Product by Oracle

    Oracle Business Process Management Suite

    32 known vulnerabilities in Oracle Business Process Management Suite (Oracle), 0 of them actively exploited (CISA KEV).

    Key figures

    32

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    11

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Oracle Business Process Management Suite (Oracle)
    CriticalCVE-2022-23305

    SQL injection in JDBC Appender in Apache Log4j V1

    also in 29 other products

    		9.8
    CriticalCVE-2019-2904

    Oracle Enterprise Repository: security vulnerability

    also in 22 other products

    		9.8
    CriticalCVE-2018-14718

    FasterXML Jackson-databind: Deserialization of Untrusted Data

    also in 24 other products

    		9.8
    HighCVE-2022-23302

    Deserialization of untrusted data in JMSSink in Apache Log4j 1.x

    also in 27 other products

    		8.8
    HighCVE-2022-23307

    Apache Log4j 1.x: Deserialization of Untrusted Data

    also in 26 other products

    		8.8
    CriticalCVE-2018-19361

    FasterXML Jackson-databind: Deserialization of Untrusted Data

    also in 11 other products

    		9.8
    CriticalCVE-2018-19362

    FasterXML Jackson-databind: Deserialization of Untrusted Data

    also in 11 other products

    		9.8
    CriticalCVE-2018-19360

    FasterXML Jackson-databind: Deserialization of Untrusted Data

    also in 11 other products

    		9.8
    CriticalCVE-2018-14719

    FasterXML Jackson-databind: Deserialization of Untrusted Data

    also in 19 other products

    		9.8
    CriticalCVE-2020-10683

    Dom4j Project Dom4j: XML External Entity (XXE)

    also in 36 other products

    		9.8
    HighCVE-2021-4104

    Deserialization of untrusted data in JMSAppender in Apache Log4j 1.2

    also in 45 other products

    		7.5
    CriticalCVE-2018-1000613

    Oracle Communications Diameter Signaling Router (DSR): Deserialization of Untrusted Data

    also in 22 other products

    		9.8
    HighCVE-2021-36090

    Apache Commons Compress 1.0 to 1.20 denial of service vulnerability

    also in 34 other products

    		7.5
    HighCVE-2021-35516

    Apache Commons Compress 1.6 to 1.20 denial of service vulnerability

    also in 24 other products

    		7.5
    HighCVE-2021-35515

    Apache Commons Compress 1.6 to 1.20 denial of service vulnerability

    also in 26 other products

    		7.5
    HighCVE-2021-35517

    Apache Commons Compress 1.1 to 1.20 denial of service vulnerability

    also in 27 other products

    		7.5
    HighCVE-2018-11761

    Apache Tika: Denial of Service

    also in 2 other products

    		7.5
    MediumCVE-2019-11358

    Drupal core: security vulnerability

    also in 89 other products

    		6.1
    HighCVE-2019-17359

    Apache Software Foundation TomEE: security vulnerability

    also in 20 other products

    		7.5
    HighCVE-2021-37714

    Jhy Jsoup: Infinite Loop

    also in 16 other products

    		7.5
    MediumCVE-2015-9251

    jQuery: Cross-Site Scripting (XSS)

    also in 45 other products

    		6.1
    CriticalCVE-2018-3100

    Oracle Business Process Management Suite: security vulnerability

    also in 1 other product

    		9.1
    HighCVE-2018-1000180

    Oracle Business Process Management Suite: security vulnerability

    also in 18 other products

    		7.5
    HighCVE-2018-3246

    Oracle WebLogic Server: security vulnerability

    also in 9 other products

    		7.5
    HighCVE-2019-2706

    Oracle Business Process Management Suite: security vulnerability

    also in 1 other product

    		8.2

    All vulnerabilities in search

    All products by Oracle