VYPR

Banking Enterprise Default Management

by Oracle Corporation

CVEs (23)

  • CVE-2021-21348MedMar 23, 2021
    risk 0.36cvss 5.3epss 0.14

    XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker to occupy a thread that consumes maximum CPU time and will never return. No user is affected, who followed the…

  • CVE-2019-10219MedNov 8, 2019
    risk 0.33cvss 6.1epss 0.02

    A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.

  • CVE-2021-29425MedApr 13, 2021
    risk 0.32cvss 4.8epss 0.10

    In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like "//../foo", or "\\..\foo", the result would be the same value, thus possibly providing access to files in the parent directory, but not further above (thus…

Page 2 of 2