ByteOS

Matching Score-10

Assigner-Oracle

CVSS Score-9.8||CRITICAL

EPSS-0.50% / 65.69%

||

7 Day CHG~0.00%

Published-17 Oct, 2023 | 21:02

Updated-06 Mar, 2025 | 16:15

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

CWE ID-CWE-306

Missing Authentication for Critical Function

CVE-2023-22072

Matching Score-10

Assigner-Oracle

Matching Score-10

Assigner-Oracle

CVSS Score-9.8||CRITICAL

EPSS-0.66% / 70.91%

||

7 Day CHG~0.00%

Published-17 Oct, 2023 | 21:02

Updated-06 Mar, 2025 | 16:15

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). The supported version that is affected is 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

CWE ID-CWE-306

Missing Authentication for Critical Function

CVE-2020-9480

Matching Score-10

Matching Score-10

CVSS Score-9.8||CRITICAL

EPSS-93.18% / 99.79%

||

7 Day CHG-0.12%

Published-23 Jun, 2020 | 21:50

Updated-04 Aug, 2024 | 10:26

In Apache Spark 2.4.5 and earlier, a standalone resource manager's master may be configured to require authentication (spark.authenticate) via a shared secret. When enabled, however, a specially-crafted RPC to the master can succeed in starting an application's resources on the Spark cluster, even without the shared key. This can be leveraged to execute shell commands on the host machine. This does not affect Spark clusters using other resource managers (YARN, Mesos, etc).

Vendor-The Apache Software Foundation Oracle Corporation

Product-spark business_intelligence Apache Spark

CWE ID-CWE-306

Missing Authentication for Critical Function

CVE-2025-62481

Matching Score-10

Assigner-Oracle

Matching Score-10

Assigner-Oracle

CVSS Score-9.8||CRITICAL

EPSS-0.09% / 26.41%

||

7 Day CHG~0.00%

Published-21 Oct, 2025 | 20:03

Updated-26 Feb, 2026 | 16:57

Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks of this vulnerability can result in takeover of Oracle Marketing. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Product-marketing Oracle Marketing

CWE ID-CWE-306

Missing Authentication for Critical Function

CVE-2025-61757

Matching Score-10

Assigner-Oracle

Matching Score-10

Assigner-Oracle

CVSS Score-9.8||CRITICAL

EPSS-84.21% / 99.30%

||

7 Day CHG+1.39%

Published-21 Oct, 2025 | 20:03

Updated-26 Feb, 2026 | 16:57

Known KEV||Action Due Date - 2025-12-12||Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: REST WebServices). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Identity Manager. Successful attacks of this vulnerability can result in takeover of Identity Manager. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Product-identity_manager Identity Manager Fusion Middleware

CWE ID-CWE-306

Missing Authentication for Critical Function

CVE-2025-53072

Matching Score-10

Assigner-Oracle

Matching Score-10

Assigner-Oracle

CVSS Score-9.8||CRITICAL

EPSS-0.12% / 31.67%

||

7 Day CHG~0.00%

Published-21 Oct, 2025 | 20:03

Updated-26 Feb, 2026 | 16:57

Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks of this vulnerability can result in takeover of Oracle Marketing. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Product-marketing Oracle Marketing

CWE ID-CWE-306

Missing Authentication for Critical Function

CVE-2024-21014

Matching Score-10

Assigner-Oracle

Matching Score-10

Assigner-Oracle

CVSS Score-9.8||CRITICAL

EPSS-1.23% / 79.03%

||

7 Day CHG~0.00%

Published-16 Apr, 2024 | 21:26

Updated-17 Mar, 2025 | 16:15

Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: Simphony Enterprise Server). Supported versions that are affected are 19.1.0-19.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Hospitality Simphony. Successful attacks of this vulnerability can result in takeover of Oracle Hospitality Simphony. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Product-hospitality_simphony Hospitality Simphony

CWE ID-CWE-306

Missing Authentication for Critical Function

CVE-2022-21587

Matching Score-10

Assigner-Oracle

Matching Score-10

Assigner-Oracle

CVSS Score-9.8||CRITICAL

EPSS-94.40% / 99.98%

||

7 Day CHG~0.00%

Published-18 Oct, 2022 | 00:00

Updated-27 Oct, 2025 | 17:09

Known KEV||Action Due Date - 2023-02-23||Apply updates per vendor instructions.

Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: Upload). Supported versions that are affected are 12.2.3-12.2.11. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Web Applications Desktop Integrator. Successful attacks of this vulnerability can result in takeover of Oracle Web Applications Desktop Integrator. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Product-e-business_suite Web Applications Desktop Integrator E-Business Suite

CWE ID-CWE-306

Missing Authentication for Critical Function

CVE-2021-35587

Matching Score-10

Assigner-Oracle

Matching Score-10

Assigner-Oracle

CVSS Score-9.8||CRITICAL

EPSS-94.26% / 99.93%

||

7 Day CHG~0.00%

Published-19 Jan, 2022 | 11:21

Updated-27 Oct, 2025 | 17:08

Known KEV||Action Due Date - 2022-12-19||Apply updates per vendor instructions.

Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: OpenSSO Agent). Supported versions that are affected are 11.1.2.3.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Access Manager. Successful attacks of this vulnerability can result in takeover of Oracle Access Manager. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Product-access_manager Access Manager Fusion Middleware

CWE ID-CWE-306

Missing Authentication for Critical Function

CVE-2025-21535

Matching Score-10

Assigner-Oracle

Matching Score-10

Assigner-Oracle

CVSS Score-9.8||CRITICAL

EPSS-1.00% / 76.80%

||

7 Day CHG-0.19%

Published-21 Jan, 2025 | 20:53

Updated-26 Feb, 2026 | 19:09

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Product-weblogic_server Oracle WebLogic Server

CWE ID-CWE-306

Missing Authentication for Critical Function

CVE-2025-21524

Matching Score-10

Assigner-Oracle

Matching Score-10

Assigner-Oracle

CVSS Score-9.8||CRITICAL

EPSS-1.07% / 77.60%

||

7 Day CHG+0.46%

Published-21 Jan, 2025 | 20:53

Updated-26 Feb, 2026 | 19:09

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Monitoring and Diagnostics SEC). Supported versions that are affected are Prior to 9.2.9.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Tools. Successful attacks of this vulnerability can result in takeover of JD Edwards EnterpriseOne Tools. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Product-jd_edwards_enterpriseone_tools JD Edwards EnterpriseOne Tools

CWE ID-CWE-306

Missing Authentication for Critical Function

CVE-2025-30727

Matching Score-10

Assigner-Oracle

Matching Score-10

Assigner-Oracle

CVSS Score-9.8||CRITICAL

EPSS-0.96% / 76.31%

||

7 Day CHG~0.00%

Published-15 Apr, 2025 | 20:31

Updated-26 Feb, 2026 | 18:28

Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (component: iSurvey Module). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Scripting. Successful attacks of this vulnerability can result in takeover of Oracle Scripting. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Product-e-business_suite Oracle Scripting

CWE ID-CWE-306

Missing Authentication for Critical Function

CVE-2016-3427

Matching Score-8

Assigner-Oracle

Vendor-n/a Canonical Ltd.Debian GNU/Linux Oracle Corporation openSUSE The Apache Software Foundation SUSE NetApp, Inc.Red Hat, Inc.

Matching Score-8

Assigner-Oracle

CVSS Score-9.8||CRITICAL

EPSS-92.58% / 99.74%

||

7 Day CHG-1.04%

Published-21 Apr, 2016 | 10:00

Updated-22 Oct, 2025 | 00:15

Known KEV||Action Due Date - 2023-06-02||Apply updates per vendor instructions.

Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX.

