Oracle Business Transaction Management vulnerabilities

2 CVEs affecting Oracle Business Transaction Management, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-1000613, published 2018-07-09.

More from Oracle.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2018-1000613, published 2018-07-09. Critical severity, CVSS 9.8. EPSS: 4.8% chance of exploitation in the next 30 days. Legion of the Bouncy Castle Legion of the Bouncy Castle Java Cryptography APIs 1.58 up to but not including 1.60 contains a CWE-470: Use of Externally-Controlled Input to Select Classes or Code…
• CVE-2018-1000180, published 2018-06-05. High severity, CVSS 7.5. EPSS: 3.4% chance of exploitation in the next 30 days. Bouncy Castle BC 1.54 - 1.59, BC-FJA 1.0.0, BC-FJA 1.0.1 and earlier have a flaw in the Low-level interface to RSA key pair generator, specifically RSA Key Pairs generated in low-level API with added…