Autovue Security Vulnerabilities and Issues — Autovue CVE List

Lucene search

OracleAutovue

3 matches found

CVE•added 2020/12/27 5:15 a.m.•269 views

CVE-2020-35728

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.oracle.wls.shaded.org.apache.xalan.lib.sql.JNDIConnectionPool (aka embedded Xalan in org.glassfish.web/javax.servlet.jsp.jstl).

8.1CVSS7.7AI score0.39669EPSS

CVE•added 2020/01/15 5:15 p.m.•33 views

CVE-2020-2592

Vulnerability in the Oracle AutoVue product of Oracle Supply Chain (component: Security). The supported version that is affected is 21.0.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle AutoVue. Successful attacks of this vulnerab...

5.3CVSS4.5AI score0.01176EPSS

CVE•added 2020/07/15 6:15 p.m.•31 views

CVE-2020-14551

Vulnerability in the Oracle AutoVue product of Oracle Supply Chain (component: Security). The supported version that is affected is 21.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle AutoVue. Successful attacks of this vulnerabili...

4.3CVSS4.1AI score0.00201EPSS