Oracle Corporation Oracle Business Process Management Suite vulnerabilities

37 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 7 published in the last 12 months.

Latest Oracle Corporation Oracle Business Process Management Suite vulnerabilities

CVE-2026-91220 — (CVSS 9.8)
CVE-2026-91358 — (CVSS 8.2)
CVE-2026-91243 — (CVSS 9.6)
CVE-2026-91222 — (CVSS 9.9)
CVE-2026-91213 — (CVSS 8.8)
CVE-2026-60542 — (CVSS 9.9)
CVE-2026-34284 — (CVSS 6.1)
CVE-2022-23307 — A deserialization flaw in the Chainsaw component of Log4j 1 can lead to malicious code execution. (CVSS 8.8)
CVE-2022-23305 — SQL injection in JDBC Appender in Apache Log4j V1 (CVSS 9.8)
CVE-2022-23302 — Deserialization of untrusted data in JMSSink in Apache Log4j 1.x (CVSS 8.8)
CVE-2021-4104 — Deserialization of untrusted data in JMSAppender in Apache Log4j 1.2 (CVSS 7.5)
CVE-2021-37714 — Crafted input may cause the jsoup HTML and XML parser to get stuck, timeout, or throw unchecked exceptions (CVSS 7.5)
CVE-2021-36090 — Apache Commons Compress 1.0 to 1.20 denial of service vulnerability (CVSS 7.5)
CVE-2021-35517 — Apache Commons Compress 1.1 to 1.20 denial of service vulnerability (CVSS 7.5)
CVE-2021-35516 — Apache Commons Compress 1.6 to 1.20 denial of service vulnerability (CVSS 7.5)
CVE-2021-35515 — Apache Commons Compress 1.6 to 1.20 denial of service vulnerability (CVSS 7.5)
CVE-2020-17521 — (CVSS 5.5)
CVE-2020-1945 — (CVSS 6.3)
CVE-2020-10683 — (CVSS 9.8)
CVE-2020-1951 — (CVSS 5.5)
CVE-2020-1950 — (CVSS 5.5)
CVE-2019-10219 — (CVSS 6.1)
CVE-2019-2904 — (CVSS 9.8)
CVE-2019-17359 — (CVSS 7.5)
CVE-2019-2706 — (CVSS 8.2)