What’s Vulnerable › Products

Oracle Corporation Primavera Gateway vulnerabilities

59 known vulnerabilities, 1 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Check whether your Oracle Corporation Primavera Gateway version is affected

Exploited Oracle Corporation Primavera Gateway vulnerabilities

• CVE-2020-11023 — JQuery Cross-Site Scripting (XSS) Vulnerability

Latest Oracle Corporation Primavera Gateway vulnerabilities

• CVE-2023-21888 — (CVSS 5.4)
• CVE-2020-36518 — Deeply nested json in jackson-databind (CVSS 7.5)
• CVE-2022-23437 — Infinite loop within Apache XercesJ xml parser (CVSS 6.5)
• CVE-2021-44832 — Apache Log4j2 vulnerable to RCE via JDBC Appender when attacker controls configuration (CVSS 6.6)
• CVE-2021-45105 — Apache Log4j2 does not always protect from infinite recursion in lookup evaluation (CVSS 5.9)
• CVE-2021-41183 — XSS in `*Text` options of the Datepicker widget (CVSS 6.1)
• CVE-2021-2351 — (CVSS 5.1)
• CVE-2021-36374 — Apache Ant ZIP, and ZIP based, archive denial of service vulerability (CVSS 5.5)
• CVE-2021-36373 — Apache Ant TAR archive denial of service vulnerability (CVSS 5.5)
• CVE-2021-36090 — Apache Commons Compress 1.0 to 1.20 denial of service vulnerability (CVSS 7.5)
• CVE-2021-21409 — Possible request smuggling in HTTP/2 due missing validation of content-length (CVSS 5.9)
• CVE-2021-23337 — Command Injection (CVSS 7.2)
• CVE-2020-28500 — Regular Expression Denial of Service (ReDoS) (CVSS 5.3)
• CVE-2020-36183 — Unsafe Deserialization in jackson-databind (CVSS 8.1)
• CVE-2020-36182 — Unsafe Deserialization in jackson-databind (CVSS 8.1)
• CVE-2020-36180 — Unsafe Deserialization in jackson-databind (CVSS 8.1)
• CVE-2020-36179 — Unsafe Deserialization in jackson-databind (CVSS 8.1)
• CVE-2020-36189 — Unsafe Deserialization in jackson-databind (CVSS 8.1)
• CVE-2020-36188 — Unsafe Deserialization in jackson-databind (CVSS 8.1)
• CVE-2020-36187 — Unsafe Deserialization in jackson-databind (CVSS 8.1)
• CVE-2020-36186 — Unsafe Deserialization in jackson-databind (CVSS 8.1)
• CVE-2020-36185 — Unsafe Deserialization in jackson-databind (CVSS 8.1)
• CVE-2020-36184 — Unsafe Deserialization in jackson-databind (CVSS 8.1)
• CVE-2020-36181 — Unsafe Deserialization in jackson-databind (CVSS 8.1)
• CVE-2020-35728 — Serialization gadget exploit in jackson-databind (CVSS 8.1)