Product by Oracle
Oracle OSS Support Tools
19 known vulnerabilities in Oracle OSS Support Tools (Oracle), 1 of them actively exploited (CISA KEV).
Key figures
19
Vulnerabilities
1
Actively exploited (KEV)
0
Used by ransomware
3
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2020-11023 | Potential XSS vulnerability in jQuery In CISA KEValso in 48 other products | 6.9 | |
| Critical | CVE-2019-5482 | Curl: Heap-based Buffer Overflow | 9.8 | |
| High | CVE-2018-2616 | Oracle OSS Support Tools: security vulnerability | 8.8 | |
| Critical | CVE-2019-5481 | Curl: Double Free | 9.8 | |
| High | CVE-2019-5436 | Curl: Heap-based Buffer Overflow | 7.8 | |
| Medium | CVE-2015-9251 | jQuery: Cross-Site Scripting (XSS) | 6.1 | |
| Medium | CVE-2016-7103 | Jquery UI: Cross-Site Scripting (XSS) | 6.1 | |
| Medium | CVE-2015-3197 | OpenSSL: security vulnerability | 5.9 | |
| Medium | CVE-2021-41973 | Apache MINA HTTP listener DOS | 6.5 | |
| High | CVE-2021-2351 | Oracle WebLogic Server: security vulnerability | 8.3 | |
| Medium | CVE-2021-29425 | Possible limited path traversal vulnerabily in Apache Commons IO | 4.8 | |
| Medium | CVE-2021-30129 | DoS/OOM leak vulnerability in Apache Mina SSHD Server | 6.5 | |
| Medium | CVE-2021-27568 | Json-smart Project Json-smart-v2: security vulnerability | 5.9 | |
| Medium | CVE-2019-10219 | Hibernate Hibernate-validator: Cross-site Scripting | 6.5 | |
| High | CVE-2018-2617 | Oracle OSS Support Tools: security vulnerability | 7.5 | |
| High | CVE-2018-2615 | Oracle OSS Support Tools: security vulnerability | 8.8 | |
| Medium | CVE-2021-2303 | Oracle OSS Support Tools: security vulnerability | 4.9 | |
| High | CVE-2019-5443 | Curl: Code Injection | 7.8 | |
| Medium | CVE-2022-21405 | Oracle OSS Support Tools: security vulnerability | 5.5 |