Banking Enterprise Product Manufacturing vulnerabilities

Product

Banking Enterprise Product Manufacturing

by Oracle · last CVE Oct 23, 2019

CVEs

On KEV

9.8

Max CVSS

New 30D

Severity mix

Critical 2High 0Medium 2Low 0

Severity

Exploitation

Watch

Add Banking Enterprise Product Manufacturing to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2019-2904	9.8	14%	Oct 16	Vulnerability in the Oracle JDeveloper and ADF product of Oracle Fusion Middleware (component: ADF Faces) Affected: 2.7.0; 2.8.0
CVE-2019-13990	9.8	17%	Jul 26	initDocumentParser in xml/XMLSchedulingDataProcessor.java in Terracotta Quartz Scheduler through 2.3.0 allows XXE attacks via a job description Affected: 2.7.0; 2.8.0
CVE-2019-17091	6.1	2%	Oct 2	faces/context/PartialViewContextImpl.java in Eclipse Mojarra, as used in Mojarra for Eclipse EE4J before 2.3.10 and Mojarra JavaServer Faces before 2.2.20, allows Reflected XSS… Affected: 2.7.0; 2.8.0
CVE-2019-12415	5.5	1%	Oct 23	In Apache POI up to 4.1.0, when using the tool XSSFExportToXml to convert user-provided Microsoft Excel documents, a specially crafted document can allow an attacker to read files… Affected: 2.7.0; 2.8.0