FS
Product
Financial Services Crime And Compliance Management Studio
On CISA KEVExploited in the wildRansomware-linked
22
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 12Medium 7Low 0
Watch
Add Financial Services Crime And Compliance Management Studio to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-22971 | 6.5 | May 12 | In spring framework versions prior to 5.3.20+ , 5.2.22+ and old unsupported versions, application with a STOMP over WebSocket endpoint is vulnerable to a denial of service attack… Affected: 8.0.8.2.0; 8.0.8.3.0 |
| CVE-2022-23437 | 6.5 | Jan 24 | Infinite loop within Apache XercesJ xml parser Affected: 8.0.8.2.0; 8.0.8.3.0 |
| CVE-2022-24823 | 5.5 | May 6 | Netty is an open-source, asynchronous event-driven network application framework Affected: 8.0.8.2.0; 8.0.8.3.0 |
| CVE-2022-22976 | 5.3 | May 19 | Spring Security versions 5.5.x prior to 5.5.7, 5.6.x prior to 5.6.4, and earlier unsupported versions contain an integer overflow vulnerability Affected: 8.0.8.2.0; 8.0.8.3.0 |
| CVE-2022-22970 | 5.3 | May 12 | In spring framework versions prior to 5.3.20+ , 5.2.22+ and old unsupported versions, applications that handle file uploads are vulnerable to DoS attack if they rely on data… Affected: 8.0.8.2.0; 8.0.8.3.0 |
| CVE-2021-34429 | 5.3 | Jul 15 | For Eclipse Jetty versions 9.4.37-9.4.42, 10.0.1-10.0.5 & 11.0.1-11.0.5, URIs can be crafted using some encoded characters to access the content of the WEB-INF directory and/or… Affected: 8.0.8.2.0; 8.0.8.3.0 |
| CVE-2020-28500 | 5.3 | Feb 15 | Regular Expression Denial of Service (ReDoS) Affected: 8.0.8.2.0; 8.0.8.3.0 |
Showing 7