DI
Product
Data Integrator
43
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 10High 20Medium 8Low 5
Watch
Add Data Integrator to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-47056 | 10.0 | Jul 21 | Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Rest Service) Affected: 12.2.1.4.0; 14.1.2.0.0 |
| CVE-2026-60999 | 9.8 | Jul 21 | Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Rest Service) Affected: 12.2.1.4.0; 14.1.2.0.0 |
| CVE-2020-10683 | 9.8 | May 1 | dom4j before 2.0.3 and 2.1.x before 2.1.3 allows external DTDs and External Entities by default, which might enable XXE attacks Affected: 12.2.1.3.0; 12.2.1.4.0 |
| CVE-2019-17195 | 9.8 | Oct 15 | Connect2id Nimbus JOSE+JWT before v7.9 can throw various uncaught exceptions while parsing a JWT, which could result in an application crash (potential information disclosure) or… Affected: 12.2.1.4.0 |
| CVE-2018-1000613 | 9.8 | Jul 9 | Legion of the Bouncy Castle Legion of the Bouncy Castle Java Cryptography APIs 1.58 up to but not including 1.60 contains a CWE-470: Use of Externally-Controlled Input to Select… Affected: 12.2.1.3.0 |
| CVE-2018-8013 | 9.8 | May 24 | In Apache Batik 1.x before 1.10, when deserializing subclass of `AbstractDocument`, the class takes a string from the inputStream as the class name which then use it to call the… Affected: 12.2.1.3.0 |
| CVE-2018-9019 | 9.8 | May 22 | SQL Injection vulnerability in Dolibarr before version 7.0.2 allows remote attackers to execute arbitrary SQL commands via the sortfield parameter to… Affected: 11.1.1.9.0; 12.2.1.3.0; 12.2.1.4.0 |
| CVE-2018-7318 | 9.8 | Feb 22 | SQL Injection exists in the CheckList 1.1.1 component for Joomla! via the title_search, tag_search, name_search, description_search, or filter_order parameter Affected: 11.1.1.9.0; 12.2.1.3.0; 12.2.1.4.0 |
| CVE-2015-8965 | 9.8 | Apr 6 | Rogue Wave JViews before 8.8 patch 21 and 8.9 before patch 1 allows remote attackers to execute arbitrary Java code that exists in the classpath, such as test code or… Affected: 12.2.1.3.0; 12.2.1.4.0 |
| CVE-2017-5611 | 9.8 | Jan 30 | SQL injection vulnerability in wp-includes/class-wp-query.php in WP_Query in WordPress before 4.7.2 allows remote attackers to execute arbitrary SQL commands by leveraging the… Affected: 11.1.1.9.0; 12.2.1.3.0; 12.2.1.4.0 |
| CVE-2026-60723 | 8.4 | Jul 21 | Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Market Place) Affected: 12.2.1.4.0; 14.1.2.0.0 |
| CVE-2026-35262 | 8.3 | Jun 16 | Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Market Place) Affected: 12.2.1.4.0; 14.1.2.0.0 |
| CVE-2021-2351 | 8.3 | Jul 21 | Vulnerability in the Advanced Networking Option component of Oracle Database Server Affected: 12.2.1.3.0; 12.2.1.4.0 |
| CVE-2021-2018 | 8.3 | Jan 20 | Vulnerability in the Advanced Networking Option component of Oracle Database Server Affected: 11.1.1.9.0; 12.2.1.3.0; 12.2.1.4.0 |
| CVE-2021-2015 | 8.2 | Jan 20 | Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Worklist) Affected: 12.2.1.3.0; 12.2.1.4.0 |
| CVE-2020-36182 | 8.1 | Jan 7 | FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to… Affected: 12.2.1.4.0 |
| CVE-2020-36180 | 8.1 | Jan 7 | FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to… Affected: 12.2.1.4.0 |
| CVE-2020-36179 | 8.1 | Jan 7 | FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to… Affected: 12.2.1.4.0 |
| CVE-2020-36184 | 8.1 | Jan 6 | FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to… Affected: 12.2.1.4.0 |
| CVE-2020-36181 | 8.1 | Jan 6 | FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to… Affected: 12.2.1.4.0 |
| CVE-2020-36183 | 8.1 | Jan 6 | FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to… Affected: 12.2.1.4.0 |
| CVE-2020-36185 | 8.1 | Jan 6 | FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to… Affected: 12.2.1.4.0 |
