Vulnerabilities > Oracle

DATE CVE VULNERABILITY TITLE RISK
2022-04-25 CVE-2022-23457 Path Traversal vulnerability in multiple products
ESAPI (The OWASP Enterprise Security API) is a free, open source, web application security control library.
network
low complexity
owasp oracle netapp CWE-22
critical
 9.8
9.8
2022-04-21 CVE-2022-29577 Cross-site Scripting vulnerability in multiple products
OWASP AntiSamy before 1.6.7 allows XSS via HTML tag smuggling on STYLE content with crafted input.
network
low complexity
antisamy-project oracle CWE-79
6.1
6.1
2022-04-21 CVE-2022-22969 <Issue Description> Spring Security OAuth versions 2.5.x prior to 2.5.2 and older unsupported versions are susceptible to a Denial-of-Service (DoS) attack via the initiation of the Authorization Request in an OAuth 2.0 Client application.
network
low complexity
pivotal oracle
6.5
6.5
2022-04-19 CVE-2022-21404 Unspecified vulnerability in Oracle Helidon 1.4.10/2.0.0
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Reactive WebServer).
network
high complexity
oracle
8.1
8.1
2022-04-19 CVE-2022-21405 Unspecified vulnerability in Oracle OSS Support Tools 18.3
Vulnerability in the OSS Support Tools product of Oracle Support Tools (component: Oracle Explorer).
local
low complexity
oracle
5.5
5.5
2022-04-19 CVE-2022-21410 Unspecified vulnerability in Oracle Database 19C
Vulnerability in the Oracle Database - Enterprise Edition Sharding component of Oracle Database Server.
network
low complexity
oracle
7.2
7.2
2022-04-19 CVE-2022-21411 Unspecified vulnerability in Oracle Database 12.1.0.2/19C/21C
Vulnerability in the RDBMS Gateway / Generic ODBC Connectivity component of Oracle Database Server.
network
low complexity
oracle
5.4
5.4
2022-04-19 CVE-2022-21412 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).
network
low complexity
oracle netapp
4.9
4.9
2022-04-19 CVE-2022-21413 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML).
network
low complexity
oracle netapp
4.9
4.9
2022-04-19 CVE-2022-21414 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer).
network
low complexity
oracle netapp
4.9
4.9