Vulnerabilities

TI-2026-43750 CVE-2026-61106 · GHSA-29xj-fcrw-cwq5

Improper access control in Oracle GoldenGate

LOW 37

Vulnerability in Oracle GoldenGate (component: Config Service Executable).

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00392 Published 2026-07-21 No fix listed CWE-284

TI-2026-43728 CVE-2026-61084 · GHSA-2vg3-xrfw-fx8c

Improper access control in Oracle GoldenGate

LOW 19

Vulnerability in Oracle GoldenGate (component: Libraries).

CVSS 3.1MEDIUM 4.4 Local Low privileges No interaction EPSS 0.00139 Published 2026-07-21 No fix listed CWE-284

TI-2026-43723 CVE-2026-61079 · GHSA-v4jj-q5qf-cc8v

Improper input validation in Oracle GoldenGate

LOW 25

Vulnerability in Oracle GoldenGate (component: Libraries).

CVSS 3.1MEDIUM 5.8 Local High privileges User interaction EPSS 0.00109 Published 2026-07-21 No fix listed CWE-20

TI-2026-43235 CVE-2026-60570 · GHSA-pg38-rgfx-cf4f

Improper access control in Oracle GoldenGate

LOW 35

Vulnerability in Oracle GoldenGate (component: Libraries).

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00161 Published 2026-07-21 No fix listed CWE-284

TI-2026-43099 CVE-2026-60400 · GHSA-9q5v-q9fp-gvf4

Improper access control in Oracle GoldenGate

MEDIUM 40

Vulnerability in Oracle GoldenGate (component: Admin Server Executable).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00432 Published 2026-07-21 No fix listed CWE-284

TI-2026-43098 CVE-2026-60399 · GHSA-j796-5j63-6g43

Uncontrolled resource consumption in Oracle GoldenGate

LOW 29

Vulnerability in Oracle GoldenGate (component: Receiver Service Executable).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00422 Published 2026-07-21 No fix listed CWE-400

TI-2026-43097 CVE-2026-60398 · GHSA-2mxq-qcvh-7g7w

Missing authentication in Oracle GoldenGate

MEDIUM 40

Vulnerability in Oracle GoldenGate (component: Oracle GoldenGate Microservices).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00432 Published 2026-07-21 No fix listed CWE-306

TI-2026-43096 CVE-2026-60397 · GHSA-c7pw-qv7h-fxmj

Vulnerability in Oracle GoldenGate (component: Admin Server Executable).

LOW 20

Vulnerability in Oracle GoldenGate (component: Admin Server Executable).

CVSS 3.1MEDIUM 4.3 Adjacent network No auth No interaction EPSS 0.00328 Published 2026-07-21 No fix listed CWE-404

TI-2026-43095 CVE-2026-60396 · GHSA-qxx2-5vrp-rq3m

Missing authentication in Oracle GoldenGate

LOW 34

Vulnerability in Oracle GoldenGate (component: Distribution Server executable).

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00486 Published 2026-07-21 No fix listed CWE-306

TI-2026-43094 CVE-2026-60395 · GHSA-8hpg-8fx4-246r

Information disclosure in Oracle GoldenGate

LOW 20

Vulnerability in Oracle GoldenGate (component: Admin Server Executable).

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00303 Published 2026-07-21 No fix listed CWE-200

TI-2026-43093 CVE-2026-60394 · GHSA-5r44-q38j-rqh9

Information disclosure in Oracle GoldenGate

LOW 30

Vulnerability in Oracle GoldenGate (component: Admin Server Executable).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00337 Published 2026-07-21 No fix listed CWE-200

TI-2026-42858 CVE-2026-60157 · GHSA-7prq-c88h-2c2r

Improper access control in Oracle GoldenGate

MEDIUM 40

Vulnerability in Oracle GoldenGate (component: Service Manager).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00432 Published 2026-07-21 No fix listed CWE-284

TI-2026-26562 CVE-2026-34273 · GHSA-jvhw-jc32-v84v

Information disclosure in Oracle GoldenGate

LOW 30

Vulnerability in Oracle GoldenGate (component: Libraries).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0025 Published 2026-04-21 No fix listed CWE-200

TI-2022-05931 CVE-2022-21551 · GHSA-qjrj-cjf4-5r9h

Vulnerability in Oracle GoldenGate (component: Oracle GoldenGate).

