Product by Oracle
Oracle Documaker
23 known vulnerabilities in Oracle Documaker (Oracle), 0 of them actively exploited (CISA KEV).
Key figures
23
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2019-13990 | Software Quartz: XML External Entity (XXE) | 9.8 | |
| Critical | CVE-2020-10683 | Dom4j Project Dom4j: XML External Entity (XXE) | 9.8 | |
| High | CVE-2020-36188 | FasterXML Jackson-databind: security vulnerability | 8.1 | |
| High | CVE-2020-36184 | FasterXML Jackson-databind: security vulnerability | 8.1 | |
| High | CVE-2016-0635 | Oracle Insurance Policy Administration J2EE: security vulnerability | 8.8 | |
| High | CVE-2020-35491 | FasterXML Jackson-databind: security vulnerability | 8.1 | |
| High | CVE-2020-35490 | FasterXML Jackson-databind: security vulnerability | 8.1 | |
| High | CVE-2020-36183 | FasterXML Jackson-databind: security vulnerability | 8.1 | |
| High | CVE-2020-36185 | FasterXML Jackson-databind: security vulnerability | 8.1 | |
| High | CVE-2020-36187 | FasterXML Jackson-databind: security vulnerability | 8.1 | |
| High | CVE-2020-36186 | FasterXML Jackson-databind: security vulnerability | 8.1 | |
| High | CVE-2020-36180 | FasterXML Jackson-databind: security vulnerability | 8.1 | |
| High | CVE-2020-36182 | FasterXML Jackson-databind: security vulnerability | 8.1 | |
| High | CVE-2020-36181 | FasterXML Jackson-databind: security vulnerability | 8.1 | |
| High | CVE-2020-36189 | FasterXML Jackson-databind: security vulnerability | 8.1 | |
| High | CVE-2019-5427 | C3p0: XML Entity Expansion | 7.5 | |
| High | CVE-2020-5258 | Prototype pollution in dojo | 7.7 | |
| High | CVE-2021-2351 | Oracle WebLogic Server: security vulnerability | 8.3 | |
| Medium | CVE-2019-10219 | Hibernate Hibernate-validator: Cross-site Scripting | 6.5 | |
| High | CVE-2021-37695 | Execution of JavaScript code using malformed HTML in ckeditor | 7.3 | |
| High | CVE-2021-32808 | Cross-site scripting in ckeditor via abuse of undo functionality | 7.6 | |
| Medium | CVE-2021-32809 | Arbitrary HTML injection vulnerability in ckeditor | 4.6 | |
| High | CVE-2021-22118 | Spring Framework: Improper Privilege Management | 7.8 |