[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fkk0RA48zzgZ1I1fjxYA3Ej8sr7LkZCW0sMFdwKUdIdg":3,"g5a-ex:oracle\u002Fenterprise_repository@*":109,"g5a-family:oracle\u002Fenterprise_repository":111},{"success":4,"data":5},true,{"product":6,"versions":22,"topVulnerabilitiesByEpss":25,"kevVulnerabilities":86,"seoMetadata":87,"meta":106},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":21},"oracle","enterprise_repository",2,21,0,"2021-07-14",[14,18],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"11.1.1.7.0",15,false,{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},"12.1.3.0.0",10,"Enterprise Repository by Oracle is a technology product with 2 tracked versions and 21 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[23,24],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},[26,34,40,45,52,58,63,68,73,80],{"cveId":27,"description":28,"publishedDate":29,"cvssScore":30,"cvssVersion":31,"severity":32,"isKev":17,"epssScore":33},"CVE-2020-11998","A regression has been introduced in the commit preventing JMX re-bind. By passing an empty environment map to RMIConnectorServer, instead of the map that contains the authentication credentials, it leaves ActiveMQ open to the following attack: https:\u002F\u002Fdocs.oracle.com\u002Fjavase\u002F8\u002Fdocs\u002Ftechnotes\u002Fguides\u002Fmanagement\u002Fagent.html \"A remote client could create a javax.management.loading.MLet MBean and use it to create new MBeans from arbitrary URLs, at least if there is no security manager. In other words, a rogue remote client could make your Java application execute arbitrary code.\" Mitigation: Upgrade to Apache ActiveMQ 5.15.13","2020-09-10",9.8,"v3.1","Critical",0.48885,{"cveId":35,"description":36,"publishedDate":37,"cvssScore":30,"cvssVersion":38,"severity":32,"isKev":17,"epssScore":39},"CVE-2018-8013","In Apache Batik 1.x before 1.10, when deserializing subclass of `AbstractDocument`, the class takes a string from the inputStream as the class name which then use it to call the no-arg constructor of the class. Fix was to check the class type before calling newInstance in deserialization.","2018-05-24","v3.0",0.18925,{"cveId":41,"description":42,"publishedDate":43,"cvssScore":30,"cvssVersion":31,"severity":32,"isKev":17,"epssScore":44},"CVE-2019-2904","Vulnerability in the Oracle JDeveloper and ADF product of Oracle Fusion Middleware (component: ADF Faces). Supported versions that are affected are 11.1.1.9.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle JDeveloper and ADF. Successful attacks of this vulnerability can result in takeover of Oracle JDeveloper and ADF. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H).","2019-10-16",0.14264,{"cveId":46,"description":47,"publishedDate":48,"cvssScore":49,"cvssVersion":31,"severity":50,"isKev":17,"epssScore":51},"CVE-2020-11987","Apache Batik 1.13 is vulnerable to server-side request forgery, caused by improper input validation by the NodePickerPanel. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server to make arbitrary GET requests.","2021-02-24",8.2,"High",0.1328,{"cveId":53,"description":54,"publishedDate":55,"cvssScore":56,"cvssVersion":31,"severity":50,"isKev":17,"epssScore":57},"CVE-2019-0222","In Apache ActiveMQ 5.0.0 - 5.15.8, unmarshalling corrupt MQTT frame can lead to broker Out of Memory exception making it unresponsive.","2019-03-28",7.5,0.12033,{"cveId":59,"description":60,"publishedDate":61,"cvssScore":56,"cvssVersion":31,"severity":50,"isKev":17,"epssScore":62},"CVE-2019-17566","Apache Batik is vulnerable to server-side request forgery, caused by improper input validation by the \"xlink:href\" attributes. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server to make arbitrary GET requests.","2020-11-12",0.10867,{"cveId":64,"description":65,"publishedDate":66,"cvssScore":56,"cvssVersion":31,"severity":50,"isKev":17,"epssScore":67},"CVE-2019-0188","Apache Camel prior to 2.24.0 contains an XML external entity injection (XXE) vulnerability (CWE-611) due to using an outdated vulnerable JSON-lib library. This affects only the camel-xmljson component, which was removed.","2019-05-28",0.09782,{"cveId":69,"description":70,"publishedDate":71,"cvssScore":56,"cvssVersion":31,"severity":50,"isKev":17,"epssScore":72},"CVE-2020-11979","As mitigation for CVE-2020-1945 Apache Ant 1.10.8 changed the permissions of temporary files it created so that only the current user was allowed to access them. Unfortunately the fixcrlf task deleted the temporary file and created a new one without said protection, effectively nullifying the effort. This would still allow an attacker to inject modified source files into the build process.","2020-10-01",0.08016,{"cveId":74,"description":75,"publishedDate":76,"cvssScore":77,"cvssVersion":31,"severity":78,"isKev":17,"epssScore":79},"CVE-2020-1941","In Apache ActiveMQ 5.0.0 to 5.15.11, the webconsole admin GUI is open to XSS, in the view that lists the contents of a queue.","2020-05-14",6.1,"Medium",0.0715,{"cveId":81,"description":82,"publishedDate":83,"cvssScore":84,"cvssVersion":38,"severity":50,"isKev":17,"epssScore":85},"CVE-2018-11775","TLS hostname verification when using the Apache ActiveMQ Client before 5.15.6 was missing which could make the client vulnerable to a MITM attack between a Java application using the ActiveMQ client and the ActiveMQ server. This is now enabled by default.","2018-09-10",7.4,0.06959,[],{"title":88,"metaDescription":89,"keywords":90,"structuredData":91},"Enterprise Repository by Oracle - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Enterprise Repository by Oracle covering 2 versions with 21 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Enterprise Repository vulnerabilities, Enterprise Repository security, Enterprise Repository CVE, Oracle Enterprise Repository, Enterprise Repository threat intelligence, Oracle security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":92,"@type":93,"name":94,"description":89,"url":95,"manufacturer":96,"applicationCategory":100,"softwareVersion":101,"mainEntity":102},"https:\u002F\u002Fschema.org","SoftwareApplication","Enterprise Repository","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Foracle\u002Fenterprise_repository",{"@type":97,"name":98,"url":99},"Organization","Oracle","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Foracle","Security Software","2 versions tracked",{"@type":103,"name":104,"description":105,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Enterprise Repository Security Vulnerabilities","Security vulnerabilities affecting Enterprise Repository by Oracle",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":107,"apiVersion":108},"2026-10-17T15:07:02.689Z","3.0",{"rows":110,"total":11,"capped":17,"failed":11},[],[]]