What’s Vulnerable › Products
Oracle Banking Enterprise Default Management vulnerabilities
23 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.
Check whether your Oracle Banking Enterprise Default Management version is affected
Latest Oracle Banking Enterprise Default Management vulnerabilities
- CVE-2021-45105 — Apache Log4j2 does not always protect from infinite recursion in lookup evaluation (CVSS 5.9)
- CVE-2021-2351 — (CVSS 5.1)
- CVE-2021-35043 — (CVSS 6.1)
- CVE-2021-36090 — Apache Commons Compress 1.0 to 1.20 denial of service vulnerability (CVSS 7.5)
- CVE-2021-35517 — Apache Commons Compress 1.1 to 1.20 denial of service vulnerability (CVSS 7.5)
- CVE-2021-35516 — Apache Commons Compress 1.6 to 1.20 denial of service vulnerability (CVSS 7.5)
- CVE-2021-35515 — Apache Commons Compress 1.6 to 1.20 denial of service vulnerability (CVSS 7.5)
- CVE-2020-6950 — (CVSS 6.5)
- CVE-2021-29425 — Possible limited path traversal vulnerabily in Apache Commons IO (CVSS 4.8)
- CVE-2021-21351 — XStream is vulnerable to an Arbitrary Code Execution attack (CVSS 9.1)
- CVE-2021-21350 — XStream is vulnerable to an Arbitrary Code Execution attack (CVSS 9.8)
- CVE-2021-21349 — A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host (CVSS 8.6)
- CVE-2021-21348 — XStream is vulnerable to an attack using Regular Expression for a Denial of Service (ReDos) (CVSS 7.5)
- CVE-2021-21347 — XStream is vulnerable to an Arbitrary Code Execution attack (CVSS 9.8)
- CVE-2021-21346 — XStream is vulnerable to an Arbitrary Code Execution attack (CVSS 9.8)
- CVE-2021-21345 — XStream is vulnerable to a Remote Command Execution attack (CVSS 9.9)
- CVE-2021-21344 — XStream is vulnerable to an Arbitrary Code Execution attack (CVSS 9.8)
- CVE-2021-21343 — XStream is vulnerable to an Arbitrary File Deletion on the local host when unmarshalling as long as the executing process has sufficient rights (CVSS 7.5)
- CVE-2021-21342 — A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host (CVSS 9.1)
- CVE-2021-21341 — XStream can cause a Denial of Service (CVSS 7.5)
- CVE-2020-13936 — Velocity Sandbox Bypass (CVSS 8.8)
- CVE-2020-9281 — (CVSS 6.1)
- CVE-2019-10219 — (CVSS 6.1)