VendorsOracleidentity_manager_connector11.1.1.5.0
Vulnerabilities

Oracle Identity Manager Connector 11.1.1.5.0

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

5CVEs
CVE-2022-23305
SQL injection in JDBC Appender in Apache Log4j V1
Published 2022-01-18 · Modified
9.8EPSS 0.665
CVE-2022-23307
A deserialization flaw in the Chainsaw component of Log4j 1 can lead to malicious code execution.
Published 2022-01-18 · Modified
9.0EPSS 0.544
CVE-2022-23302
Deserialization of untrusted data in JMSSink in Apache Log4j 1.x
Published 2022-01-18 · Modified
8.8EPSS 0.636
CVE-2020-24616
FasterXML jackson-databind 2.x before 2.9.10.6 mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPDataSource (aka Anteros-DBCP).
Published 2020-08-25 · Modified
8.1EPSS 0.076
CVE-2020-24750
FasterXML jackson-databind 2.x before 2.9.10.6 mishandles the interaction between serialization gadgets and typing, related to com.pastdev.httpcomponents.configuration.JndiConfiguration.
Published 2020-09-17 · Modified
8.1EPSS 0.073