ER
Product
Enterprise Repository
21
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 11Medium 5Low 0
Watch
Add Enterprise Repository to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-1994 | 9.8 | Jan 20 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services) Affected: 11.1.1.7.0 |
| CVE-2020-11998 | 9.8 | Sep 10 | A regression has been introduced in the commit preventing JMX re-bind Affected: 11.1.1.7.0 |
| CVE-2019-2904 | 9.8 | Oct 16 | Vulnerability in the Oracle JDeveloper and ADF product of Oracle Fusion Middleware (component: ADF Faces) Affected: 11.1.1.7.0 |
| CVE-2018-1000613 | 9.8 | Jul 9 | Legion of the Bouncy Castle Legion of the Bouncy Castle Java Cryptography APIs 1.58 up to but not including 1.60 contains a CWE-470: Use of Externally-Controlled Input to Select… Affected: 11.1.1.7.0; 12.1.3.0.0 |
| CVE-2018-8013 | 9.8 | May 24 | In Apache Batik 1.x before 1.10, when deserializing subclass of `AbstractDocument`, the class takes a string from the inputStream as the class name which then use it to call the… Affected: 11.1.1.7.0; 12.1.3.0.0 |
| CVE-2018-1258 | 8.8 | May 11 | Spring Framework version 5.0.5 when used in combination with any versions of Spring Security contains an authorization bypass when using method security Affected: 11.1.1.7.0; 12.1.3.0.0 |
| CVE-2020-11987 | 8.2 | Feb 24 | Apache Batik 1.13 is vulnerable to server-side request forgery, caused by improper input validation by the NodePickerPanel Affected: 11.1.1.7.0 |
| CVE-2017-10048 | 8.2 | Aug 8 | Vulnerability in the Oracle Enterprise Repository component of Oracle Fusion Middleware (subcomponent: Web Interface) Affected: 11.1.1.7.0; 12.1.3.0.0 |
| CVE-2019-17566 | 7.5 | Nov 12 | Apache Batik is vulnerable to server-side request forgery, caused by improper input validation by the "xlink:href" attributes Affected: 11.1.1.7.0 |
| CVE-2020-11979 | 7.5 | Oct 1 | As mitigation for CVE-2020-1945 Apache Ant 1.10.8 changed the permissions of temporary files it created so that only the current user was allowed to access them Affected: 11.1.1.7.0 |
| CVE-2020-11994 | 7.5 | Jul 8 | Server-Side Template Injection and arbitrary file disclosure on Camel templating components Affected: 11.1.1.7.0 |
| CVE-2019-0188 | 7.5 | May 28 | Apache Camel prior to 2.24.0 contains an XML external entity injection (XXE) vulnerability (CWE-611) due to using an outdated vulnerable JSON-lib library Affected: 12.1.3.0.0 |
| CVE-2019-0222 | 7.5 | Mar 28 | In Apache ActiveMQ 5.0.0 - 5.15.8, unmarshalling corrupt MQTT frame can lead to broker Out of Memory exception making it unresponsive Affected: 12.1.3.0.0 |
| CVE-2018-3246 | 7.5 | Oct 17 | Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Web Services) Affected: 12.1.3.0.0 |
| CVE-2018-1000180 | 7.5 | Jun 5 | Bouncy Castle BC 1.54 - 1.59, BC-FJA 1.0.0, BC-FJA 1.0.1 and earlier have a flaw in the Low-level interface to RSA key pair generator, specifically RSA Key Pairs generated in… Affected: 12.1.3.0.0 |
| CVE-2018-11775 | 7.4 | Sep 10 | TLS hostname verification when using the Apache ActiveMQ Client before 5.15.6 was missing which could make the client vulnerable to a MITM attack between a Java application using… Affected: 12.1.3.0.0 |
| CVE-2020-1945 | 6.3 | May 14 | Apache Ant 1.1 to 1.9.14 and 1.10.0 to 1.10.7 uses the default temporary directory identified by the Java system property java.io.tmpdir for several tasks and may thus leak… Affected: 11.1.1.7.0 |
| CVE-2020-1941 | 6.1 | May 14 | In Apache ActiveMQ 5.0.0 to 5.15.11, the webconsole admin GUI is open to XSS, in the view that lists the contents of a queue Affected: 11.1.1.7.0 |
| CVE-2021-36374 | 5.5 | Jul 14 | When reading a specially crafted ZIP archive, or a derived formats, an Apache Ant build can be made to allocate large amounts of memory that leads to an out of memory error, even… Affected: 11.1.1.7.0 |
| CVE-2021-36373 | 5.5 | Jul 14 | When reading a specially crafted TAR archive an Apache Ant build can be made to allocate large amounts of memory that finally leads to an out of memory error, even for small… Affected: 11.1.1.7.0 |
| CVE-2019-12415 | 5.5 | Oct 23 | In Apache POI up to 4.1.0, when using the tool XSSFExportToXml to convert user-provided Microsoft Excel documents, a specially crafted document can allow an attacker to read files… Affected: 12.1.3.0.0 |
Showing 21