BP
Product
Business Process Management Suite
by Oracle · last CVE Jul 21, 2026
32
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 11High 13Medium 8Low 0
Watch

Add Business Process Management Suite to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-1945
6.3
2%
May 14
Apache Ant 1.1 to 1.9.14 and 1.10.0 to 1.10.7 uses the default temporary directory identified by the Java system property java.io.tmpdir for several tasks and may thus leak…
Affected: 12.2.1.3.0; 12.2.1.4.0
CVE-2026-34284
6.1
0%
Apr 21
Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: Human workflow 11g+)
Affected: 12.2.1.4.0; 14.1.2.0.0
CVE-2019-10219
6.1
2%
Nov 8
A vulnerability was found in Hibernate-Validator
Affected: 12.2.1.3.0; 12.2.1.4.0
CVE-2019-11358
6.1
87%
Apr 20
jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution
Affected: 12.2.1.3.0; 12.2.1.4.0
CVE-2015-9251
6.1
30%
Jan 18
jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript…
Affected: 11.1.1.9.0; 12.1.3.0.0; 12.2.1.3.0
CVE-2020-17521
5.5
1%
Dec 7
Apache Groovy provides extension methods to aid with creating temporary directories
Affected: 12.2.1.3.0; 12.2.1.4.0
CVE-2020-1951
5.5
3%
Mar 23
A carefully crafted or corrupt PSD file can cause an infinite loop in Apache Tika's PSDParser in versions 1.0-1.23
Affected: 12.2.1.3.0; 12.2.1.4.0
CVE-2020-1950
5.5
3%
Mar 23
A carefully crafted or corrupt PSD file can cause excessive memory usage in Apache Tika's PSDParser in versions 1.0-1.23
Affected: 12.2.1.3.0; 12.2.1.4.0
Showing 8