Oracle Peoplesoft Enterprise Fin Install vulnerabilities

2 vulnerabilities

Known vulnerabilities in Oracle Peoplesoft Enterprise Fin Install, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.8CVE-2018-1258org.springframeworkspring-core+42
EPSS score
2.46%
Spring Framework version 5.0.5 when used in combination with any versions of Spring Security contains an authorization bypass when using method security. An unauthorized malicious user can gain unauthorized access to methods that should be restricted.9.8CVE-2017-5645apache software foundationapache log4j+86
EPSS score
89.79%
In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that, when deserialized, can execute arbitrary code.