FM
Product
Fusion Middleware Mapviewer
11
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 4Medium 3Low 0
Watch
Add Fusion Middleware Mapviewer to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-13990 | 9.8 | Jul 26 | initDocumentParser in xml/XMLSchedulingDataProcessor.java in Terracotta Quartz Scheduler through 2.3.0 allows XXE attacks via a job description Affected: 12.2.1.3.0 |
| CVE-2018-2943 | 9.8 | Jul 18 | Vulnerability in the Oracle Fusion Middleware MapViewer component of Oracle Fusion Middleware (subcomponent: Map Builder) Affected: 12.2.1.2.0; 12.2.1.3.0 |
| CVE-2018-8013 | 9.8 | May 24 | In Apache Batik 1.x before 1.10, when deserializing subclass of `AbstractDocument`, the class takes a string from the inputStream as the class name which then use it to call the… Affected: 12.2.1.2; 12.2.1.3 |
| CVE-2017-5645 | 9.8 | Apr 17 | In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary… Affected: 12.2.1.2; 12.2.1.3 |
| CVE-2017-3230 | 8.6 | Apr 24 | Vulnerability in the Oracle Fusion Middleware MapViewer component of Oracle Fusion Middleware (subcomponent: Map Builder) Affected: 11.1.1.9; 12.2.1.1; 12.2.1.2 |
| CVE-2020-11987 | 8.2 | Feb 24 | Apache Batik 1.13 is vulnerable to server-side request forgery, caused by improper input validation by the NodePickerPanel Affected: 12.2.1.4.0 |
| CVE-2020-14608 | 8.2 | Jul 15 | Vulnerability in the Oracle Fusion Middleware MapViewer product of Oracle Fusion Middleware (component: Tile Server) Affected: 12.2.1.3.0 |
| CVE-2019-17566 | 7.5 | Nov 12 | Apache Batik is vulnerable to server-side request forgery, caused by improper input validation by the "xlink:href" attributes Affected: 12.2.1.4.0 |
| CVE-2020-14607 | 6.1 | Jul 15 | Vulnerability in the Oracle Fusion Middleware MapViewer product of Oracle Fusion Middleware (component: Tile Server) Affected: 12.2.1.3.0; 12.2.1.4.0 |
| CVE-2015-9251 | 6.1 | Jan 18 | jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript… Affected: 12.2.1.3.0 |
| CVE-2021-29425 | 4.8 | Apr 13 | Possible limited path traversal vulnerabily in Apache Commons IO Affected: 12.2.1.4.0 |
Showing 11