LOW 34

Vulnerability in Oracle GoldenGate (component: Oracle GoldenGate).

CVSS 3.1MEDIUM 6.8 Network High privileges User interaction EPSS 0.00816 Published 2022-07-19 No fix listed

TI-2022-05827 CVE-2022-21442 · GHSA-r3c8-pgx2-7735

Vulnerability in Oracle GoldenGate (component: OGG Core Library).

MEDIUM 40

Vulnerability in Oracle GoldenGate (component: OGG Core Library).

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.0032 Published 2022-04-19 Fixed in 23.1

TI-2021-02983 CVE-2021-4104 · GHSA-fp5r-v3w9-4333

Deserialization of untrusted data in JMSAppender in Apache Log4j 1.2

HIGH 73

JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration.

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.80599 Published 2021-12-14 Partial fix CWE-502

TI-2021-02682 CVE-2021-3749 · GHSA-cph5-m8f7-6c5x

Inefficient Regular Expression Complexity in axios/axios

MEDIUM 44

axios is vulnerable to Inefficient Regular Expression Complexity

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.08515 Published 2021-08-31 Partial fix · 0.21.2 CWE-1333

TI-2021-02021 CVE-2021-2351 · GHSA-gm3p-p24r-4wxq

Broken or risky cryptographic algorithm in Oracle WebLogic Server

MEDIUM 41

Vulnerability in the Advanced Networking Option component of Oracle Database Server.

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.02432 Published 2021-07-20 No fix listed CWE-327

TI-2021-05876 CVE-2021-23017 · GHSA-83p9-mcpm-374v

A security issue in nginx resolver was identified, which might allow an attacker who is…

HIGH 66

A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other…

CVSS 3.1HIGH 7.7 Network No auth No interaction EPSS 0.53461 Published 2021-06-01 Partial fix CWE-193

TI-2020-11552 CVE-2020-14705 · GHSA-qx8g-5v5g-5jwf

Vulnerability in the Oracle GoldenGate product of Oracle GoldenGate (component: Process…

MEDIUM 47

Vulnerability in the Oracle GoldenGate product of Oracle GoldenGate (component: Process Management).

CVSS 3.1CRITICAL 9.6 Adjacent network No auth No interaction EPSS 0.01864 Published 2020-07-15 Fixed in 19.1.0.0.0

TI-2019-11066 CVE-2019-14862 · GHSA-vcjj-xf2r-mwvc

Cross-site scripting in Red Hat knockout

LOW 31

There is a vulnerability in knockout before version 3.5.0-beta, where after escaping the context of the web application, the web application delivers data to its users along with other trusted dynamic content, without va…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.02053 Published 2020-01-02 Fixed in 3.5.0-beta, 3.5.0 CWE-79

TI-2018-01214 CVE-2018-1311 · GHSA-7rpp-hwhj-9hv8

Use after free in Apache Xerces-C

MEDIUM 47

The Apache Xerces-C 3.0.0 to 3.2.3 XML parser contains a use-after-free error triggered during the scanning of external DTDs.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.09503 Published 2019-12-18 Partial fix CWE-416

TI-2019-07539 CVE-2019-10219 · GHSA-m8p2-495h-ccmh

Cross-site scripting in hibernate-validator

LOW 31

A vulnerability was found in Hibernate-Validator.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.02157 Published 2019-11-08 Partial fix · 6.0.18.Final, 6.1.0.Final +1 CWE-79

TI-2019-02759 CVE-2019-3740 · GHSA-7mmw-x6rm-hmr8

Cryptographic flaw in Dell RSA BSAFE Crypto-J

LOW 35

RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to an Information Exposure Through Timing Discrepancy vulnerabilities during DSA key generation.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.03889 Published 2019-09-18 Fixed in 6.2.5 CWE-310

TI-2019-02758 CVE-2019-3739 · GHSA-p9w8-99j3-73rv

Cryptographic flaw in Dell RSA BSAFE Crypto-J

LOW 34

RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to Information Exposure Through Timing Discrepancy vulnerabilities during ECDSA key generation.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.0263 Published 2019-09-18 Fixed in 6.2.5 CWE-310

Vulnerabilities

Filters