Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

24 records

Vendor: Oracle Component: Banking Corporate Lending Clear all filters
TI-2019-08427 CVE-2019-11269 · GHSA-mmf6-6597-3v6m

Open Redirector in spring-security-oauth2

Priority LOW 36

Spring Security OAuth versions 2.3 prior to 2.3.6, 2.2 prior to 2.2.5, 2.1 prior to 2.1.5, and 2.0 prior to 2.0.18, as well as older unsupported versions could be susceptible to an open redirector attack that can leak an…

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.08906 Published 2019-06-12 Fixed in v2.2.5.RELEASE, v2.1.5.RELEASE +6 CWE-601
TI-2019-02792 CVE-2019-3778 · GHSA-77rv-6vfw-x4gc

Open Redirect in spring-security-oauth2

Priority MEDIUM 46

Spring Security OAuth, versions 2.3 prior to 2.3.5, and 2.2 prior to 2.2.4, and 2.1 prior to 2.1.4, and 2.0 prior to 2.0.17, and older unsupported versions could be susceptible to an open redirector attack that can leak…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.16596 Published 2019-03-07 Fixed in 2.3.5.RELEASE, 2.0.17.RELEASE +2 CWE-601