[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fi4Aq9hZxBefunRlLm52jL7EBDSeJbedx9QLbt1kkCL8":3,"g5a-family:oracle\u002Fstoragetek_tape_analytics_sw_tool":124,"g5a-ex:oracle\u002Fstoragetek_tape_analytics_sw_tool@*":125},{"success":4,"data":5},true,{"product":6,"versions":25,"topVulnerabilitiesByEpss":29,"kevVulnerabilities":87,"seoMetadata":102,"meta":121},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":9,"lastCveUpdate":11,"versions":12,"description":24},"oracle","storagetek_tape_analytics_sw_tool",3,11,"2020-09-19",[13,17,22],{"version":14,"cve_count":15,"kev_count":16,"has_kev":4},"2.3",8,2,{"version":18,"cve_count":19,"kev_count":20,"has_kev":21},"2.3.0",1,0,false,{"version":23,"cve_count":16,"kev_count":19,"has_kev":4},"2.3.1","Storagetek Tape Analytics Sw Tool by Oracle is a technology product with 3 tracked versions and 11 known security vulnerabilities including 3 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[26,27,28],{"version":14,"cve_count":15,"kev_count":16,"has_kev":4},{"version":18,"cve_count":19,"kev_count":20,"has_kev":21},{"version":23,"cve_count":16,"kev_count":19,"has_kev":4},[30,38,43,48,55,61,66,73,78,83],{"cveId":31,"description":32,"publishedDate":33,"cvssScore":34,"cvssVersion":35,"severity":36,"isKev":4,"epssScore":37},"CVE-2019-2725","Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supported versions that are affected are 10.3.6.0.0 and 12.1.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H).","2019-04-26",9.8,"v3.1","Critical",0.99977,{"cveId":39,"description":40,"publishedDate":41,"cvssScore":34,"cvssVersion":35,"severity":36,"isKev":4,"epssScore":42},"CVE-2015-4852","The WLS Security component in Oracle WebLogic Server 10.3.6.0, 12.1.2.0, 12.1.3.0, and 12.2.1.0 allows remote attackers to execute arbitrary commands via a crafted serialized Java object in T3 protocol traffic to TCP port 7001, related to oracle_common\u002Fmodules\u002Fcom.bea.core.apache.commons.collections.jar. NOTE: the scope of this CVE is limited to the WebLogic Server product.","2015-11-18",0.94991,{"cveId":44,"description":45,"publishedDate":46,"cvssScore":34,"cvssVersion":35,"severity":36,"isKev":21,"epssScore":47},"CVE-2019-2729","Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H).","2019-06-19",0.8883,{"cveId":49,"description":50,"publishedDate":51,"cvssScore":52,"cvssVersion":35,"severity":53,"isKev":21,"epssScore":54},"CVE-2019-11358","jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.","2019-04-20",6.1,"Medium",0.8682,{"cveId":56,"description":57,"publishedDate":58,"cvssScore":59,"cvssVersion":35,"severity":53,"isKev":4,"epssScore":60},"CVE-2020-11023","In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing \u003Coption> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.","2020-04-29",6.9,0.84887,{"cveId":62,"description":63,"publishedDate":11,"cvssScore":64,"cvssVersion":35,"severity":53,"isKev":21,"epssScore":65},"CVE-2020-5421","In Spring Framework versions 5.2.0 - 5.2.8, 5.1.0 - 5.1.17, 5.0.0 - 5.0.18, 4.3.0 - 4.3.28, and older unsupported versions, the protections against RFD attacks from CVE-2015-5211 may be bypassed depending on the browser used through the use of a jsessionid path parameter.",6.5,0.11564,{"cveId":67,"description":68,"publishedDate":69,"cvssScore":70,"cvssVersion":35,"severity":71,"isKev":21,"epssScore":72},"CVE-2020-9488","Improper validation of certificate with host mismatch in Apache Log4j SMTP appender. This could allow an SMTPS connection to be intercepted by a man-in-the-middle attack which could leak any log messages sent through that appender. Fixed in Apache Log4j 2.12.3 and 2.13.1","2020-04-27",3.7,"Low",0.08216,{"cveId":74,"description":75,"publishedDate":76,"cvssScore":34,"cvssVersion":35,"severity":36,"isKev":21,"epssScore":77},"CVE-2020-10683","dom4j before 2.0.3 and 2.1.x before 2.1.3 allows external DTDs and External Entities by default, which might enable XXE attacks. However, there is popular external documentation from OWASP showing how to enable the safe, non-default behavior in any application that uses dom4j.","2020-05-01",0.07269,{"cveId":79,"description":80,"publishedDate":81,"cvssScore":64,"cvssVersion":35,"severity":53,"isKev":21,"epssScore":82},"CVE-2019-3740","RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to