What’s Vulnerable › Products

Oracle Middleware Common Libraries And Tools vulnerabilities

9 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Check whether your Oracle Middleware Common Libraries And Tools version is affected

Latest Oracle Middleware Common Libraries And Tools vulnerabilities

• CVE-2022-23307 — A deserialization flaw in the Chainsaw component of Log4j 1 can lead to malicious code execution. (CVSS 8.8)
• CVE-2022-23305 — SQL injection in JDBC Appender in Apache Log4j V1 (CVSS 9.8)
• CVE-2022-23302 — Deserialization of untrusted data in JMSSink in Apache Log4j 1.x (CVSS 8.8)
• CVE-2021-42575 — (CVSS 9.8)
• CVE-2021-42340 — DoS via memory leak with WebSocket connections (CVSS 7.5)
• CVE-2021-37714 — Crafted input may cause the jsoup HTML and XML parser to get stuck, timeout, or throw unchecked exceptions (CVSS 7.5)
• CVE-2021-35043 — (CVSS 6.1)
• CVE-2021-30129 — DoS/OOM leak vulnerability in Apache Mina SSHD Server (CVSS 6.5)
• CVE-2021-23926 — XMLBeans XML Entity Expansion (CVSS 9.1)