Oracle Agile Product Lifecycle Management Integration Pack vulnerabilities

3 vulnerabilities

Known vulnerabilities in Oracle Agile Product Lifecycle Management Integration Pack, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

PrioritiseCVE-2020-25649apache · iotdb +139 more5y agoapache iotdbA flaw was found in FasterXML Jackson Databind, where it did not have entity expansion secured properly. This flaw allows vulnerability to XML external entity (XXE) attacks. The highest threat from this vulnerability is data integrity.CVSS7.5HighEPSS17.71%RoutineCVE-2019-10219hibernate · hibernate-validator +191 more6y agohibernate hibernate-validatorA vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.CVSS6.5MediumEPSS2.16%PrioritiseCVE-2019-10086apache · apache commons beanutils +230 more7y agoapache apache commons beanutilsIn Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all Java objects. We, however were not using this by default characteristic of the PropertyUtilsBean.CVSS7.5HighEPSS29.08%