[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$frXeaW4Fqf43PlbmKUp-oUxBiVxWaqI9dD5TZVNlF9JQ":3,"g5a-ex:oracle\u002Fgraph_server_and_client@*":80,"g5a-family:oracle\u002Fgraph_server_and_client":82},{"success":4,"data":5},true,{"product":6,"versions":18,"topVulnerabilitiesByEpss":20,"kevVulnerabilities":57,"seoMetadata":58,"meta":77},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":17},"oracle","graph_server_and_client",1,6,0,"2022-03-11",[14],{"version":15,"cve_count":9,"kev_count":11,"has_kev":16},"21.3.0",false,"Graph Server And Client by Oracle is a technology product with 1 tracked version and 6 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[19],{"version":15,"cve_count":9,"kev_count":11,"has_kev":16},[21,29,36,41,45,51],{"cveId":22,"description":23,"publishedDate":24,"cvssScore":25,"cvssVersion":26,"severity":27,"isKev":16,"epssScore":28},"CVE-2021-33037","Apache Tomcat 10.0.0-M1 to 10.0.6, 9.0.0.M1 to 9.0.46 and 8.5.0 to 8.5.66 did not correctly parse the HTTP transfer-encoding request header in some circumstances leading to the possibility to request smuggling when used with a reverse proxy. Specifically: - Tomcat incorrectly ignored the transfer encoding header if the client declared it would only accept an HTTP\u002F1.0 response; - Tomcat honoured the identify encoding; and - Tomcat did not ensure that, if present, the chunked encoding was the final encoding.","2021-07-12",5.3,"v3.1","Medium",0.74667,{"cveId":30,"description":31,"publishedDate":32,"cvssScore":33,"cvssVersion":26,"severity":34,"isKev":16,"epssScore":35},"CVE-2021-25122","When responding to new h2c connection requests, Apache Tomcat versions 10.0.0-M1 to 10.0.0, 9.0.0.M1 to 9.0.41 and 8.5.0 to 8.5.61 could duplicate request headers and a limited amount of request body from one request to another meaning user A and user B could both see the results of user A's request.","2021-03-01",7.5,"High",0.18114,{"cveId":37,"description":38,"publishedDate":32,"cvssScore":39,"cvssVersion":26,"severity":34,"isKev":16,"epssScore":40},"CVE-2021-25329","The fix for CVE-2020-9484 was incomplete. When using Apache Tomcat 10.0.0-M1 to 10.0.0, 9.0.0.M1 to 9.0.41, 8.5.0 to 8.5.61 or 7.0.0. to 7.0.107 with a configuration edge case that was highly unlikely to be used, the Tomcat instance was still vulnerable to CVE-2020-9494. Note that both the previously published prerequisites for CVE-2020-9484 and the previously published mitigations for CVE-2020-9484 also apply to this issue.",7,0.09491,{"cveId":42,"description":43,"publishedDate":12,"cvssScore":33,"cvssVersion":26,"severity":34,"isKev":16,"epssScore":44},"CVE-2020-36518","jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects.",0.0486,{"cveId":46,"description":47,"publishedDate":48,"cvssScore":49,"cvssVersion":26,"severity":34,"isKev":16,"epssScore":50},"CVE-2021-2351","Vulnerability in the Advanced Networking Option component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise Advanced Networking Option. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Advanced Networking Option, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Advanced Networking Option. Note: The July 2021 Critical Patch Update introduces a number of Native Network Encryption changes to deal with vulnerability CVE-2021-2351 and prevent the use of weaker ciphers. Customers should review: \"Changes in Native Network Encryption with the July 2021 Critical Patch Update\" (Doc ID 2791571.1). CVSS 3.1 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H).","2021-07-21",8.3,0.02432,{"cveId":52,"description":53,"publishedDate":54,"cvssScore":55,"cvssVersion":26,"severity":27,"isKev":16,"epssScore":56},"CVE-2019-10219","A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.","2019-11-08",6.1,0.02157,[],{"title":59,"metaDescription":60,"keywords":61,"structuredData":62},"Graph Server And Client by Oracle - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Graph Server And Client by Oracle covering 1 version with 6 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Graph Server And Client vulnerabilities, Graph Server And Client security, Graph Server And Client CVE, Oracle Graph Server And Client, Graph Server And Client threat intelligence, Oracle security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":63,"@type":64,"name":65,"description":60,"url":66,"manufacturer":67,"applicationCategory":71,"softwareVersion":72,"mainEntity":73},"https:\u002F\u002Fschema.org","SoftwareApplication","Graph Server And Client","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Foracle\u002Fgraph_server_and_client",{"@type":68,"name":69,"url":70},"Organization","Oracle","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Foracle","Security Software","1 versions tracked",{"@type":74,"name":75,"description":76,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Graph Server And Client Security Vulnerabilities","Security vulnerabilities affecting Graph Server And Client by Oracle",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":78,"apiVersion":79},"2026-10-17T14:01:18.901Z","3.0",{"rows":81,"total":11,"capped":16,"failed":11},[],[]]