Oracle Documaker vulnerabilities, page 2

23 vulnerabilities

Known vulnerabilities in Oracle Documaker, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.8CVE-2019-13990apachetomee+38
EPSS score
16.63%
initDocumentParser in xml/XMLSchedulingDataProcessor.java in Terracotta Quartz Scheduler through 2.3.0 allows XXE attacks via a job description.7.5CVE-2019-5427debianc3p0+14
EPSS score
4.88%
c3p0 version < 0.9.5.4 may be exploited by a billion laughs attack when loading XML configuration due to missing protections against recursive entity expansion when loading configuration.6.5CVE-2019-10219debianlibhibernate-validator-java+191
EPSS score
2.16%
A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.