Skip to contentOracle Webcenter Sites vulnerabilities
- ckeditor, oracle agile product lifecycle management, application express +4 more +6 moreCKEditor 4 ReDoS VulnerabilityCVE-2021-26271Fix available6.5 Medium
- oracle webcenter sitesVulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component:...CVE-2020-146136.1 Medium
- jquery, debian linux, drupal +49 more +51 morePotential XSS vulnerability in jQueryCVE-2020-11023In KEVPublic exploitFix availableEPSS 84.9%6.9 Medium
- oracle webcenter sitesVulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component:...CVE-2020-27397.4 High
- dojo, debian linux, oracle communications application session controller +7 more +9 morePrototype pollution in dojoCVE-2020-5258Fix available7.7 High
- vt cryptacular, oracle communications services gatekeeper, webcenter sites +1 more +3 moreDenial of Service in CryptacularCVE-2020-7226Fix available7.5 High
- oracle webcenter sitesVulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component:...CVE-2020-25396.1 Medium
- oracle webcenter sitesVulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component:...CVE-2020-25387.1 High
- apache poi, oracle application testing suite, banking enterprise originations +24 more +26 moreImproper Restriction of XML External Entity Reference in Apache POICVE-2019-12415Fix available5.5 Medium
- fasterxml jackson-databind, debian linux, netapp oncommand workflow automation +19 more +21 morejackson-databind polymorphic typing issueCVE-2019-17531Fix available9.8 Critical
- fasterxml jackson-databind, debian linux, fedoraproject fedora +23 more +25 morejackson-databind polymorphic typing issueCVE-2019-16943Fix available9.8 Critical
- fasterxml jackson-databind, debian linux, fedoraproject fedora +25 more +27 morePolymorphic Typing in FasterXML jackson-databindCVE-2019-16942Fix available9.8 Critical
- softwareag quartz, apache tomee, atlassian jira service management +28 more +30 moreXML external entity injection in Terracotta Quartz SchedulerCVE-2019-13990Public exploitFix availableEPSS 16.6%9.8 Critical
- oracle webcenter sitesVulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent:...CVE-2019-25794.3 Medium
- oracle webcenter sitesVulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent:...CVE-2019-2578EPSS 71.2%8.6 High
- mchange c3p0, fedoraproject fedora, oracle communications ip service activator +8 more +10 moreBillion laughs attack in c3p0CVE-2019-5427Public exploitFix available7.5 High
- backdropcms backdrop, drupal, jquery +102 more +104 moreXSS in jQuery as used in Drupal, Backdrop CMS, and other productsCVE-2019-11358Public exploitFix availableEPSS 86.8%6.1 Medium
- apache pdfbox, james, fedoraproject fedora +11 more +13 moreVulnerability that affects org.apache.pdfbox:pdfboxCVE-2019-0228Fix available9.8 Critical
- pivotal spring framework, debian linux, oracle agile product lifecycle management +37 more +39 moreDoS Attack via Range RequestsCVE-2018-15756Fix available7.5 High
- oracle webcenter sitesVulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent:...CVE-2018-32386.9 Medium
- oracle webcenter sitesVulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent:...CVE-2018-2791Public exploitEPSS 38.2%8.2 High
- jquery, oracle agile product lifecycle management for process, banking platform +44 more +46 moreCross-Site Scripting (XSS) in jqueryCVE-2015-9251Public exploitFix availableEPSS 29.7%6.1 Medium
- oracle webcenter sitesVulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent:...CVE-2018-25844.3 Medium
- oracle webcenter sitesVulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent:...CVE-2017-10033Public exploit4.0 Medium
- apache tomcat, canonical ubuntu linux, debian linux +55 more +57 moreUnrestricted Upload of File with Dangerous Type Apache TomcatCVE-2017-12617In KEVPublic exploitFix availableEPSS 100.0%8.1 High
- oracle webcenter sitesVulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent:...CVE-2017-36033.1 Low
- oracle webcenter sitesVulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent:...CVE-2017-36028.1 High
- oracle webcenter sitesVulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent:...CVE-2017-35983.1 Low
- oracle webcenter sitesVulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent:...CVE-2017-35975.7 Medium
- oracle webcenter sitesVulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent:...CVE-2017-35967.6 High
- oracle webcenter sitesVulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent:...CVE-2017-35957.1 High
- oracle webcenter sitesVulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent:...CVE-2017-35945.9 Medium
- oracle webcenter sitesVulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent:...CVE-2017-35937.1 High
- oracle webcenter sitesVulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent:...CVE-2017-35917.1 High
- oracle webcenter sitesVulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent:...CVE-2017-35548.1 High
- oracle webcenter sitesVulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent:...CVE-2017-35458.2 High
- oracle webcenter sitesVulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent:...CVE-2017-35438.6 High
- oracle webcenter sitesVulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent:...CVE-2017-35428.6 High
- oracle webcenter sitesVulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent:...CVE-2017-35418.2 High
- oracle webcenter sitesVulnerability in the Oracle WebCenter Sites component of Oracle Fusion Middleware (subcomponent:...CVE-2017-35408.6 High
- oracle webcenter sitesUnspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 12...CVE-2016-55114.3 Medium
- oracle webcenter sitesUnspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 11...CVE-2016-35026.5 Medium
- oracle webcenter sitesUnspecified vulnerability in the Oracle WebCenter Sites component in Oracle Fusion Middleware 11...CVE-2016-34878.1 High
- apache groovy, oracle health sciences clinical development center, retail order broker cloud service +3 more +5 moreImproper Neutralization of Special Elements in Output Used by a Downstream Component in Apache GroovyCVE-2015-3253Fix availableEPSS 41.0%9.8 Critical
- apache xalan-java, oracle webcenter sites +1 moreImproper Authorization in Apache Xalan-JavaCVE-2014-0107Fix availableEPSS 14.1%7.5 High
- apache struts, oracle flexcube private banking, mysql enterprise monitor +1 more +3 moreCode injection in Apache StrutsCVE-2013-4316Fix available10.0 High