oracle / banking_enterprise_default_managment CVEs

Beta · best-effort

3 CVEs tagged to oracle / banking_enterprise_default_managment — 0 Critical, 0 High, 3 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to oracle vendor archive

CVE-2021-35043

Published Jul 19, 2021

OWASP AntiSamy before 1.6.4 allows XSS via HTML attributes when using the HTML output serializer (XHTML is not affected). This was demonstrated by a javascript: URL with &#00058 a…

CVSS 6.1 · Medium

Vendor/product tagsBeta · best-effort

CVE-2021-29425

Published Apr 13, 2021

In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like "//../foo", or "\\..\foo", the result would be the same value…

CVSS 4.8 · Medium

Vendor/product tagsBeta · best-effort

CVE-2020-9281

Published Mar 7, 2020

A cross-site scripting (XSS) vulnerability in the HTML Data Processor for CKEditor 4.0 before 4.14 allows remote attackers to inject arbitrary web script through a crafted "protec…

CVSS 6.1 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-3 of 3 CVEsPage 1 of 1