DI
Product
Data Integrator
43
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 10High 20Medium 8Low 5
Watch
Add Data Integrator to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-47056 | 10.0 | Jul 21 | Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Rest Service) Affected: 12.2.1.4.0; 14.1.2.0.0 |
| CVE-2026-60999 | 9.8 | Jul 21 | Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Rest Service) Affected: 12.2.1.4.0; 14.1.2.0.0 |
| CVE-2020-10683 | 9.8 | May 1 | dom4j before 2.0.3 and 2.1.x before 2.1.3 allows external DTDs and External Entities by default, which might enable XXE attacks Affected: 12.2.1.3.0; 12.2.1.4.0 |
| CVE-2019-17195 | 9.8 | Oct 15 | Connect2id Nimbus JOSE+JWT before v7.9 can throw various uncaught exceptions while parsing a JWT, which could result in an application crash (potential information disclosure) or… Affected: 12.2.1.4.0 |
| CVE-2018-1000613 | 9.8 | Jul 9 | Legion of the Bouncy Castle Legion of the Bouncy Castle Java Cryptography APIs 1.58 up to but not including 1.60 contains a CWE-470: Use of Externally-Controlled Input to Select… Affected: 12.2.1.3.0 |
| CVE-2018-8013 | 9.8 | May 24 | In Apache Batik 1.x before 1.10, when deserializing subclass of `AbstractDocument`, the class takes a string from the inputStream as the class name which then use it to call the… Affected: 12.2.1.3.0 |
| CVE-2018-9019 | 9.8 | May 22 | SQL Injection vulnerability in Dolibarr before version 7.0.2 allows remote attackers to execute arbitrary SQL commands via the sortfield parameter to… Affected: 11.1.1.9.0; 12.2.1.3.0; 12.2.1.4.0 |
| CVE-2018-7318 | 9.8 | Feb 22 | SQL Injection exists in the CheckList 1.1.1 component for Joomla! via the title_search, tag_search, name_search, description_search, or filter_order parameter Affected: 11.1.1.9.0; 12.2.1.3.0; 12.2.1.4.0 |
| CVE-2015-8965 | 9.8 | Apr 6 | Rogue Wave JViews before 8.8 patch 21 and 8.9 before patch 1 allows remote attackers to execute arbitrary Java code that exists in the classpath, such as test code or… Affected: 12.2.1.3.0; 12.2.1.4.0 |
| CVE-2017-5611 | 9.8 | Jan 30 | SQL injection vulnerability in wp-includes/class-wp-query.php in WP_Query in WordPress before 4.7.2 allows remote attackers to execute arbitrary SQL commands by leveraging the… Affected: 11.1.1.9.0; 12.2.1.3.0; 12.2.1.4.0 |
Showing 10