Vulnerabilities > Oracle > Transportation Management > Medium
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2019-04-23 | CVE-2019-2709 | Unspecified vulnerability in Oracle Transportation Management 6.3.7/6.4.2/6.4.3 Vulnerability in the Oracle Transportation Management component of Oracle Supply Chain Products Suite (subcomponent: Security). | 6.1 |
| 2019-04-20 | CVE-2019-11358 | jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. | 6.1 |
| 2019-01-16 | CVE-2019-2487 | Unspecified vulnerability in Oracle Transportation Management Vulnerability in the Oracle Transportation Management component of Oracle Supply Chain Products Suite (subcomponent: UI Infrastructure). | 6.5 |
| 2018-04-19 | CVE-2018-2823 | Unspecified vulnerability in Oracle Transportation Management 6.4.3 Vulnerability in the Oracle Transportation Management component of Oracle Supply Chain Products Suite (subcomponent: Database). | 6.5 |
| 2018-01-18 | CVE-2018-2662 | Unspecified vulnerability in Oracle Transportation Management Vulnerability in the Oracle Transportation Management component of Oracle Supply Chain Products Suite (subcomponent: Security). | 5.4 |
| 2018-01-18 | CVE-2018-2631 | Unspecified vulnerability in Oracle Transportation Management Vulnerability in the Oracle Transportation Management component of Oracle Supply Chain Products Suite (subcomponent: Security). | 4.3 |
| 2017-08-08 | CVE-2017-10032 | Unspecified vulnerability in Oracle Transportation Management Vulnerability in the Oracle Transportation Management component of Oracle Supply Chain Products Suite (subcomponent: Access Control List). | 5.4 |
| 2017-04-24 | CVE-2017-3530 | Unspecified vulnerability in Oracle Transportation Management Vulnerability in the Oracle Transportation Manager component of Oracle Supply Chain Products Suite (subcomponent: Security). | 6.1 |
| 2015-12-06 | CVE-2015-3195 | Information Exposure vulnerability in multiple products The ASN1_TFLG_COMBINE implementation in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zh, 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1q, and 1.0.2 before 1.0.2e mishandles errors caused by malformed X509_ATTRIBUTE data, which allows remote attackers to obtain sensitive information from process memory by triggering a decoding failure in a PKCS#7 or CMS application. | 5.3 |