CWE ID-CWE-284

Improper Access Control

CVE-2018-8088

Matching Score-8

Assigner-MITRE Corporation

Product-enterprise_linux_server virtualization enterprise_linux_server_aus enterprise_linux_workstation enterprise_linux virtualization_host slf4j goldengate_stream_analytics enterprise_linux_eus goldengate_application_adapters enterprise_linux_server_tus jboss_enterprise_application_platform enterprise_linux_desktop utilities_framework n/a

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.8||CRITICAL

EPSS-0.84% / 74.45%

||

7 Day CHG~0.00%

Published-20 Mar, 2018 | 00:00

Updated-05 Aug, 2024 | 06:46

org.slf4j.ext.EventData in the slf4j-ext module in QOS.CH SLF4J before 1.8.0-beta2 allows remote attackers to bypass intended access restrictions via crafted data. EventData in the slf4j-ext module in QOS.CH SLF4J, has been fixed in SLF4J versions 1.7.26 later and in the 2.0.x series.

Vendor-qos n/a Oracle Corporation Red Hat, Inc.

CVE-2018-7318

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.8||CRITICAL

EPSS-25.32% / 96.11%

||

7 Day CHG~0.00%

Published-22 Feb, 2018 | 19:00

Updated-05 Aug, 2024 | 06:24

SQL Injection exists in the CheckList 1.1.1 component for Joomla! via the title_search, tag_search, name_search, description_search, or filter_order parameter.

Vendor-belitsoft n/a Oracle Corporation

Product-checklist data_integrator n/a

CWE ID-CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

CVE-2026-21969

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-9.8||CRITICAL

EPSS-0.17% / 38.81%

||

7 Day CHG-0.07%

Published-20 Jan, 2026 | 21:56

Updated-26 Feb, 2026 | 14:44

Vulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle Supply Chain (component: Supplier Portal). The supported version that is affected is 6.2.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Agile Product Lifecycle Management for Process. Successful attacks of this vulnerability can result in takeover of Oracle Agile Product Lifecycle Management for Process. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Product-agile_product_lifecycle_management_for_process Oracle Agile Product Lifecycle Management for Process

CVE-2021-43527

Matching Score-8

Assigner-Mozilla Corporation

Product-communications_cloud_native_core_network_slice_selection_function starwind_virtual_san cloud_backup e-series_santricity_os_controller communications_cloud_native_core_network_repository_function nss_esr communications_cloud_native_core_binding_support_function starwind_san_\&_nas communications_policy_management nss NSS

Matching Score-8

Assigner-Mozilla Corporation

CVSS Score-9.8||CRITICAL

EPSS-5.24% / 89.84%

||

7 Day CHG~0.00%

Published-08 Dec, 2021 | 00:00

Updated-04 Aug, 2024 | 03:55

NSS (Network Security Services) versions prior to 3.73 or 3.68.1 ESR are vulnerable to a heap overflow when handling DER-encoded DSA or RSA-PSS signatures. Applications using NSS for handling signatures encoded within CMS, S/MIME, PKCS \#7, or PKCS \#12 are likely to be impacted. Applications using NSS for certificate validation or other TLS, X.509, OCSP or CRL functionality may be impacted, depending on how they configure NSS. *Note: This vulnerability does NOT impact Mozilla Firefox.* However, email clients and PDF viewers that use NSS for signature verification, such as Thunderbird, LibreOffice, Evolution and Evince are believed to be impacted. This vulnerability affects NSS < 3.73 and NSS < 3.68.1.

Vendor-starwindsoftware Mozilla Corporation NetApp, Inc.Oracle Corporation

CWE ID-CWE-787

Out-of-bounds Write

CVE-2023-22089

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-9.8||CRITICAL

EPSS-0.46% / 64.11%

||

7 Day CHG~0.00%

Published-17 Oct, 2023 | 21:03

Updated-06 Mar, 2025 | 16:11

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

CVE-2018-2628

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-9.8||CRITICAL

EPSS-94.42% / 99.98%

||

7 Day CHG~0.00%

Published-19 Apr, 2018 | 02:00

Updated-27 Oct, 2025 | 17:08

Known KEV||Action Due Date - 2022-09-29||Apply updates per vendor instructions.

Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS Core Components). Supported versions that are affected are 10.3.6.0, 12.1.3.0, 12.2.1.2 and 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Product-weblogic_server WebLogic Server WebLogic Server

CWE ID-CWE-502

Deserialization of Untrusted Data

CVE-2018-20033

Matching Score-8

Assigner-Flexera Software LLC

Matching Score-8

Assigner-Flexera Software LLC

CVSS Score-9.8||CRITICAL

EPSS-4.37% / 88.81%

||

7 Day CHG~0.00%

Published-25 Feb, 2019 | 20:00

Updated-17 Sep, 2024 | 02:11

A Remote Code Execution vulnerability in lmgrd and vendor daemon components of FlexNet Publisher version 11.16.1.0 and earlier could allow a remote attacker to corrupt the memory by allocating / deallocating memory, loading lmgrd or the vendor daemon and causing the heartbeat between lmgrd and the vendor daemon to stop. This would force the vendor daemon to shut down. No exploit of this vulnerability has been demonstrated.

Vendor-flexera Flexera Software LLC Oracle Corporation

Product-communications_lsms flexnet_publisher FlexNet Publisher

CWE ID-CWE-770

Allocation of Resources Without Limits or Throttling

CVE-2016-1908

Matching Score-8

Assigner-Red Hat, Inc.

Product-enterprise_linux_desktop linux enterprise_linux_server_tus enterprise_linux_eus openssh enterprise_linux_workstation debian_linux enterprise_linux_server enterprise_linux_server_aus n/a

Matching Score-8

Assigner-Red Hat, Inc.

CVSS Score-9.8||CRITICAL

EPSS-0.93% / 75.85%

||

7 Day CHG-1.44%

Published-11 Apr, 2017 | 00:00

Updated-20 Apr, 2025 | 01:37

The client in OpenSSH before 7.2 mishandles failed cookie generation for untrusted X11 forwarding and relies on the local X11 server for access-control decisions, which allows remote X11 clients to trigger a fallback and obtain trusted X11 forwarding privileges by leveraging configuration issues on this X11 server, as demonstrated by lack of the SECURITY extension on this X11 server.

Vendor-n/a Debian GNU/Linux Red Hat, Inc.Oracle Corporation OpenBSD

CWE ID-CWE-287

Improper Authentication

CVE-2023-21890

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-9.8||CRITICAL

EPSS-1.84% / 82.76%

||

7 Day CHG+0.25%

Published-17 Jan, 2023 | 23:35

Updated-17 Sep, 2024 | 14:35

Vulnerability in the Oracle Communications Converged Application Server product of Oracle Communications (component: Core). Supported versions that are affected are 7.1.0 and 8.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via UDP to compromise Oracle Communications Converged Application Server. Successful attacks of this vulnerability can result in takeover of Oracle Communications Converged Application Server. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Product-communications_converged_application_server Communications Converged Application Server

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2021-39085

Matching Score-8

Assigner-IBM Corporation

Vendor-Microsoft Corporation HP Inc.IBM Corporation Linux Kernel Organization, Inc Oracle Corporation

Matching Score-8

Assigner-IBM Corporation

CVSS Score-6.3||MEDIUM

EPSS-0.23% / 45.31%

||

7 Day CHG~0.00%

Published-16 Aug, 2022 | 18:45

Updated-17 Sep, 2024 | 00:42

IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.4, and 6.1.1.0 through 6.1.1.1 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in the back-end database. IBM X-Force ID: 215888.

Product-sterling_b2b_integrator solaris linux_kernel hp-ux windows aix Sterling B2B Integrator

CWE ID-CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

CVE-2018-1285

Matching Score-8

Matching Score-8

Product-manageability_software_development_kit fedora hospitality_simphony hospitality_opera_5 application_testing_suite log4net snapcenter Apache log4net

CVSS Score-9.8||CRITICAL

EPSS-49.02% / 97.72%

||

7 Day CHG~0.00%

Published-11 May, 2020 | 16:41

Updated-05 Aug, 2024 | 03:59

Apache log4net versions before 2.0.10 do not disable XML external entities when parsing log4net configuration files. This allows for XXE-based attacks in applications that accept attacker-controlled log4net configuration files.

