Priority LOW 27
Vulnerability in the Oracle Banking Virtual Account Management product of Oracle Financial Services Applications (component: OBVAM Trn Journal Domain).
CVSS 3.1MEDIUM 6.0· Network · High privileges · User interaction · EPSS 0.00435 · Published 2023-04-18 · No fix listed
Priority LOW 27
Vulnerability in the Oracle Banking Virtual Account Management product of Oracle Financial Services Applications (component: OBVAM Trn Journal Domain).
CVSS 3.1MEDIUM 6.0· Network · High privileges · User interaction · EPSS 0.00435 · Published 2023-04-18 · No fix listed
Priority LOW 28
Vulnerability in the Oracle Banking Virtual Account Management product of Oracle Financial Services Applications (component: SMS Module).
CVSS 3.1MEDIUM 6.1· Network · High privileges · User interaction · EPSS 0.00582 · Published 2023-04-18 · No fix listed
Priority LOW 30
Vulnerability in the Oracle Banking Virtual Account Management product of Oracle Financial Services Applications (component: Routing Hub).
CVSS 3.1MEDIUM 6.1· Network · High privileges · User interaction · EPSS 0.00551 · Published 2023-04-18 · No fix listed CWE-284
Priority LOW 24
Vulnerability in the Oracle Banking Virtual Account Management product of Oracle Financial Services Applications (component: OBVAM Trn Journal Domain).
CVSS 3.1MEDIUM 5.3· Network · High privileges · User interaction · EPSS 0.00399 · Published 2023-04-18 · No fix listed
Priority LOW 24
Vulnerability in the Oracle Banking Virtual Account Management product of Oracle Financial Services Applications (component: OBVAM Internal Tfr Domain).
CVSS 3.1MEDIUM 5.3· Network · High privileges · User interaction · EPSS 0.00399 · Published 2023-04-18 · No fix listed
Priority CRITICAL 100KEV
In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is possible for a user to provide a specially crafted SpEL as a routing-expression that may result in rem…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.99938 · Published 2022-04-01 · Fixed in 3.2.3, 3.1.7 CWE-94
Priority MEDIUM 54
XStream is a Java library to serialize objects to XML and back again.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.13832 · Published 2021-03-22 · Partial fix · 1.4.16 CWE-400
Priority HIGH 73
XStream is a Java library to serialize objects to XML and back again.
CVSS 3.1HIGH 8.6· Network · No auth · No interaction · EPSS 0.46826 · Published 2021-03-22 · Partial fix · 1.4.16 CWE-502
Priority HIGH 65
XStream is a Java library to serialize objects to XML and back again.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.15234 · Published 2021-03-22 · Partial fix · 1.4.16 CWE-434
Priority CRITICAL 88
XStream is a Java library to serialize objects to XML and back again.
CVSS 3.1CRITICAL 9.1· Network · High privileges · No interaction · EPSS 0.82136 · Published 2021-03-22 · Partial fix · 1.4.16 CWE-434
Priority HIGH 76
XStream is a Java library to serialize objects to XML and back again.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.4999 · Published 2021-03-22 · Partial fix · 1.4.16 CWE-502
Priority HIGH 69
XStream is a Java library to serialize objects to XML and back again.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.46666 · Published 2021-03-22 · Partial fix · 1.4.16 CWE-502
Priority CRITICAL 88
XStream is a Java library to serialize objects to XML and back again.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.7598 · Published 2021-03-22 · Partial fix · 1.4.16 CWE-434
Priority HIGH 81
XStream is a Java library to serialize objects to XML and back again.
CVSS 3.1CRITICAL 9.9· Network · Low privileges · No interaction · EPSS 0.72324 · Published 2021-03-22 · Partial fix · 1.4.16 CWE-502
Priority CRITICAL 88
XStream is a Java library to serialize objects to XML and back again.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.76367 · Published 2021-03-22 · Partial fix · 1.4.16 CWE-434
Priority MEDIUM 64
XStream is a Java library to serialize objects to XML and back again.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.14301 · Published 2021-03-22 · Partial fix · 1.4.16 CWE-434
Priority LOW 31
A carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.03337 · Published 2021-03-19 · Partial fix · 2.0.23 CWE-789
Priority LOW 30
A carefully crafted PDF file can trigger an infinite loop while loading the file.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.02993 · Published 2021-03-19 · Partial fix · 2.0.23 CWE-834
Priority MEDIUM 57
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.commons.dbcp.cpdsadapter.DriverAdapterCPDS.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.17065 · Published 2021-01-06 · Partial fix · 2.9.10.8, 2.6.7.5 CWE-502
Priority MEDIUM 47
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.cpdsadapter.DriverAdapterCPDS.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.04092 · Published 2021-01-06 · Partial fix · 2.9.10.8, 2.6.7.5 CWE-502
Priority MEDIUM 47
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.cpdsadapter.DriverAdapterCPDS.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.04092 · Published 2021-01-06 · Partial fix · 2.9.10.8, 2.6.7.5 CWE-502
Priority MEDIUM 51
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.docx4j.org.apache.xalan.lib.sql.JNDIConnectionPool.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.04931 · Published 2021-01-06 · Partial fix · 2.9.10.8, 2.6.7.5 CWE-502
Priority MEDIUM 51
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.PerUserPoolDataSource.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.08356 · Published 2021-01-06 · Partial fix · 2.9.10.8 CWE-502
Priority MEDIUM 50
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.SharedPoolDataSource.
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.04237 · Published 2021-01-06 · Partial fix · 2.9.10.8 CWE-502
Load more
THREATIST.IORead the docs