CL
Product
Clusterware
5
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 0Medium 2Low 0
Watch
Add Clusterware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-11307 | 9.8 | Jul 9 | An issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.5 Affected: 12.1.0.2.0 |
| CVE-2018-14719 | 9.8 | Jan 2 | FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to execute arbitrary code by leveraging failure to block the blaze-ds-opt and blaze-ds-core classes from… Affected: 12.1.0.2.0 |
| CVE-2017-15095 | 9.8 | Feb 6 | A deserialization flaw was discovered in the jackson-databind in versions before 2.8.10 and 2.9.1, which could allow an unauthenticated user to perform code execution by sending… Affected: 12.1.0.2.0 |
| CVE-2018-1000873 | 6.5 | Dec 20 | Fasterxml Jackson version Before 2.9.8 contains a CWE-20: Improper Input Validation vulnerability in Jackson-Modules-Java8 that can result in Causes a denial-of-service (DoS) Affected: 12.1.0.2.0 |
| CVE-2019-2860 | 5.6 | Jul 23 | Vulnerability in the Oracle Clusterware component of Oracle Support Tools (subcomponent: Trace File Analyzer (TFA) Collector) Affected: 12.1.0.2.0 |
Showing 5
