RD
Product
Rest Data Services
On CISA KEVExploited in the wild
32
CVEs
1
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 5High 5Medium 21Low 1
Watch
Add Rest Data Services to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-11023 In wildKEV | 6.1 | Apr 29 | Potential XSS vulnerability in jQuery Affected: 11.2.0.4; 12.1.0.2; 12.2.0.1; 18c; 19c |
| CVE-2020-14744 | 6.5 | Oct 21 | Vulnerability in the Oracle REST Data Services product of Oracle REST Data Services (component: General) Affected: before 20.2.1; 11.2.0.4; 12.1.0.2; 12.2.0.1; 18c; 19c |
| CVE-2025-30756 | 6.1 | Jul 15 | Vulnerability in Oracle REST Data Services (component: General) Affected: 24.2.0 |
| CVE-2021-41184 | 6.1 | Oct 26 | jQuery-UI is the official jQuery user interface library Affected: before 22.1.1; 22.1.1 |
| CVE-2021-41183 | 6.1 | Oct 26 | jQuery-UI is the official jQuery user interface library Affected: before 22.1.1; 22.1.1 |
| CVE-2021-41182 | 6.1 | Oct 26 | jQuery-UI is the official jQuery user interface library Affected: before 22.1.1; 22.1.1 |
| CVE-2019-10241 | 6.1 | Apr 22 | In Eclipse Jetty version 9.2.26 and older, 9.3.25 and older, and 9.4.15 and older, the server is vulnerable to XSS conditions if a remote client USES a specially formatted URL… Affected: 11.2.0.4; 12.1.0.2; 12.2.0.1; 18c |
| CVE-2021-32014 | 5.5 | Jul 19 | SheetJS and SheetJS Pro through 0.16.9 allows attackers to cause a denial of service (CPU consumption) via a crafted .xlsx document that is mishandled when read by xlsx.js Affected: before 21.2.4 |
| CVE-2021-32013 | 5.5 | Jul 19 | SheetJS and SheetJS Pro through 0.16.9 allows attackers to cause a denial of service (memory consumption) via a crafted .xlsx document that is mishandled when read by xlsx.js… Affected: before 21.2.4 |
| CVE-2021-32012 | 5.5 | Jul 19 | SheetJS and SheetJS Pro through 0.16.9 allows attackers to cause a denial of service (memory consumption) via a crafted .xlsx document that is mishandled when read by xlsx.js… Affected: before 21.2.4 |
| CVE-2026-46843 | 5.3 | May 28 | Vulnerability in Oracle REST Data Services (component: Core) Affected: 24.2.0 through 26.1.0 |
| CVE-2026-46842 | 5.3 | May 28 | Vulnerability in Oracle REST Data Services (component: Core) Affected: 24.2.0 through 26.1.0 |
| CVE-2026-46841 | 5.3 | May 28 | Vulnerability in Oracle REST Data Services (component: General) Affected: 24.2.0 through 26.1.0 |
| CVE-2026-46830 | 5.3 | May 28 | Vulnerability in Oracle REST Data Services (component: Mongoapi) Affected: 24.2.0 through 26.1.0 |
| CVE-2021-34429 | 5.3 | Jul 15 | For Eclipse Jetty versions 9.4.37-9.4.42, 10.0.1-10.0.5 & 11.0.1-11.0.5, URIs can be crafted using some encoded characters to access the content of the WEB-INF directory and/or… Affected: before 22.1.1 |
| CVE-2021-28169 | 5.3 | Jun 9 | For Eclipse Jetty versions <= 9.4.40, <= 10.0.2, <= 11.0.2, it is possible for requests to the ConcatServlet with a doubly encoded path to access protected resources within the… Affected: before 21.3 |
| CVE-2020-27223 | 5.3 | Feb 26 | In Eclipse Jetty 9.4.6.v20170531 to 9.4.36.v20210114 (inclusive), 10.0.0, and 11.0.0 when Jetty handles a request containing multiple Accept headers with a large number of… Affected: before 20.4.3.050.1904 |
| CVE-2019-10246 | 5.3 | Apr 22 | In Eclipse Jetty version 9.2.27, 9.3.26, and 9.4.16, the server running on Windows is vulnerable to exposure of the fully qualified Base Resource directory name on Windows to a… Affected: 11.2.0.4; 12.1.0.2; 12.2.0.1; 18c |
| CVE-2021-29425 | 4.8 | Apr 13 | Possible limited path traversal vulnerabily in Apache Commons IO Affected: before 21.2; 21.3 |
| CVE-2020-27218 | 4.8 | Nov 28 | In Eclipse Jetty version 9.4.0.RC0 to 9.4.34.v20201102, 10.0.0.alpha0 to 10.0.0.beta2, and 11.0.0.alpha0 to 11.0.0.beta2, if GZIP request body inflation is enabled and requests… Affected: before 20.4.3.050.1904 |
| CVE-2020-14745 | 4.3 | Oct 21 | Vulnerability in the Oracle REST Data Services product of Oracle REST Data Services (component: General) Affected: before 20.2.1; 11.2.0.4; 12.1.0.2; 12.2.0.1; 18c; 19c |
Showing 21