Login Request a demo
ER
Product
Enterprise Repository
by Oracle · last CVE Jul 14, 2021
21
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities21In the news0Timeline
Severity mix
Critical 5High 11Medium 5Low 0
Severity
All severities21Critical5High11Medium5Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Enterprise Repository to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2018-1258
8.8
2%
May 11
Spring Framework version 5.0.5 when used in combination with any versions of Spring Security contains an authorization bypass when using method security
Affected: 11.1.1.7.0; 12.1.3.0.0
CVE-2020-11987
8.2
13%
Feb 24
Apache Batik 1.13 is vulnerable to server-side request forgery, caused by improper input validation by the NodePickerPanel
Affected: 11.1.1.7.0
CVE-2017-10048
8.2
2%
Aug 8
Vulnerability in the Oracle Enterprise Repository component of Oracle Fusion Middleware (subcomponent: Web Interface)
Affected: 11.1.1.7.0; 12.1.3.0.0
CVE-2019-17566
7.5
11%
Nov 12
Apache Batik is vulnerable to server-side request forgery, caused by improper input validation by the "xlink:href" attributes
Affected: 11.1.1.7.0
CVE-2020-11979
7.5
8%
Oct 1
As mitigation for CVE-2020-1945 Apache Ant 1.10.8 changed the permissions of temporary files it created so that only the current user was allowed to access them
Affected: 11.1.1.7.0
CVE-2020-11994
7.5
4%
Jul 8
Server-Side Template Injection and arbitrary file disclosure on Camel templating components
Affected: 11.1.1.7.0
CVE-2019-0188
7.5
10%
May 28
Apache Camel prior to 2.24.0 contains an XML external entity injection (XXE) vulnerability (CWE-611) due to using an outdated vulnerable JSON-lib library
Affected: 12.1.3.0.0
CVE-2019-0222
7.5
12%
Mar 28
In Apache ActiveMQ 5.0.0 - 5.15.8, unmarshalling corrupt MQTT frame can lead to broker Out of Memory exception making it unresponsive
Affected: 12.1.3.0.0
CVE-2018-3246
7.5
3%
Oct 17
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Web Services)
Affected: 12.1.3.0.0
CVE-2018-1000180
7.5
3%
Jun 5
Bouncy Castle BC 1.54 - 1.59, BC-FJA 1.0.0, BC-FJA 1.0.1 and earlier have a flaw in the Low-level interface to RSA key pair generator, specifically RSA Key Pairs generated in…
Affected: 12.1.3.0.0
CVE-2018-11775
7.4
7%
Sep 10
TLS hostname verification when using the Apache ActiveMQ Client before 5.15.6 was missing which could make the client vulnerable to a MITM attack between a Java application using…
Affected: 12.1.3.0.0
Showing 11