CVE Browser

Search and filter CVEs by severity, ecosystem, EPSS score, and more.

Today 149 Last 7 days 3,194 Total CVEs 400,875 CISA KEV 1,731 Critical 42,367 All stats

Filters: Vendor: Oracle Product: Retail Invoice Matching Clear all

Page 1

CVE-2021-45105 HIGH

Apache Log4j2 does not always protect from infinite recursion in lookup evaluation

CVSS 8.6 EPSS 100.00% Dec 18, 2021

CVE-2021-36374 MEDIUM

Apache Ant ZIP, and ZIP based, archive denial of service vulerability

CVSS 5.5 EPSS 2.63% Jul 14, 2021

CVE-2021-36373 MEDIUM

Apache Ant TAR archive denial of service vulnerability

CVSS 5.5 EPSS 2.52% Jul 14, 2021

CVE-2021-2017 MEDIUM

Vulnerability in the Oracle User Management product of Oracle E-Business Suite (component: Proxy User Delegation). Supported versions that are affected are 12.…

CVSS 4.3 EPSS 0.91% Jan 20, 2021

CVE-2020-5421 MEDIUM

RFD Protection Bypass via jsessionid

CVSS 6.5 EPSS 10.74% Sep 19, 2020

CVE-2019-10219 MEDIUM

hibernate-validator: safeHTML validator allows XSS

CVSS 6.1 EPSS 2.16% Nov 8, 2019

CVE-2019-17091 MEDIUM

faces/context/PartialViewContextImpl.java in Eclipse Mojarra, as used in Mojarra for Eclipse EE4J before 2.3.10 and Mojarra JavaServer Faces before 2.2.20, all…

CVSS 6.1 EPSS 2.47% Oct 2, 2019

CVE-2019-10086 HIGH

apache-commons-beanutils: does not suppresses the class property in PropertyUtilsBean by default

CVSS 7.3 EPSS 28.38% Aug 20, 2019

CVE-2018-15756 HIGH

DoS Attack via Range Requests

CVSS 7.5 EPSS 9.21% Oct 18, 2018

CVE-2015-9251 MEDIUM

jquery: Cross-site scripting via cross-domain ajax requests

CVSS 6.1 EPSS 29.73% Jan 18, 2018

MavenNuGetRubyGemsnpm

CVE-2017-12617 KEV HIGH

tomcat: Remote Code Execution bypass for CVE-2017-12615

CVSS 8.1 EPSS 99.97% Oct 3, 2017

CVE-2017-3254 HIGH

Vulnerability in the Oracle Retail Invoice Matching component of Oracle Retail Applications (subcomponent: Security). Supported versions that are affected are…

CVSS 7.6 EPSS 1.48% Apr 24, 2017

CVE ID	Description	Severity	CVSS	EPSS	Ecosystems	Published
CVE-2021-45105	Apache Log4j2 does not always protect from infinite recursion in lookup evaluation	HIGH	8.6	100.00%		Dec 18, 2021
CVE-2021-36374	Apache Ant ZIP, and ZIP based, archive denial of service vulerability	MEDIUM	5.5	2.63%		Jul 14, 2021
CVE-2021-36373	Apache Ant TAR archive denial of service vulnerability	MEDIUM	5.5	2.52%		Jul 14, 2021
CVE-2021-2017	Vulnerability in the Oracle User Management product of Oracle E-Business Suite (component: Proxy User Delegation). Supported versions that are affected are 12.…	MEDIUM	4.3	0.91%		Jan 20, 2021
CVE-2020-5421	RFD Protection Bypass via jsessionid	MEDIUM	6.5	10.74%		Sep 19, 2020
CVE-2019-10219	hibernate-validator: safeHTML validator allows XSS	MEDIUM	6.1	2.16%		Nov 8, 2019
CVE-2019-17091	faces/context/PartialViewContextImpl.java in Eclipse Mojarra, as used in Mojarra for Eclipse EE4J before 2.3.10 and Mojarra JavaServer Faces before 2.2.20, all…	MEDIUM	6.1	2.47%		Oct 2, 2019
CVE-2019-10086	apache-commons-beanutils: does not suppresses the class property in PropertyUtilsBean by default	HIGH	7.3	28.38%		Aug 20, 2019
CVE-2018-15756	DoS Attack via Range Requests	HIGH	7.5	9.21%		Oct 18, 2018
CVE-2015-9251	jquery: Cross-site scripting via cross-domain ajax requests	MEDIUM	6.1	29.73%	MavenNuGetRubyGemsnpm	Jan 18, 2018
CVE-2017-12617 KEV	tomcat: Remote Code Execution bypass for CVE-2017-12615	HIGH	8.1	99.97%		Oct 3, 2017
CVE-2017-3254	Vulnerability in the Oracle Retail Invoice Matching component of Oracle Retail Applications (subcomponent: Security). Supported versions that are affected are…	HIGH	7.6	1.48%		Apr 24, 2017

Rows per page

Showing 1 to 12 CVEs · page 1