Banking Enterprise Default Management CVEs and Security Vulnerabilities

CVE-2021-35515

Apache Commons Compress 1.6 to 1.20 denial of service vulnerability

When reading a specially crafted 7Z archive, the construction of the list of codecs that decompress an entry can result in an infinite loop. This could be used to mount a denial of service attack against services that use Compress' sevenz package.

CVSS 3.1 · 7.5 High EPSS 11.6% KEV · Not listed

Vendors

Apache Netapp Oracle and 1 more

Products

Commons Compress Active Iq Unified Manager Oncommand Insight and 25 more

CVE-2021-35043

AntiSamy: XSS via HTML attributes

OWASP AntiSamy before 1.6.4 allows XSS via HTML attributes when using the HTML output serializer (XHTML is not affected). This was demonstrated by a javascript: URL with &#00058 as the replacement for the : character.

CVSS 3.1 · 6.1 Medium EPSS 1.5% KEV · Not listed

Vendors

Antisamy Project Netapp Oracle

Products

Antisamy Active Iq Unified Manager Banking Enterprise Default Management and 8 more

CVE-2020-6950

Mojarra: Path traversal via either the loc parameter or the con parameter, incomplete fix of CVE-2018-14371

Directory traversal in Eclipse Mojarra before 2.3.14 allows attackers to read arbitrary files via the loc parameter or con parameter.

CVSS 3.1 · 6.5 Medium EPSS 10.1% KEV · Not listed

Vendors

Eclipse Oracle Redhat

Products

Mojarra Banking Enterprise Default Management Banking Platform and 11 more

Search vulnerabilities

Apache Commons Compress 1.6 to 1.20 denial of service vulnerability

AntiSamy: XSS via HTML attributes

Mojarra: Path traversal via either the loc parameter or the con parameter, incomplete fix of CVE-2018-14371