an Information Exposure Through Timing Discrepancy vulnerabilities during DSA key generation. A malicious remote attacker could potentially exploit those vulnerabilities to recover DSA keys.","2019-09-18",0.03889,{"cveId":84,"description":85,"publishedDate":81,"cvssScore":64,"cvssVersion":35,"severity":53,"isKev":21,"epssScore":86},"CVE-2019-3739","RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to Information Exposure Through Timing Discrepancy vulnerabilities during ECDSA key generation. A malicious remote attacker could potentially exploit those vulnerabilities to recover ECDSA keys.",0.0263,[88,93,98],{"cveId":56,"description":57,"publishedDate":58,"cvssScore":59,"severity":53,"isKev":4,"epssScore":60,"cisaVulnName":89,"cisaDateAdded":90,"cisaShortDescription":91,"cisaRequiredAction":92},"JQuery Cross-Site Scripting (XSS) Vulnerability","2025-01-23","JQuery contains a persistent cross-site scripting (XSS) vulnerability. When passing maliciously formed, untrusted input enclosed in HTML tags, JQuery's DOM manipulators can execute untrusted code in the context of the user's browser.","Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",{"cveId":31,"description":32,"publishedDate":33,"cvssScore":34,"severity":36,"isKev":4,"epssScore":37,"cisaVulnName":94,"cisaDateAdded":95,"cisaShortDescription":96,"cisaRequiredAction":97},"Oracle WebLogic Server, Injection","2022-01-10","Injection vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services).","Apply updates per vendor instructions.",{"cveId":39,"description":40,"publishedDate":41,"cvssScore":34,"severity":36,"isKev":4,"epssScore":42,"cisaVulnName":99,"cisaDateAdded":100,"cisaShortDescription":101,"cisaRequiredAction":97},"Oracle WebLogic Server Deserialization of Untrusted Data Vulnerability","2021-11-03","Oracle WebLogic Server contains a deserialization of untrusted data vulnerability within Apache Commons, which can allow for for remote code execution.",{"title":103,"metaDescription":104,"keywords":105,"structuredData":106},"Storagetek Tape Analytics Sw Tool by Oracle - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Storagetek Tape Analytics Sw Tool by Oracle covering 3 versions with 11 tracked vulnerabilities including 2 critical and 0 high-severity issues and 3 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Storagetek Tape Analytics Sw Tool vulnerabilities, Storagetek Tape Analytics Sw Tool security, Storagetek Tape Analytics Sw Tool CVE, Oracle Storagetek Tape Analytics Sw Tool, Storagetek Tape Analytics Sw Tool threat intelligence, Oracle security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Storagetek Tape Analytics Sw Tool KEV, Storagetek Tape Analytics Sw Tool exploited vulnerabilities",{"@context":107,"@type":108,"name":109,"description":104,"url":110,"manufacturer":111,"applicationCategory":115,"softwareVersion":116,"mainEntity":117},"https:\u002F\u002Fschema.org","SoftwareApplication","Storagetek Tape Analytics Sw Tool","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Foracle\u002Fstoragetek_tape_analytics_sw_tool",{"@type":112,"name":113,"url":114},"Organization","Oracle","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Foracle","Security Software","3 versions tracked",{"@type":118,"name":119,"description":120,"vulnerabilityCount":10,"dateModified":11},"SecurityVulnerability","Storagetek Tape Analytics Sw Tool Security Vulnerabilities","Security vulnerabilities affecting Storagetek Tape Analytics Sw Tool by Oracle",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":9,"lastUpdated":11,"generatedAt":122,"apiVersion":123},"2026-10-18T17:34:52.569Z","3.0",[],{"rows":126,"total":9,"capped":21,"failed":20},[127,131,135],{"cveId":56,"name":89,"severity":53,"cvss":59,"added":90,"epss":60,"published":128,"ranges":129,"checked":4,"hits":130,"covers":21},"2020-04-29T21:15:11.743",[23],[],{"cveId":31,"name":94,"severity":36,"cvss":34,"added":95,"epss":37,"published":132,"ranges":133,"checked":4,"hits":134,"covers":21},"2019-04-26T19:29:00.463",[14],[],{"cveId":39,"name":99,"severity":36,"cvss":34,"added":100,"epss":42,"published":136,"ranges":137,"checked":4,"hits":138,"covers":21},"2015-11-18T15:59:00.133",[14],[]]