BI
Product
Business Intelligence
On CISA KEVExploited in the wild
98
CVEs
3
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 41Medium 47Low 4
Watch
Add Business Intelligence to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-17530 In wildKEV | 9.8 | Dec 11 | Apache Struts Remote Code Execution Vulnerability Affected: 12.2.1.3.0; 12.2.1.4.0 |
| CVE-2022-23305 | 9.8 | Jan 18 | By design, the JDBCAppender in Log4j 1.2.x accepts an SQL statement as a configuration parameter where the values to be inserted are converters from PatternLayout Affected: 5.9.0.0.0; 12.2.1.3.0; 12.2.1.4.0 |
| CVE-2021-2456 | 9.8 | Jul 21 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Web General) Affected: 12.2.1.4.0 |
| CVE-2020-9480 | 9.8 | Jun 23 | In Apache Spark 2.4.5 and earlier, a standalone resource manager's master may be configured to require authentication (spark.authenticate) via a shared secret Affected: 5.5.0.0.0 |
| CVE-2020-2950 | 9.8 | Apr 15 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Web General) Affected: 5.5.0.0.0; 11.1.1.9.0; 12.2.1.3.0; 12.2.1.4.0 |
| CVE-2018-8013 | 9.8 | May 24 | In Apache Batik 1.x before 1.10, when deserializing subclass of `AbstractDocument`, the class takes a string from the inputStream as the class name which then use it to call the… Affected: 11.1.1.7.0; 11.1.1.9.0; 12.2.1.3.0; 12.2.1.4.0 |
Showing 6