Vulnerabilities > Oracle > Financial Services Market Risk Measurement AND Management > Critical

DATE	CVE	VULNERABILITY TITLE	RISK
2020-09-14	CVE-2019-0230	Apache Struts 2.0.0 to 2.5.20 forced double OGNL evaluation, when evaluated on raw user input in tag attributes, may lead to remote code execution. network low complexity apache oracle critical	9.8
2017-12-11	CVE-2017-15708	Injection vulnerability in multiple products In Apache Synapse, by default no authentication is required for Java Remote Method Invocation (RMI). network low complexity apache oracle CWE-74 critical	9.8

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.