Oracle Global Lifecycle Management NextGen Oui Framework vulnerabilities

6 CVEs affecting Oracle Global Lifecycle Management NextGen Oui Framework, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-21894, published 2023-01-18.

More from Oracle.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-23437, published 2022-01-24. Medium severity, CVSS 6.5. EPSS: 11.6% chance of exploitation in the next 30 days. There's a vulnerability within the Apache Xerces Java (XercesJ) XML parser when handling specially crafted XML document payloads. This causes, the XercesJ XML parser to wait in an infinite loop,…
• CVE-2019-16942, published 2019-10-01. Critical severity, CVSS 9.8. EPSS: 5.7% chance of exploitation in the next 30 days. A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. When Default Typing is enabled (either globally or for a specific property) for an externally exposed…
• CVE-2019-17531, published 2019-10-12. Critical severity, CVSS 9.8. EPSS: 5.4% chance of exploitation in the next 30 days. A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. When Default Typing is enabled (either globally or for a specific property) for an externally exposed…
• CVE-2019-16943, published 2019-10-01. Critical severity, CVSS 9.8. EPSS: 4.9% chance of exploitation in the next 30 days. A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10. When Default Typing is enabled (either globally or for a specific property) for an externally exposed…
• CVE-2020-36518, published 2022-03-11. High severity, CVSS 7.5. EPSS: 4.9% chance of exploitation in the next 30 days. jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects.
• CVE-2023-21894, published 2023-01-18. High severity, CVSS 7.3. EPSS: 0.2% chance of exploitation in the next 30 days. Vulnerability in the Oracle Global Lifecycle Management NextGen OUI Framework product of Oracle Fusion Middleware (component: NextGen Installer issues). Supported versions that are affected are…