Vulnerability intelligence
VULONE Vulnerability Database
Stay ahead of what gets exploited. Every CVE from NVD, enriched every 30 minutes with EPSS, CISA KEV, ransomware linkage and automated analysis.
401,508CVE records
2,641Published, last 7 days
1,734In CISA KEV
1,431Critical, last 30 days
5,599Analysed
00:16 UTCLast NVD sync
Filters Show:
22 results. Oracle Financial Services Crime And Compliance Management Studio.
Page 1 of 2| ID | Severity | Score | Technology | Weakness | CISA KEV | Exploit | EPSS | Published |
|---|---|---|---|---|---|---|---|---|
| CVE-2022-22978 | Critical | 9.8 |  Vmware Spring Security +2 | Incorrect authorization | - | - | 12% | May 19, 2022 |
| CVE-2022-22976 | Medium | 5.3 | Vmware Spring Security +2 | Integer overflow | - | - | 2.3% | May 19, 2022 |
| CVE-2022-22971 | Medium | 6.5 | Vmware Spring Framework +3 | Allocation without limits | - | - | 3.2% | May 12, 2022 |
| CVE-2022-22970 | Medium | 5.3 | Vmware Spring Framework +5 | Allocation without limits | - | - | 2.0% | May 12, 2022 |
| CVE-2022-24823 | Medium | 5.5 |  Netty +4 | CWE-378 | - | 4 refs | 1.0% | May 6, 2022 |
| CVE-2022-25647 | High | 7.5 |  Google Gson +5 | Deserialization of untrusted data | - | - | 12% | May 1, 2022 |
| CVE-2020-36518 | High | 7.5 |  Fasterxml Jackson Databind +35 | Out-of-bounds write | - | 2 refs | 4.9% | Mar 11, 2022 |
| CVE-2021-38296 | High | 7.5 |  Apache Spark +1 | Authentication bypass by capture-r | - | - | 1.8% | Mar 10, 2022 |
| CVE-2022-23181 | High | 7.0 | Apache Tomcat +6 | TOCTOU race condition | - | - | 0.69% | Jan 27, 2022 |
| CVE-2022-23437 | Medium | 6.5 | Apache Xerces J +28 | CWE-835 | - | - | 12% | Jan 24, 2022 |
| CVE-2021-41303 | Critical | 9.8 | Apache Shiro +1 | Improper authentication | - | - | 77% | Sep 17, 2021 |
| CVE-2021-37714 | High | 7.5 |  Jsoup +15 | CWE-248 | - | - | 6.7% | Aug 18, 2021 |
| CVE-2021-34429 | Medium | 5.3 |  Eclipse Jetty +17 | Information exposure | - | 2 refs | 99% | Jul 15, 2021 |
| CVE-2021-36090 | High | 7.5 | Apache Commons Compress +33 | CWE-130 | - | - | 13% | Jul 13, 2021 |
| CVE-2021-35517 | High | 7.5 | Apache Commons Compress +26 | CWE-130 | - | - | 11% | Jul 13, 2021 |
| CVE-2021-35516 | High | 7.5 | Apache Commons Compress +23 | CWE-130 | - | - | 12% | Jul 13, 2021 |
| CVE-2021-35515 | High | 7.5 | Apache Commons Compress +25 | CWE-834 | - | - | 12% | Jul 13, 2021 |
| CVE-2021-23337 | High | 7.2 |  Lodash +22 | Code injection | - | 12 refs | 21% | Feb 15, 2021 |
| CVE-2020-28500 | Medium | 5.3 | Lodash +18 | - | - | 12 refs | 7.3% | Feb 15, 2021 |
| CVE-2020-9492 | High | 8.8 | Apache Hadoop +2 | Incorrect authorization | - | - | 4.4% | Jan 26, 2021 |
