Vulnerabilities

TI-2026-49562 CVE-2026-70868 · GHSA-4c38-w985-8624

Improper access control in Oracle Application Testing Suite

LOW 37

Vulnerability in Oracle Application Testing Suite.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00392 Published 2026-08-18 No fix listed CWE-284

TI-2026-49561 CVE-2026-70867 · GHSA-jvcx-494f-rp8p

Improper access control in Oracle Application Testing Suite

LOW 31

Vulnerability in Oracle Application Testing Suite.

CVSS 3.1HIGH 7.1 Adjacent network No auth No interaction EPSS 0.00334 Published 2026-08-18 No fix listed CWE-284

TI-2026-49560 CVE-2026-70866 · GHSA-g824-pjw8-crwm

Improper access control in Oracle Application Testing Suite

LOW 35

Vulnerability in Oracle Application Testing Suite.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00161 Published 2026-08-18 No fix listed CWE-284

TI-2026-49559 CVE-2026-70865 · GHSA-5f5r-4jwc-w5vg

Improper access control in Oracle Application Testing Suite

LOW 35

Vulnerability in Oracle Application Testing Suite.

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00334 Published 2026-08-18 No fix listed CWE-284

TI-2026-49558 CVE-2026-70864 · GHSA-qx42-4v8f-4c89

Improper access control in Oracle Application Testing Suite

LOW 33

Vulnerability in Oracle Application Testing Suite.

CVSS 3.1HIGH 7.6 Network Low privileges User interaction EPSS 0.0027 Published 2026-08-18 No fix listed CWE-284

TI-2026-49557 CVE-2026-70863 · GHSA-3vf4-83xc-ff9c

Improper access control in Oracle Application Testing Suite

MEDIUM 40

Vulnerability in Oracle Application Testing Suite.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00432 Published 2026-08-18 No fix listed CWE-284

TI-2026-49556 CVE-2026-70862 · GHSA-5mmc-hvgh-xf25

Improper access control in Oracle Application Testing Suite

MEDIUM 48

Vulnerability in Oracle Application Testing Suite.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00425 Published 2026-08-18 No fix listed CWE-284

TI-2026-34530 CVE-2026-46924 · GHSA-hvhr-5282-xm7v

Improper access control in Oracle Application Testing Suite

MEDIUM 49

Vulnerability in Oracle Application Testing Suite.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00508 Published 2026-07-21 No fix listed CWE-284

TI-2026-34482 CVE-2026-46876 · GHSA-4ff7-x6g6-mv57

Improper access control in Oracle Application Testing Suite

MEDIUM 49

Vulnerability in Oracle Application Testing Suite.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00508 Published 2026-07-21 No fix listed CWE-284

TI-2026-27438 CVE-2026-35290 · GHSA-hmr7-p7j6-rj7j

Improper access control in Oracle Application Testing Suite

MEDIUM 49

Vulnerability in Oracle Application Testing Suite.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00508 Published 2026-07-21 No fix listed CWE-284

TI-2026-27435 CVE-2026-35287 · GHSA-jpv7-65rj-h3qm

Improper access control in Oracle Application Testing Suite

LOW 39

Vulnerability in Oracle Application Testing Suite.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00414 Published 2026-07-21 No fix listed CWE-284

TI-2021-02021 CVE-2021-2351 · GHSA-gm3p-p24r-4wxq

Broken or risky cryptographic algorithm in Oracle WebLogic Server

MEDIUM 41

Vulnerability in the Advanced Networking Option component of Oracle Database Server.

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.02432 Published 2021-07-20 No fix listed CWE-327

TI-2021-10139 CVE-2021-29425 · GHSA-gwrp-pvrq-jmwv

Possible limited path traversal vulnerabily in Apache Commons IO

MEDIUM 48

In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like "//../foo", or "\\..\foo", the result would be the same value, thus possibly providing access to files…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.10549 Published 2021-04-13 Partial fix · 2.7 CWE-20

TI-2020-18499 CVE-2020-36179 · GHSA-9gph-22xh-8x98

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between…

MEDIUM 57

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.commons.dbcp.cpdsadapter.DriverAdapterCPDS.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.17065 Published 2021-01-06 Partial fix · 2.9.10.8, 2.6.7.5 CWE-502

TI-2020-18500 CVE-2020-36180 · GHSA-8c4j-34r4-xr8g

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between…

MEDIUM 47

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.cpdsadapter.DriverAdapterCPDS.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.04092 Published 2021-01-06 Partial fix · 2.9.10.8, 2.6.7.5 CWE-502

TI-2020-18502 CVE-2020-36182 · GHSA-89qr-369f-5m5x

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between…

MEDIUM 47

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.cpdsadapter.DriverAdapterCPDS.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.04092 Published 2021-01-06 Partial fix · 2.9.10.8, 2.6.7.5 CWE-502

TI-2020-18503 CVE-2020-36183 · GHSA-9m6f-7xcq-8vf8

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between…

MEDIUM 51

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.docx4j.org.apache.xalan.lib.sql.JNDIConnectionPool.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.04972 Published 2021-01-06 Partial fix · 2.9.10.8, 2.6.7.5 CWE-502

TI-2020-18504 CVE-2020-36184 · GHSA-m6x4-97wx-4q27

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between…

MEDIUM 51

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.PerUserPoolDataSource.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.08356 Published 2021-01-06 Partial fix · 2.9.10.8 CWE-502

TI-2020-18505 CVE-2020-36185 · GHSA-8w26-6f25-cm9x

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between…

MEDIUM 50

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.SharedPoolDataSource.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.04237 Published 2021-01-06 Partial fix · 2.9.10.8 CWE-502

TI-2020-18506 CVE-2020-36186 · GHSA-v585-23hc-c647

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between…

MEDIUM 50

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.PerUserPoolDataSource.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.04237 Published 2021-01-06 Partial fix · 2.9.10.8 CWE-502

TI-2020-18507 CVE-2020-36187 · GHSA-r695-7vr9-jgc2

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between…

MEDIUM 50

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.SharedPoolDataSource.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.04237 Published 2021-01-06 Partial fix · 2.9.10.8 CWE-502

TI-2020-18508 CVE-2020-36188 · GHSA-f9xh-2qgp-cq57

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between…

MEDIUM 55

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.JNDIConnectionSource.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.08787 Published 2021-01-06 Partial fix · 2.9.10.8, 2.6.7.5 CWE-502

TI-2020-18509 CVE-2020-36189 · GHSA-vfqx-33qm-g869

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between…

MEDIUM 50

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.DriverManagerConnectionSource.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.03987 Published 2021-01-06 Partial fix · 2.9.10.8, 2.6.7.5 CWE-502

TI-2020-18501 CVE-2020-36181 · GHSA-cvm9-fjm9-3572

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between…

MEDIUM 47

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.cpdsadapter.DriverAdapterCPDS.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.04092 Published 2021-01-06 Partial fix · 2.9.10.8, 2.6.7.5 CWE-502

TI-2020-18187 CVE-2020-35728 · GHSA-5r5r-6hpj-8gg9

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between…

MEDIUM 51

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.oracle.wls.shaded.org.apache.xalan.lib.sql.JNDIConnectionPool (aka embedded Xalan in org.…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.12504 Published 2020-12-27 Partial fix · 2.9.10.8 CWE-502

Vulnerabilities

Filters