[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$ffnNFzdyf8W2TkvzGFnYAcUSfZN_IIJ0Zui1Hbl4ywb8":3,"g5a-ex:oracle\u002Fenterprise_data_quality@*":111,"g5a-family:oracle\u002Fenterprise_data_quality":113},{"success":4,"data":5},true,{"product":6,"versions":24,"topVulnerabilitiesByEpss":28,"kevVulnerabilities":88,"seoMetadata":89,"meta":108},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":23},"oracle","enterprise_data_quality",3,13,0,"2022-10-18",[14,17,20],{"version":15,"cve_count":9,"kev_count":11,"has_kev":16},"11.1.1.9.0",false,{"version":18,"cve_count":19,"kev_count":11,"has_kev":16},"12.2.1.3.0",12,{"version":21,"cve_count":22,"kev_count":11,"has_kev":16},"12.2.1.4.0",8,"Enterprise Data Quality by Oracle is a technology product with 3 tracked versions and 13 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[25,26,27],{"version":15,"cve_count":9,"kev_count":11,"has_kev":16},{"version":18,"cve_count":19,"kev_count":11,"has_kev":16},{"version":21,"cve_count":22,"kev_count":11,"has_kev":16},[29,37,44,51,56,62,68,73,77,83],{"cveId":30,"description":31,"publishedDate":32,"cvssScore":33,"cvssVersion":34,"severity":35,"isKev":16,"epssScore":36},"CVE-2017-5645","In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that, when deserialized, can execute arbitrary code.","2017-04-17",9.8,"v3.1","Critical",0.89792,{"cveId":38,"description":39,"publishedDate":40,"cvssScore":41,"cvssVersion":34,"severity":42,"isKev":16,"epssScore":43},"CVE-2020-5421","In Spring Framework versions 5.2.0 - 5.2.8, 5.1.0 - 5.1.17, 5.0.0 - 5.0.18, 4.3.0 - 4.3.28, and older unsupported versions, the protections against RFD attacks from CVE-2015-5211 may be bypassed depending on the browser used through the use of a jsessionid path parameter.","2020-09-19",6.5,"Medium",0.11564,{"cveId":45,"description":46,"publishedDate":47,"cvssScore":48,"cvssVersion":34,"severity":49,"isKev":16,"epssScore":50},"CVE-2019-0188","Apache Camel prior to 2.24.0 contains an XML external entity injection (XXE) vulnerability (CWE-611) due to using an outdated vulnerable JSON-lib library. This affects only the camel-xmljson component, which was removed.","2019-05-28",7.5,"High",0.09782,{"cveId":52,"description":53,"publishedDate":54,"cvssScore":33,"cvssVersion":34,"severity":35,"isKev":16,"epssScore":55},"CVE-2020-10683","dom4j before 2.0.3 and 2.1.x before 2.1.3 allows external DTDs and External Entities by default, which might enable XXE attacks. However, there is popular external documentation from OWASP showing how to enable the safe, non-default behavior in any application that uses dom4j.","2020-05-01",0.07269,{"cveId":57,"description":58,"publishedDate":59,"cvssScore":60,"cvssVersion":34,"severity":42,"isKev":16,"epssScore":61},"CVE-2019-17091","faces\u002Fcontext\u002FPartialViewContextImpl.java in Eclipse Mojarra, as used in Mojarra for Eclipse EE4J before 2.3.10 and Mojarra JavaServer Faces before 2.2.20, allows Reflected XSS because a client window field is mishandled.","2019-10-02",6.1,0.02469,{"cveId":63,"description":64,"publishedDate":65,"cvssScore":66,"cvssVersion":34,"severity":49,"isKev":16,"epssScore":67},"CVE-2021-2351","Vulnerability in the Advanced Networking Option component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise Advanced Networking Option. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Advanced Networking Option, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Advanced Networking Option. Note: The July 2021 Critical Patch Update introduces a number of Native Network Encryption changes to deal with vulnerability CVE-2021-2351 and prevent the use of weaker ciphers. Customers should review: \"Changes in Native Network Encryption with the July 2021 Critical Patch Update\" (Doc ID 2791571.1). CVSS 3.1 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H).","2021-07-21",8.3,0.02432,{"cveId":69,"description":70,"publishedDate":71,"cvssScore":60,"cvssVersion":34,"severity":42,"isKev":16,"epssScore":72},"CVE-2019-10219","A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.","2019-11-08",0.02157,{"cveId":74,"description":75,"publishedDate":12,"cvssScore":48,"cvssVersion":34,"severity":49,"isKev":16,"epssScore":76},"CVE-2022-21614","Vulnerability in the Oracle Enterprise Data Quality product of Oracle Fusion Middleware (component: Dashboard). Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Enterprise Data Quality. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Enterprise Data Quality accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N).",0.01043,{"cveId":78,"description":79,"publishedDate":80,"cvssScore":81,"cvssVersion":34,"severity":42,"isKev":16,"epssScore":82},"CVE-2021-2017","Vulnerability in the Oracle User Management product of Oracle E-Business Suite (component: Proxy User Delegation). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle User Management. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle User Management accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N).","2021-01-20",4.3,0.00924,{"cveId":84,"description":85,"publishedDate":12,"cvssScore":86,"cvssVersion":34,"severity":49,"isKev":16,"epssScore":87},"CVE-2022-21615","Vulnerability in the Oracle Enterprise Data Quality product of Oracle Fusion Middleware (component: Dashboard). Supported versions that are affected are 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Enterprise Data Quality. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Enterprise Data Quality, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Enterprise Data Quality accessible data. CVSS 3.1 Base Score 7.4 (Confidentiality impacts). CVSS Vector: (CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:H\u002FI:N\u002FA:N).",7.4,0.00885,[],{"title":90,"metaDescription":91,"keywords":92,"structuredData":93},"Enterprise Data Quality by Oracle - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Enterprise Data Quality by Oracle covering 3 versions with 13 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Enterprise Data Quality vulnerabilities, Enterprise Data Quality security, Enterprise Data Quality CVE, Oracle Enterprise Data Quality, Enterprise Data Quality threat intelligence, Oracle security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":94,"@type":95,"name":96,"description":91,"url":97,"manufacturer":98,"applicationCategory":102,"softwareVersion":103,"mainEntity":104},"https:\u002F\u002Fschema.org","SoftwareApplication","Enterprise Data Quality","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Foracle\u002Fenterprise_data_quality",{"@type":99,"name":100,"url":101},"Organization","Oracle","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Foracle","Security Software","3 versions tracked",{"@type":105,"name":106,"description":107,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Enterprise Data Quality Security Vulnerabilities","Security vulnerabilities affecting Enterprise Data Quality by Oracle",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":109,"apiVersion":110},"2026-10-18T21:42:17.333Z","3.0",{"rows":112,"total":11,"capped":16,"failed":11},[],[]]