| CVE-2020-36186 | 8.1 | Jan 6 | FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to… Affected: 12.2.1.4.0 |
| CVE-2020-36187 | 8.1 | Jan 6 | FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to… Affected: 12.2.1.4.0 |
| CVE-2020-36188 | 8.1 | Jan 6 | FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to… Affected: 12.2.1.4.0 |
| CVE-2020-35728 | 8.1 | Dec 27 | FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to… Affected: 12.2.1.4.0 |
| CVE-2026-60625 | 7.8 | Jul 21 | Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Studio) Affected: 12.2.1.4.0; 14.1.2.0.0 |
| CVE-2026-60320 | 7.5 | Jul 21 | Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Patchset Assistant) Affected: 12.2.1.4.0; 14.1.2.0.0 |
| CVE-2020-11979 | 7.5 | Oct 1 | As mitigation for CVE-2020-1945 Apache Ant 1.10.8 changed the permissions of temporary files it created so that only the current user was allowed to access them Affected: 12.2.1.3.0; 12.2.1.4.0 |
| CVE-2019-17359 | 7.5 | Oct 8 | The ASN.1 parser in Bouncy Castle Crypto (aka BC Java) 1.63 can trigger a large attempted memory allocation, and resultant OutOfMemoryError error, via crafted ASN.1 data Affected: 12.2.1.4.0 |
| CVE-2026-60319 | 6.5 | Jul 21 | Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Patchset Assistant) Affected: 12.2.1.4.0; 14.1.2.0.0 |
| CVE-2019-2943 | 6.5 | Oct 16 | Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Studio) Affected: 12.2.1.3.0 |
| CVE-2020-1945 | 6.3 | May 14 | Apache Ant 1.1 to 1.9.14 and 1.10.0 to 1.10.7 uses the default temporary directory identified by the Java system property java.io.tmpdir for several tasks and may thus leak… Affected: 12.2.1.3.0; 12.2.1.4.0 |
| CVE-2021-45105 | 5.9 | Dec 18 | Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups Affected: 12.2.1.3.0; 12.2.1.4.0 |
| CVE-2016-5602 | 5.7 | Oct 25 | Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, 12.1.3.0.0, 12.2.1.0.0, and 12.2.1.1.0 allows remote… Affected: 11.1.1.7.0; 11.1.1.9.0; 12.1.3.0.0; 12.2.1.0.0; 12.2.1.1.0 |
| CVE-2020-13956 | 5.3 | Dec 2 | Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in request URIs passed to the library as java.net.URI object and pick… Affected: 12.2.1.3.0; 12.2.1.4.0 |
| CVE-2019-10247 | 5.3 | Apr 22 | In Eclipse Jetty version 7.x, 8.x, 9.2.27 and older, 9.3.26 and older, and 9.4.16 and older, the server running on any OS and Jetty version combination will reveal the configured… Affected: 12.2.1.3.0; 12.2.1.4.0 |
| CVE-2019-10246 | 5.3 | Apr 22 | In Eclipse Jetty version 9.2.27, 9.3.26, and 9.4.16, the server running on Windows is vulnerable to exposure of the fully qualified Base Resource directory name on Windows to a… Affected: 12.2.1.3.0; 12.2.1.4.0 |
| CVE-2020-9488 | 3.7 | Apr 27 | Improper validation of certificate with host mismatch in Apache Log4j SMTP appender Affected: 12.2.1.3.0; 12.2.1.4.0 |
| CVE-2026-60318 | 3.3 | Jul 21 | Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Patchset Assistant) Affected: 12.2.1.4.0; 14.1.2.0.0 |
| CVE-2020-8908 | 3.3 | Dec 10 | A temp directory creation vulnerability exists in all versions of Guava, allowing an attacker with access to the machine to potentially access data in a temporary directory… Affected: 12.2.1.3.0; 12.2.1.4.0 |
| CVE-2019-2720 | 3.1 | Apr 23 | Vulnerability in the Oracle Data Integrator component of Oracle Fusion Middleware (subcomponent: ODI Tools) Affected: 11.1.1.9.0; 12.2.1.3.0 |
| CVE-2016-5618 | 3.1 | Oct 25 | Unspecified vulnerability in the Oracle Data Integrator component in Oracle Fusion Middleware 11.1.1.7.0, 11.1.1.9.0, 12.1.2.0.0, 12.1.3.0.0, 12.2.1.0.0, and 12.2.1.1.0 allows… Affected: 11.1.1.7.0; 11.1.1.9.0; 12.1.2.0.0; 12.1.3.0.0; 12.2.1.0.0; 12.2.1.1.0 |
Showing 43