Product by Oracle
Banking Enterprise Default Management
23 known vulnerabilities in Banking Enterprise Default Management (Oracle), 0 of them actively exploited (CISA KEV).
Key figures
23
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
7
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2020-13936 | Velocity Sandbox Bypass | 8.8 | |
| High | CVE-2021-21341 | XStream can cause a Denial of Service | 7.5 | |
| High | CVE-2021-36090 | Apache Commons Compress 1.0 to 1.20 denial of service vulnerability | 7.5 | |
| High | CVE-2021-35516 | Apache Commons Compress 1.6 to 1.20 denial of service vulnerability | 7.5 | |
| High | CVE-2021-35515 | Apache Commons Compress 1.6 to 1.20 denial of service vulnerability | 7.5 | |
| High | CVE-2021-35517 | Apache Commons Compress 1.1 to 1.20 denial of service vulnerability | 7.5 | |
| Critical | CVE-2021-21346 | XStream is vulnerable to an Arbitrary Code Execution attack | 6.1 | |
| Medium | CVE-2021-45105 | Apache Log4j2 does not always protect from infinite recursion in lookup evaluation | 5.9 | |
| High | CVE-2021-21349 | Xstream: Deserialization of Untrusted Data | 6.1 | |
| Critical | CVE-2021-21345 | XStream is vulnerable to a Remote Command Execution attack | 5.8 | |
| Critical | CVE-2021-21351 | XStream is vulnerable to an Arbitrary Code Execution attack | 5.4 | |
| Critical | CVE-2021-21344 | XStream is vulnerable to an Arbitrary Code Execution attack | 5.3 | |
| Medium | CVE-2020-6950 | Eclipse Mojarra: Path Traversal | 6.5 | |
| Critical | CVE-2021-21347 | XStream is vulnerable to an Arbitrary Code Execution attack | 6.1 | |
| Critical | CVE-2021-21342 | Xstream: Deserialization of Untrusted Data | 5.3 | |
| High | CVE-2021-21343 | Xstream: External Control of File Name or Path | 5.3 | |
| Critical | CVE-2021-21350 | XStream is vulnerable to an Arbitrary Code Execution attack | 5.3 | |
| High | CVE-2021-21348 | XStream is vulnerable to an attack using Regular Expression for a Denial of Service (ReDos) | 5.3 | |
| High | CVE-2021-2351 | Oracle WebLogic Server: security vulnerability | 8.3 | |
| Medium | CVE-2021-29425 | Possible limited path traversal vulnerabily in Apache Commons IO | 4.8 | |
| Medium | CVE-2020-9281 | CKEditor: Cross-Site Scripting (XSS) | 6.1 | |
| Medium | CVE-2019-10219 | Hibernate Hibernate-validator: Cross-site Scripting | 6.5 | |
| Medium | CVE-2021-35043 | Antisamy Project Antisamy: Cross-Site Scripting (XSS) | 6.1 |
News
- SSA-501673 V1.0: Apache Log4j Denial of Service Vulnerability (CVE-2021-45105) - Impact to Siemens Productssiemens-productcert
- SSA-661247 V1.0: Apache Log4j Vulnerability (CVE-2021-44228, Log4Shell) - Impact to Siemens Productssiemens-productcert
- SSA-479842 V1.0: Apache Log4j Vulnerabilities - Impact to Siemens Energy Sensformer (Platform, Basic and Advanced)siemens-productcert