Product by Oracle

    Endeca Information Discovery Studio

    11 known vulnerabilities in Endeca Information Discovery Studio (Oracle), 0 of them actively exploited (CISA KEV).

    Key figures

    11

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    4

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Endeca Information Discovery Studio (Oracle)
    CriticalCVE-2017-5645

    Apache Log4j: Deserialization of Untrusted Data

    also in 74 other products

    		9.8
    CriticalCVE-2013-7285

    Xstream: security vulnerability

    also in 2 other products

    		9.8
    CriticalCVE-2019-17571

    Apache Software Foundation Log4j: Deserialization of Untrusted Data

    also in 17 other products

    		9.8
    HighCVE-2020-26217

    Remote Code Execution in XStream

    also in 15 other products

    		8.0
    HighCVE-2019-0227

    Apache Axis 1.4: Server-Side Request Forgery (SSRF)

    also in 34 other products

    		7.5
    CriticalCVE-2019-10173

    Xstream: Code Injection

    also in 9 other products

    		7.3
    HighCVE-2020-11979

    Apache Ant: Creation of Temporary File in Directory with Insecure Permissions

    also in 30 other products

    		7.5
    MediumCVE-2015-9251

    jQuery: Cross-Site Scripting (XSS)

    also in 45 other products

    		6.1
    MediumCVE-2018-8032

    Apache Axis: Cross-Site Scripting (XSS)

    also in 36 other products

    		6.1
    MediumCVE-2020-1945

    Apache Ant: security vulnerability

    also in 44 other products

    		6.3
    MediumCVE-2019-12415

    Apache POI: XML External Entity (XXE)

    also in 26 other products

    		5.5

    All products by Oracle