Oracle Banking Enterprise Default Management vulnerabilities, page 2

23 vulnerabilities

Known vulnerabilities in Oracle Banking Enterprise Default Management, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.1CVE-2020-9281ckeditorckeditor+12
EPSS score
4.31%
A cross-site scripting (XSS) vulnerability in the HTML Data Processor for CKEditor 4.0 before 4.14 allows remote attackers to inject arbitrary web script through a crafted "protected" comment (with the cke_protected syntax).6.5CVE-2020-6950eclipsemojarra+9
EPSS score
10.12%
Directory traversal in Eclipse Mojarra before 2.3.14 allows attackers to read arbitrary files via the loc parameter or con parameter.6.5CVE-2019-10219debianlibhibernate-validator-java+191
EPSS score
2.16%
A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.