Product by Oracle

Oracle Primavera Gateway

59 known vulnerabilities in Oracle Primavera Gateway (Oracle), 1 of them actively exploited (CISA KEV).

Vulnerabilities

Actively exploited (KEV)

Used by ransomware

Critical

Vulnerabilities

Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

Vulnerabilities in Oracle Primavera Gateway (Oracle)

Critical	CVE-2020-11023	Potential XSS vulnerability in jQuery In CISA KEValso in 48 other products	6.9	29.04.2020
Critical	CVE-2017-5645	Apache Log4j: Deserialization of Untrusted Data also in 74 other products	9.8	17.04.2017
Critical	CVE-2018-1270	Spring Framework: Code Injection also in 28 other products	9.8	06.04.2018
Critical	CVE-2019-17571	Apache Software Foundation Log4j: Deserialization of Untrusted Data also in 17 other products	9.8	20.12.2019
Critical	CVE-2018-1275	Spring Framework: Code Injection also in 19 other products	9.8	11.04.2018
Critical	CVE-2019-17195	Oracle PeopleSoft Enterprise PeopleTools: Authentication Bypass also in 14 other products	9.8	15.10.2019
Critical	CVE-2019-14540	FasterXML Jackson-databind: security vulnerability also in 18 other products	9.8	15.09.2019
Critical	CVE-2019-14379	FasterXML Jackson-databind: Remote Code Execution also in 23 other products	9.8	29.07.2019
Critical	CVE-2019-17495	SmartBear Swagger UI: Cross-Site Request Forgery (CSRF) also in 5 other products	9.8	10.10.2019
Critical	CVE-2019-16942	FasterXML Jackson-databind: security vulnerability also in 27 other products	9.8	01.10.2019
Critical	CVE-2019-17531	FasterXML Jackson-databind: security vulnerability also in 21 other products	9.8	12.10.2019
High	CVE-2020-5421	RFD Protection Bypass via jsessionid also in 36 other products	8.7	19.09.2020
High	CVE-2019-0227	Apache Axis 1.4: Server-Side Request Forgery (SSRF) also in 34 other products	7.5	01.05.2019
Critical	CVE-2019-16335	FasterXML Jackson-databind: security vulnerability also in 16 other products	9.8	15.09.2019
Critical	CVE-2019-16943	FasterXML Jackson-databind: security vulnerability also in 25 other products	9.8	01.10.2019
High	CVE-2020-36179	FasterXML Jackson-databind: security vulnerability also in 43 other products	8.1	06.01.2021
High	CVE-2020-35728	FasterXML Jackson-databind: security vulnerability also in 40 other products	8.1	27.12.2020
High	CVE-2019-10086	Apache Commons Beanutils: security vulnerability also in 58 other products	7.3	20.08.2019
Medium	CVE-2021-44832	Apache Log4j2 vulnerable to RCE via JDBC Appender when attacker controls configuration also in 21 other products	6.6	28.12.2021
High	CVE-2020-25649	Jackson-databind: Improper Restriction of XML External Entity Reference also in 39 other products	7.5	03.12.2020
High	CVE-2020-36188	FasterXML Jackson-databind: security vulnerability also in 45 other products	8.1	06.01.2021
High	CVE-2019-12402	Apache Commons Compress: Infinite Loop also in 19 other products	7.5	29.08.2019
High	CVE-2020-36184	FasterXML Jackson-databind: security vulnerability also in 45 other products	8.1	06.01.2021
High	CVE-2021-23337	Command Injection also in 24 other products	7.2	15.02.2021
High	CVE-2021-36090	Apache Commons Compress 1.0 to 1.20 denial of service vulnerability also in 34 other products	7.5	13.07.2021

All vulnerabilities in search

News

SSA-661247 V1.0: Apache Log4j Vulnerability (CVE-2021-44228, Log4Shell) - Impact to Siemens Productssiemens-productcert
SSA-479842 V1.0: Apache Log4j Vulnerabilities - Impact to Siemens Energy Sensformer (Platform, Basic and Advanced)siemens-productcert
SSA-501673 V1.0: Apache Log4j Denial of Service Vulnerability (CVE-2021-45105) - Impact to Siemens Productssiemens-productcert
SSA-784507 V1.0: Apache Log4j Vulnerability (CVE-2021-44832) via JDBC Appender - Impact to Siemens Productssiemens-productcert

All products by Oracle

Key figures

Vulnerabilities

News