Product by Oracle

Oracle Siebel UI Framework

54 known vulnerabilities in Oracle Siebel UI Framework (Oracle), 1 of them actively exploited (CISA KEV).

Vulnerabilities

Actively exploited (KEV)

Used by ransomware

Critical

Vulnerabilities

Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

Vulnerabilities in Oracle Siebel UI Framework (Oracle)

Critical	CVE-2020-1938	Apache Tomcat Improper Privilege Management Vulnerability In CISA KEValso in 20 other products	9.8	24.02.2020
Critical	CVE-2017-5645	Apache Log4j: Deserialization of Untrusted Data also in 74 other products	9.8	17.04.2017
Critical	CVE-2018-14718	FasterXML Jackson-databind: Deserialization of Untrusted Data also in 24 other products	9.8	02.01.2019
Critical	CVE-2019-20330	FasterXML Jackson-databind: security vulnerability also in 29 other products	9.8	03.01.2020
Critical	CVE-2019-14379	FasterXML Jackson-databind: Remote Code Execution also in 23 other products	9.8	29.07.2019
Critical	CVE-2019-16942	FasterXML Jackson-databind: security vulnerability also in 27 other products	9.8	01.10.2019
High	CVE-2019-0227	Apache Axis 1.4: Server-Side Request Forgery (SSRF) also in 34 other products	7.5	01.05.2019
High	CVE-2020-13935	Apache Tomcat: Infinite Loop also in 17 other products	7.5	14.07.2020
High	CVE-2020-13934	Apache Tomcat: Denial of Service also in 13 other products	7.5	14.07.2020
Medium	CVE-2020-11022	jQuery has a potential XSS vulnerability also in 63 other products	6.9	29.04.2020
High	CVE-2020-11996	Apache Tomcat: security vulnerability also in 8 other products	7.5	26.06.2020
High	CVE-2020-9484	Apache Tomcat: Deserialization of Untrusted Data also in 25 other products	7.0	20.05.2020
Medium	CVE-2021-44832	Apache Log4j2 vulnerable to RCE via JDBC Appender when attacker controls configuration also in 21 other products	6.6	28.12.2021
High	CVE-2021-25122	Apache Tomcat h2c request mix-up also in 13 other products	7.5	01.03.2021
High	CVE-2020-24616	FasterXML Jackson-databind: security vulnerability also in 25 other products	8.1	25.08.2020
High	CVE-2020-24750	FasterXML Jackson-databind: security vulnerability also in 26 other products	8.1	17.09.2020
High	CVE-2019-14439	FasterXML Jackson-databind: security vulnerability also in 17 other products	7.5	30.07.2019
Medium	CVE-2019-11358	Drupal core: security vulnerability also in 89 other products	6.1	19.04.2019
Medium	CVE-2021-45105	Apache Log4j2 does not always protect from infinite recursion in lookup evaluation also in 107 other products	5.9	18.12.2021
High	CVE-2021-25329	Incomplete fix for CVE-2020-9484 also in 13 other products	7.0	01.03.2021
Medium	CVE-2015-9251	jQuery: Cross-Site Scripting (XSS) also in 45 other products	6.1	18.01.2018
Medium	CVE-2016-7103	Jquery UI: Cross-Site Scripting (XSS) also in 12 other products	6.1	15.03.2017
Medium	CVE-2018-8032	Apache Axis: Cross-Site Scripting (XSS) also in 36 other products	6.1	02.08.2018
High	CVE-2021-2351	Oracle WebLogic Server: security vulnerability also in 97 other products	8.3	20.07.2021
Medium	CVE-2020-1935	Apache Tomcat: security vulnerability also in 20 other products	4.8	24.02.2020

All vulnerabilities in search

News

SSA-661247 V1.0: Apache Log4j Vulnerability (CVE-2021-44228, Log4Shell) - Impact to Siemens Productssiemens-productcert
SSA-479842 V1.0: Apache Log4j Vulnerabilities - Impact to Siemens Energy Sensformer (Platform, Basic and Advanced)siemens-productcert
SSA-501673 V1.0: Apache Log4j Denial of Service Vulnerability (CVE-2021-45105) - Impact to Siemens Productssiemens-productcert
SSA-784507 V1.0: Apache Log4j Vulnerability (CVE-2021-44832) via JDBC Appender - Impact to Siemens Productssiemens-productcert

All products by Oracle

Key figures

Vulnerabilities

News