Banking Enterprise Default Managment vulnerabilities

Product

Banking Enterprise Default Managment

by Oracle · last CVE Jul 19, 2021

CVEs

On KEV

6.1

Max CVSS

New 30D

Severity mix

Critical 0High 0Medium 4Low 0

Severity

Exploitation

Watch

Add Banking Enterprise Default Managment to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2021-35043	6.1	2%	Jul 19	OWASP AntiSamy before 1.6.4 allows XSS via HTML attributes when using the HTML output serializer (XHTML is not affected) Affected: 2.3.0 through 2.4.0
CVE-2020-9281	6.1	4%	Mar 7	A cross-site scripting (XSS) vulnerability in the HTML Data Processor for CKEditor 4.0 before 4.14 allows remote attackers to inject arbitrary web script through a crafted… Affected: 2.3.0 through 2.4.0
CVE-2019-10219	6.1	2%	Nov 8	A vulnerability was found in Hibernate-Validator Affected: 2.3.0 through 2.4.0
CVE-2021-29425	4.8	11%	Apr 13	Possible limited path traversal vulnerabily in Apache Commons IO Affected: 2.3.0 through 2.4.0