Oracle Financial Services Regulatory Reporting With Agilereporter vulnerabilities

4 CVEs affecting Oracle Financial Services Regulatory Reporting With Agilereporter, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-7712, published 2020-08-30.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2017-5645, published 2017-04-17. Critical severity, CVSS 9.8. EPSS: 89.8% chance of exploitation in the next 30 days. In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that,…
CVE-2020-5398, published 2020-01-17. High severity, CVSS 7.5. EPSS: 88.8% chance of exploitation in the next 30 days. In Spring Framework, versions 5.2.x prior to 5.2.3, versions 5.1.x prior to 5.1.13, and versions 5.0.x prior to 5.0.16, an application is vulnerable to a reflected file download (RFD) attack when it…
CVE-2020-7712, published 2020-08-30. High severity, CVSS 7.2. EPSS: 3.1% chance of exploitation in the next 30 days. This affects the package json before 10.0.0. It is possible to inject arbritary commands using the parseLookup function.
CVE-2020-5397, published 2020-01-17. Medium severity, CVSS 5.3. EPSS: 2.6% chance of exploitation in the next 30 days. Spring Framework, versions 5.2.x prior to 5.2.3 are vulnerable to CSRF attacks through CORS preflight requests that target Spring MVC (spring-webmvc module) or Spring WebFlux (spring-webflux module)…