Oracle Corporation Siebel UI Framework vulnerabilities

53 known vulnerabilities, 1 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Exploited Oracle Corporation Siebel UI Framework vulnerabilities

CVE-2021-44832 — Apache Log4j2 vulnerable to RCE via JDBC Appender when attacker controls configuration (CVSS 6.6)
CVE-2021-45105 — Apache Log4j2 does not always protect from infinite recursion in lookup evaluation (CVSS 5.9)
CVE-2021-32808 — Cross-site scripting in ckeditor via abuse of undo functionality (CVSS 5.4)
CVE-2021-2351 — (CVSS 5.1)
CVE-2021-25329 — Incomplete fix for CVE-2020-9484 (CVSS 7.0)
CVE-2021-25122 — Apache Tomcat h2c request mix-up (CVSS 7.5)
CVE-2021-26272 — (CVSS 6.5)
CVE-2021-26271 — (CVSS 6.5)
CVE-2021-1996 — (CVSS 3.5)
CVE-2020-24750 — (CVSS 8.1)
CVE-2020-24616 — (CVSS 8.1)
CVE-2020-14531 — (CVSS 5.9)
CVE-2020-13935 — (CVSS 7.5)
CVE-2020-13934 — (CVSS 7.5)
CVE-2020-11996 — (CVSS 7.5)
CVE-2020-9484 — (CVSS 7.0)
CVE-2020-11022 — jQuery has a potential XSS vulnerability (CVSS 6.1)
CVE-2020-9488 — (CVSS 3.7)
CVE-2020-2738 — (CVSS 4.3)
CVE-2020-1938 — Apache Tomcat Improper Privilege Management Vulnerability (CVSS 9.8) — exploited
CVE-2020-1935 — (CVSS 4.8)
CVE-2020-2564 — (CVSS 5.3)
CVE-2020-2560 — (CVSS 4.7)
CVE-2020-2559 — (CVSS 5.3)
CVE-2019-20330 — (CVSS 9.8)