Vulnerabilities (CVE)

Filtered by vendor Oracle Subscribe

Filtered by product Banking Trade Finance Process Management

CVSS v3 Filter

ALL

NONE (0.0) LOW (0.1 - 3.9) MEDIUM (4.0 - 6.9) HIGH (7.0 - 8.9) CRITICAL (9.0 - 10.0)

Search

Total 2 CVE

CVE	Vendors	Products	Updated	CVSS v2	CVSS v3
CVE-2022-22963	2 Oracle, Vmware	28 Banking Branch, Banking Cash Management, Banking Corporate Lending Process Management and 25 more	2022-07-28	7.5 HIGH	9.8 CRITICAL
In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is possible for a user to provide a specially crafted SpEL as a routing-expression that may result in remote code execution and access to local resources.
CVE-2019-0228	3 Apache, Fedoraproject, Oracle	14 James, Pdfbox, Fedora and 11 more	2022-04-29	7.5 HIGH	9.8 CRITICAL
Apache PDFBox 2.0.14 does not properly initialize the XML parser, which allows context-dependent attackers to conduct XML External Entity (XXE) attacks via a crafted XFDF.