Priority HIGH 72
Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups.
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.99999 · Published 2021-12-18 · Partial fix · 2.17.0, 2.12.3 +5 CWE-20
Priority MEDIUM 57
jQuery-UI is the official jQuery user interface library.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.40768 · Published 2021-10-26 · Partial fix · 1.13.0, 7.0.0 CWE-79
Priority MEDIUM 56
jQuery-UI is the official jQuery user interface library.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.39361 · Published 2021-10-26 · Partial fix · 1.13.0, 7.0.0 CWE-79
Priority MEDIUM 41
Vulnerability in the Advanced Networking Option component of Oracle Database Server.
CVSS 3.1HIGH 8.3· Network · No auth · User interaction · EPSS 0.02432 · Published 2021-07-20 · No fix listed CWE-327
Priority MEDIUM 40
jQuery-UI is the official jQuery user interface library.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.08533 · Published 2021-10-26 · Partial fix · 1.13.0, 7.0.0 CWE-79
Priority LOW 38
Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: WebConnect).
CVSS 3.0HIGH 8.2· Network · No auth · User interaction · EPSS 0.01376 · Published 2017-10-19 · No fix listed
Priority LOW 35
Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: Profile).
CVSS 3.0HIGH 7.6· Network · Low privileges · User interaction · EPSS 0.01023 · Published 2018-04-19 · No fix listed
Priority LOW 33
Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: Leisure).
CVSS 3.0MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01373 · Published 2017-10-19 · No fix listed CWE-200
Priority LOW 33
Vulnerability in the Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: WebConnect).
CVSS 3.0MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01874 · Published 2017-08-08 · No fix listed
Priority LOW 32
Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: XML Interface).
CVSS 3.0MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01348 · Published 2019-07-23 · No fix listed
Priority LOW 32
Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: WebConnect).
CVSS 3.0MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01408 · Published 2017-10-19 · No fix listed CWE-200
Priority LOW 31
A vulnerability was found in Hibernate-Validator.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.02157 · Published 2019-11-08 · Partial fix · 6.0.18.Final, 6.1.0.Final +1 CWE-79
Priority LOW 31
Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: Leisure).
CVSS 3.0MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01246 · Published 2017-10-19 · No fix listed CWE-200
Priority LOW 30
Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: Leisure).
CVSS 3.0MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.0091 · Published 2017-10-19 · No fix listed
Priority LOW 30
Vulnerability in the Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: WebConnect).
CVSS 3.0MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.0144 · Published 2017-08-08 · No fix listed
Priority LOW 29
Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: WebConnect).
CVSS 3.0MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.01494 · Published 2017-10-19 · No fix listed CWE-200
Priority LOW 27
Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: Leisure).
CVSS 3.0MEDIUM 5.4· Network · Low privileges · No interaction · EPSS 0.01168 · Published 2017-10-19 · No fix listed CWE-200
Priority LOW 26
Vulnerability in the Oracle Hospitality Suite8 product of Oracle Hospitality Applications (component: WebConnect).
CVSS 3.1MEDIUM 5.4· Network · No auth · User interaction · EPSS 0.00984 · Published 2020-10-21 · No fix listed
Priority LOW 26
Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: PMS).
CVSS 3.0MEDIUM 5.7· Local · Low privileges · User interaction · EPSS 0.00326 · Published 2017-10-19 · No fix listed
Priority LOW 25
Vulnerability in the Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: Leisure).
CVSS 3.0MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00428 · Published 2017-08-08 · No fix listed
Priority LOW 24
Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: WebConnect).
CVSS 3.0MEDIUM 4.7· Network · No auth · User interaction · EPSS 0.01173 · Published 2017-10-19 · No fix listed CWE-200
Priority LOW 23
Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: PMS).
CVSS 3.0MEDIUM 5.1· Local · No auth · No interaction · EPSS 0.00392 · Published 2017-10-19 · No fix listed
Priority LOW 19
Vulnerability in the Oracle Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: WebConnect).
CVSS 3.0MEDIUM 4.0· Local · No auth · No interaction · EPSS 0.00411 · Published 2017-10-19 · No fix listed CWE-200
Priority LOW 19
Vulnerability in the Hospitality Suite8 component of Oracle Hospitality Applications (subcomponent: WebConnect).
CVSS 3.0MEDIUM 4.0· Local · No auth · No interaction · EPSS 0.00456 · Published 2017-08-08 · No fix listed
THREATIST.IORead the docs