Vulnerabilities > Oracle > Access Manager > 12.2.1.3.0

DATE CVE VULNERABILITY TITLE RISK
2022-10-18 CVE-2022-39405 Unspecified vulnerability in Oracle Access Manager 12.2.1.3.0
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).
network
low complexity
oracle
5.3
2022-01-19 CVE-2021-35587 Unspecified vulnerability in Oracle Access Manager 11.1.2.3.0/12.2.1.3.0/12.2.1.4.0
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: OpenSSO Agent).
network
low complexity
oracle
critical
9.8
2021-04-13 CVE-2021-29425 Path Traversal vulnerability in multiple products
In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like "//../foo", or "\\..\foo", the result would be the same value, thus possibly providing access to files in the parent directory, but not further above (thus "limited" path traversal), if the calling code would use the result to construct a path value.
network
high complexity
apache debian oracle netapp CWE-22
4.8
2020-04-15 CVE-2020-2747 Unspecified vulnerability in Oracle Access Manager 11.1.2.3.0/12.2.1.3.0
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: SSO Engine).
network
oracle
4.9
2020-04-15 CVE-2020-2745 Unspecified vulnerability in Oracle Access Manager 11.1.2.3.0/12.2.1.3.0
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Federation).
network
oracle
4.3
2020-04-15 CVE-2020-2740 Unspecified vulnerability in Oracle Access Manager 11.1.2.3.0/12.2.1.3.0
Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).
network
oracle
4.9
2019-11-08 CVE-2019-10219 Cross-site Scripting vulnerability in multiple products
A vulnerability was found in Hibernate-Validator.
network
low complexity
redhat netapp oracle CWE-79
6.1
2018-04-19 CVE-2018-2879 Unspecified vulnerability in Oracle Access Manager 11.1.2.3.0/12.2.1.3.0
Vulnerability in the Oracle Access Manager component of Oracle Fusion Middleware (subcomponent: Authentication Engine).
network
oracle
6.8
2018-04-19 CVE-2018-2739 Unspecified vulnerability in Oracle Access Manager 10.1.4.3.0/11.1.2.3.0/12.2.1.3.0
Vulnerability in the Oracle Access Manager component of Oracle Fusion Middleware (subcomponent: Web Server Plugin).
network
oracle
5.8
2018-04-19 CVE-2018-2587 Unspecified vulnerability in Oracle Access Manager and Adaptive Access Manager
Vulnerability in the Oracle Access Manager component of Oracle Fusion Middleware (subcomponent: Web Server Plugin).
network
oracle
5.8