Vendor-n/a NetApp, Inc.The Apache Software Foundation Fedora Project Oracle Corporation

CWE ID-CWE-611

Improper Restriction of XML External Entity Reference

CVE-2021-26691

Matching Score-8

Matching Score-8

Vendor-The Apache Software Foundation NetApp, Inc.Fedora Project Debian GNU/Linux Oracle Corporation

CVSS Score-9.8||CRITICAL

EPSS-36.27% / 97.05%

||

7 Day CHG~0.00%

Published-10 Jun, 2021 | 07:10

Updated-03 Aug, 2024 | 20:33

Apache HTTP Server mod_session response handling heap overflow

In Apache HTTP Server versions 2.4.0 to 2.4.46 a specially crafted SessionHeader sent by an origin server could cause a heap overflow

Product-http_server debian_linux cloud_backup instantis_enterprisetrack fedora zfs_storage_appliance_kit enterprise_manager_ops_center secure_backup Apache HTTP Server

CWE ID-CWE-122

Heap-based Buffer Overflow

CWE ID-CWE-787

Out-of-bounds Write

CVE-2018-14719

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.8||CRITICAL

EPSS-3.32% / 87.11%

||

7 Day CHG+0.72%

Published-02 Jan, 2019 | 18:00

Updated-05 Aug, 2024 | 09:38

FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to execute arbitrary code by leveraging failure to block the blaze-ds-opt and blaze-ds-core classes from polymorphic deserialization.

Vendor-n/a Debian GNU/Linux Oracle Corporation FasterXML, LLC.NetApp, Inc.Red Hat, Inc.

CWE ID-CWE-502

Deserialization of Untrusted Data

CVE-2016-1283

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.8||CRITICAL

EPSS-3.76% / 87.88%

||

7 Day CHG~0.00%

Published-03 Jan, 2016 | 00:00

Updated-12 Apr, 2025 | 10:46

The pcre_compile2 function in pcre_compile.c in PCRE 8.38 mishandles the /((?:F?+(?:^(?(R)a+\"){99}-))(?J)(?'R'(?'R'<((?'RR'(?'R'\){97)?J)?J)(?'R'(?'R'\){99|(:(?|(?'R')(\k'R')|((?'R')))H'R'R)(H'R))))))/ pattern and related patterns with named subgroups, which allows remote attackers to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted regular expression, as demonstrated by a JavaScript RegExp object encountered by Konqueror.

Vendor-pcre n/a Fedora Project The PHP Group Oracle Corporation

Product-fedora pcre solaris php n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2016-10328

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.8||CRITICAL

EPSS-1.04% / 77.29%

||

7 Day CHG~0.00%

Published-14 Apr, 2017 | 04:30

Updated-20 Apr, 2025 | 01:37

FreeType 2 before 2016-12-16 has an out-of-bounds write caused by a heap-based buffer overflow related to the cff_parser_run function in cff/cffparse.c.

Vendor-freetype n/a Oracle Corporation

Product-outside_in_technology freetype n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2021-2463

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-9.8||CRITICAL

EPSS-1.91% / 83.05%

||

7 Day CHG~0.00%

Published-20 Jul, 2021 | 22:45

Updated-25 Sep, 2024 | 19:40

Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework). Supported versions that are affected are 11.0.0, 11.1.0, 11.2.0 and 11.3.0-11.3.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Commerce Platform. Successful attacks of this vulnerability can result in takeover of Oracle Commerce Platform. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Product-commerce_platform Commerce Platform

CVE-2021-2456

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-9.8||CRITICAL

EPSS-73.09% / 98.77%

||

7 Day CHG~0.00%

Published-20 Jul, 2021 | 22:45

Updated-25 Sep, 2024 | 19:41

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Web General). The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Business Intelligence Enterprise Edition. Successful attacks of this vulnerability can result in takeover of Oracle Business Intelligence Enterprise Edition. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Product-business_intelligence Business Intelligence Enterprise Edition

CVE-2018-14718

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.8||CRITICAL

EPSS-12.83% / 93.92%

||

7 Day CHG-1.69%

Published-02 Jan, 2019 | 18:00

Updated-05 Aug, 2024 | 09:38

FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to execute arbitrary code by leveraging failure to block the slf4j-ext class from polymorphic deserialization.

