040Fix available7.5 High
- apache log4j, netapp oncommand api services, oncommand insight +76 more +78 moreDeserialization of Untrusted Data in Log4jCVE-2017-5645Public exploitFix availableEPSS 89.4%9.8 Critical
- oracle retail service backboneUnspecified vulnerability in the Oracle Retail Service Backbone component in Oracle Retail...CVE-2016-54757.6 High
- oracle retail service backboneUnspecified vulnerability in the Oracle Retail Service Backbone component in Oracle Retail...CVE-2016-54748.8 High
- apache groovy, oracle health sciences clinical development center, retail order broker cloud service +3 more +5 moreImproper Neutralization of Special Elements in Output Used by a Downstream Component in Apache GroovyCVE-2015-3253Fix availableEPSS 41.0%9.8 Critical