BP
Product
Banking Party Management
16
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 5Medium 11Low 0
Watch
Add Banking Party Management to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-23437 | 6.5 | Jan 24 | Infinite loop within Apache XercesJ xml parser Affected: 2.7.0 |
| CVE-2021-43797 | 6.5 | Dec 9 | HTTP fails to validate against control chars in header names which may lead to HTTP request smuggling Affected: 2.7.0 |
| CVE-2021-26272 | 6.5 | Jan 26 | It was possible to execute a ReDoS-type attack inside CKEditor 4 before 4.16 by persuading a victim to paste crafted URL-like text into the editor, and then press Enter or Space… Affected: 2.7.0 |
| CVE-2021-35043 | 6.1 | Jul 19 | OWASP AntiSamy before 1.6.4 allows XSS via HTML attributes when using the HTML output serializer (XHTML is not affected) Affected: 2.7.0 |
| CVE-2020-27193 | 6.1 | Nov 12 | A cross-site scripting (XSS) vulnerability in the Color Dialog plugin for CKEditor 4.15.0 allows remote attackers to run arbitrary web script after persuading a user to copy and… Affected: 2.7.0 |
| CVE-2019-10219 | 6.1 | Nov 8 | A vulnerability was found in Hibernate-Validator Affected: 2.7.0 |
| CVE-2021-45105 | 5.9 | Dec 18 | Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups Affected: 2.7.0 |
| CVE-2021-37695 | 5.4 | Aug 13 | ckeditor is an open source WYSIWYG HTML editor with rich content support Affected: 2.7.0 |
| CVE-2021-32809 | 5.4 | Aug 12 | ckeditor is an open source WYSIWYG HTML editor with rich content support Affected: 2.7.0 |
| CVE-2021-32808 | 5.4 | Aug 12 | ckeditor is an open source WYSIWYG HTML editor with rich content support Affected: 2.7.0 |
| CVE-2021-29425 | 4.8 | Apr 13 | Possible limited path traversal vulnerabily in Apache Commons IO Affected: 2.7.0 |
Showing 11