Vendor-n/a Debian GNU/Linux Oracle Corporation FasterXML, LLC.NetApp, Inc.Red Hat, Inc.

CWE ID-CWE-502

Deserialization of Untrusted Data

CVE-2021-23440

Matching Score-8

Assigner-Snyk

Matching Score-8

Assigner-Snyk

CVSS Score-7.3||HIGH

EPSS-0.07% / 20.25%

||

7 Day CHG~0.00%

Published-12 Sep, 2021 | 12:55

Updated-16 Sep, 2024 | 19:20

Prototype Pollution

This affects the package set-value before <2.0.1, >=3.0.0 <4.0.1. A type confusion vulnerability can lead to a bypass of CVE-2019-10747 when the user-provided keys used in the path parameter are arrays.

Vendor-set-value_project n/a Oracle Corporation

Product-communications_cloud_native_core_policy set-value set-value

CWE ID-CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

CVE-2021-22931

Matching Score-8

Assigner-HackerOne

Product-sinec_infrastructure_network_services peoplesoft_enterprise_peopletools graalvm mysql_cluster nextgen_api active_iq_unified_manager oncommand_workflow_automation snapcenter node.js oncommand_insight Node

Matching Score-8

Assigner-HackerOne

CVSS Score-9.8||CRITICAL

EPSS-1.36% / 79.99%

||

7 Day CHG+0.65%

Published-16 Aug, 2021 | 00:00

Updated-30 Apr, 2025 | 22:24

Node.js before 16.6.0, 14.17.4, and 12.22.4 is vulnerable to Remote Code Execution, XSS, Application crashes due to missing input validation of host names returned by Domain Name Servers in Node.js dns library which can lead to output of wrong hostnames (leading to Domain Hijacking) and injection vulnerabilities in applications using the library.

Vendor-Oracle Corporation Node.js (OpenJS Foundation)NetApp, Inc.Siemens AG

CWE ID-CWE-170

Improper Null Termination

CWE ID-CWE-20

Improper Input Validation

CVE-2021-2397

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-9.8||CRITICAL

EPSS-2.32% / 84.59%

||

7 Day CHG~0.00%

Published-20 Jul, 2021 | 22:44

Updated-26 Sep, 2024 | 14:01

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

CVE-2021-2302

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-9.8||CRITICAL

EPSS-52.53% / 97.90%

||

7 Day CHG~0.00%

Published-22 Apr, 2021 | 21:54

Updated-26 Sep, 2024 | 14:10

Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: OPSS). Supported versions that are affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Platform Security for Java. Successful attacks of this vulnerability can result in takeover of Oracle Platform Security for Java. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Product-platform_security_for_java Platform Security for Java

CVE-2021-2382

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-9.8||CRITICAL

EPSS-2.32% / 84.59%

||

7 Day CHG~0.00%

Published-20 Jul, 2021 | 22:43

Updated-26 Sep, 2024 | 14:01

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Security). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

CVE-2020-11984

Matching Score-8

Matching Score-8

Vendor-n/a Canonical Ltd.The Apache Software Foundation NetApp, Inc.openSUSE Fedora Project Debian GNU/Linux Oracle Corporation

CVSS Score-9.8||CRITICAL

EPSS-80.44% / 99.11%

||

7 Day CHG+5.09%

Published-07 Aug, 2020 | 15:27

Updated-04 Aug, 2024 | 11:48

Apache HTTP server 2.4.32 to 2.4.44 mod_proxy_uwsgi info disclosure and possible RCE

Product-http_server clustered_data_ontap ubuntu_linux debian_linux instantis_enterprisetrack fedora communications_session_route_manager zfs_storage_appliance_kit communications_session_report_manager hyperion_infrastructure_technology enterprise_manager_ops_center communications_element_manager leap Apache HTTP Server

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2021-23450

Matching Score-8

Assigner-Snyk

Matching Score-8

Assigner-Snyk

CVSS Score-7.5||HIGH

EPSS-2.41% / 84.89%

||

7 Day CHG~0.00%

Published-17 Dec, 2021 | 20:05

Updated-16 Sep, 2024 | 20:53

Prototype Pollution

All versions of package dojo are vulnerable to Prototype Pollution via the setObject function.

