Vulnerabilities

TI-2026-34587 CVE-2026-46981 · GHSA-622f-77jv-2jv5

Improper access control in Oracle Utilities Network Management System

LOW 37

Vulnerability in the Oracle Utilities Network Management System product of Oracle Utilities Applications (component: Mobile).

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00272 Published 2026-07-21 No fix listed CWE-284

TI-2026-34586 CVE-2026-46980 · GHSA-jpm9-x23f-7r3r

Improper access control in Oracle Utilities Network Management System

LOW 20

Vulnerability in the Oracle Utilities Network Management System product of Oracle Utilities Applications (component: Mobile).

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00272 Published 2026-07-21 No fix listed CWE-284

TI-2026-34554 CVE-2026-46948 · GHSA-qq2j-mj4g-j78r

Improper access control in Oracle Utilities Network Management System

LOW 21

Vulnerability in the Oracle Utilities Network Management System product of Oracle Utilities Applications (component: Security).

CVSS 3.1MEDIUM 4.6 Network Low privileges User interaction EPSS 0.00208 Published 2026-07-21 No fix listed CWE-284

TI-2018-02533 CVE-2018-3246 · GHSA-hf42-4hj4-cx44

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware…

MEDIUM 44

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Web Services).

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.02946 Published 2018-10-17 No fix listed

TI-2018-15967 CVE-2018-1000613 · GHSA-4446-656p-f54g

Legion of the Bouncy Castle Legion of the Bouncy Castle Java Cryptography APIs 1.58 up to…

MEDIUM 56

Legion of the Bouncy Castle Legion of the Bouncy Castle Java Cryptography APIs 1.58 up to but not including 1.60 contains a CWE-470: Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vuln…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04767 Published 2018-07-09 Partial fix · 1.60 CWE-470

TI-2018-07828 CVE-2018-11040 · GHSA-f26x-pr96-vw86

Spring Framework, versions 5.0.x prior to 5.0.7 and 4.3.x prior to 4.3.18 and older…

MEDIUM 45

Spring Framework, versions 5.0.x prior to 5.0.7 and 4.3.x prior to 4.3.18 and older unsupported versions, allows web applications to enable cross-domain requests via JSONP (JSON with Padding) through AbstractJsonpRespons…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0318 Published 2018-06-25 Partial fix · 5.0.7, 4.3.18 +2 CWE-829

TI-2018-07827 CVE-2018-11039 · GHSA-9gcm-f4x3-8jpw

Spring Framework (versions 5.0.x prior to 5.0.7, versions 4.3.x prior to 4.3.18, and…

LOW 38

Spring Framework (versions 5.0.x prior to 5.0.7, versions 4.3.x prior to 4.3.18, and older unsupported versions) allow web applications to change the HTTP request method to any HTTP method (including TRACE) using the Hid…

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.02769 Published 2018-06-25 Partial fix · 5.0.7, 4.3.18

TI-2018-01162 CVE-2018-1257 · GHSA-rcpf-vj53-7h2m

Spring Framework, versions 5.0.x prior to 5.0.6, versions 4.3.x prior to 4.3.17, and…

MEDIUM 40

Spring Framework, versions 5.0.x prior to 5.0.6, versions 4.3.x prior to 4.3.17, and older unsupported versions allows applications to expose STOMP over WebSocket endpoints with a simple, in-memory STOMP broker through t…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.03017 Published 2018-05-11 Partial fix · 5.0.6, 4.3.17

Vulnerabilities

Filters