Vendor-n/a Debian GNU/Linux The Linux Foundation Oracle Corporation

Product-debian_linux weblogic_server primavera_unifier communications_policy_management dojo dojo

CWE ID-CWE-1321

Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

CVE-2021-2394

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-9.8||CRITICAL

EPSS-90.23% / 99.59%

||

7 Day CHG~0.00%

Published-20 Jul, 2021 | 22:44

Updated-26 Sep, 2024 | 14:01

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

CVE-2021-21783

Matching Score-8

Assigner-Talos

Product-communications_diameter_signaling_router communications_eagle_application_processor tekelec_virtual_operating_environment communications_eagle_lnp_application_processor communications_lsms gsoap Genivia

Matching Score-8

Assigner-Talos

CVSS Score-9.8||CRITICAL

EPSS-2.06% / 83.69%

||

7 Day CHG~0.00%

Published-25 Mar, 2021 | 16:01

Updated-03 Aug, 2024 | 18:23

A code execution vulnerability exists in the WS-Addressing plugin functionality of Genivia gSOAP 2.8.107. A specially crafted SOAP request can lead to remote code execution. An attacker can send an HTTP request to trigger this vulnerability.

Vendor-genivia n/a Oracle Corporation

CWE ID-CWE-680

Integer Overflow to Buffer Overflow

CWE ID-CWE-190

Integer Overflow or Wraparound

CVE-2017-3167

Matching Score-8

Matching Score-8

Vendor-The Apache Software Foundation Oracle Corporation Debian GNU/Linux Red Hat, Inc.NetApp, Inc.Apple Inc.

CVSS Score-9.8||CRITICAL

EPSS-6.99% / 91.34%

||

7 Day CHG-3.36%

Published-20 Jun, 2017 | 01:00

Updated-04 Nov, 2025 | 16:15

In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, use of the ap_get_basic_auth_pw() by third-party modules outside of the authentication phase may lead to authentication requirements being bypassed.

Product-mac_os_x secure_global_desktop http_server jboss_core_services enterprise_linux enterprise_linux_server enterprise_linux_eus enterprise_linux_server_aus debian_linux enterprise_linux_server_tus enterprise_linux_desktop enterprise_linux_workstation oncommand_unified_manager clustered_data_ontap storagegrid Apache HTTP Server

CWE ID-CWE-287

Improper Authentication

CVE-2018-1270

Matching Score-8

Assigner-Dell

Matching Score-8

Assigner-Dell

CVSS Score-9.8||CRITICAL

EPSS-89.95% / 99.58%

||

7 Day CHG~0.00%

Published-06 Apr, 2018 | 13:00

Updated-16 Sep, 2024 | 19:05

Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, allow applications to expose STOMP over WebSocket endpoints with a simple, in-memory STOMP broker through the spring-messaging module. A malicious user (or attacker) can craft a message to the broker that can lead to a remote code execution attack.

Vendor-VMware (Broadcom Inc.)Red Hat, Inc.Oracle Corporation Debian GNU/Linux

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CWE ID-CWE-358

Improperly Implemented Security Check for Standard

CVE-2018-1275

Matching Score-8

Assigner-Dell

Matching Score-8

Assigner-Dell

CVSS Score-9.8||CRITICAL

EPSS-38.06% / 97.16%

||

7 Day CHG~0.00%

Published-11 Apr, 2018 | 13:00

Updated-17 Sep, 2024 | 02:43

Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.16 and older unsupported versions, allow applications to expose STOMP over WebSocket endpoints with a simple, in-memory STOMP broker through the spring-messaging module. A malicious user (or attacker) can craft a message to the broker that can lead to a remote code execution attack. This CVE addresses the partial fix for CVE-2018-1270 in the 4.3.x branch of the Spring Framework.

Vendor-Oracle Corporation VMware (Broadcom Inc.)

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CWE ID-CWE-358

Improperly Implemented Security Check for Standard

CVE-2018-1273

Matching Score-8

Assigner-Dell

Product-ignite spring_data_commons spring_data_rest financial_services_crime_and_compliance_management_studio Spring Framework Spring Data Commons

Matching Score-8

Assigner-Dell

CVSS Score-9.8||CRITICAL

EPSS-94.29% / 99.94%

||

7 Day CHG~0.00%

Published-11 Apr, 2018 | 13:00

Updated-28 Oct, 2025 | 14:05

Known KEV||Action Due Date - 2022-04-15||Apply updates per vendor instructions.

Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property binder vulnerability caused by improper neutralization of special elements. An unauthenticated remote malicious user (or attacker) can supply specially crafted request parameters against Spring Data REST backed HTTP resources or using Spring Data's projection-based request payload binding hat can lead to a remote code execution attack.

Vendor-VMware (Broadcom Inc.)The Apache Software Foundation Oracle Corporation

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2021-2136

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-9.8||CRITICAL

EPSS-4.80% / 89.35%

||

7 Day CHG~0.00%

Published-22 Apr, 2021 | 21:53

Updated-26 Sep, 2024 | 18:15

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

CVE-2021-2135

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-9.8||CRITICAL

EPSS-71.39% / 98.71%

||

7 Day CHG~0.00%

Published-22 Apr, 2021 | 21:53

Updated-26 Sep, 2024 | 18:16

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Coherence Container). Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

CVE-2021-2108

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-9.8||CRITICAL

EPSS-26.77% / 96.27%

||

7 Day CHG~0.00%

Published-20 Jan, 2021 | 14:50

Updated-26 Sep, 2024 | 18:16

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core Components). The supported version that is affected is 12.1.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP, T3 to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

CVE-2021-21344

Matching Score-8

Assigner-GitHub, Inc.

Product-xstream communications_unified_inventory_management communications_billing_and_revenue_management_elastic_charging_engine webcenter_portal oncommand_insight mysql_server banking_virtual_account_management jmeter communications_policy_management activemq retail_xstore_point_of_service debian_linux banking_enterprise_default_management fedora banking_platform business_activity_monitoring xstream

Matching Score-8

Assigner-GitHub, Inc.

CVSS Score-5.3||MEDIUM

EPSS-28.06% / 96.40%

||

7 Day CHG~0.00%

Published-22 Mar, 2021 | 23:40

Updated-23 May, 2025 | 17:40

XStream is vulnerable to an Arbitrary Code Execution attack

XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types. If you rely on XStream's default blacklist of the Security Framework, you will have to use at least version 1.4.16.

Vendor-xstream x-stream NetApp, Inc.Oracle Corporation Fedora Project The Apache Software Foundation Debian GNU/Linux

CWE ID-CWE-434

Unrestricted Upload of File with Dangerous Type

CWE ID-CWE-502

Deserialization of Untrusted Data

CVE-2018-11307

Matching Score-8

Assigner-MITRE Corporation

Product-clusterware global_lifecycle_management_opatch utilities_advanced_spatial_and_operational_analytics jackson-databind openshift_container_platform enterprise_linux communications_instant_messaging_server retail_customer_management_and_segmentation_foundation n/a

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.8||CRITICAL

EPSS-12.64% / 93.86%

||

7 Day CHG~0.00%

Published-09 Jul, 2019 | 15:37

Updated-05 Aug, 2024 | 08:01

An issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.5. Use of Jackson default typing along with a gadget class from iBatis allows exfiltration of content. Fixed in 2.7.9.4, 2.8.11.2, and 2.9.6.

Vendor-n/a Red Hat, Inc.Oracle Corporation FasterXML, LLC.

CWE ID-CWE-502

Deserialization of Untrusted Data

CVE-2018-11058

Matching Score-8

Assigner-Dell