Oracle business activity monitoring

This hub aggregates every CVE we track for Oracle business activity monitoring, a product in the databases space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 11 most recently published vulnerabilities affecting Oracle business activity monitoring.

• CVE-2021-39144XStream is vulnerable to a Remote Command Execution attackKEV8.5Aug 23, 2021
• CVE-2021-21348XStream is vulnerable to an attack using Regular Expression for a Denial of Service (ReDos)5.3Mar 22, 2021
• CVE-2021-21349A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host6.1Mar 22, 2021
• CVE-2021-21350XStream is vulnerable to an Arbitrary Code Execution attack5.3Mar 22, 2021
• CVE-2021-21351XStream is vulnerable to an Arbitrary Code Execution attack5.4Mar 22, 2021
• CVE-2021-21342A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host5.3Mar 22, 2021
• CVE-2021-21344XStream is vulnerable to an Arbitrary Code Execution attack5.3Mar 22, 2021
• CVE-2021-21345XStream is vulnerable to a Remote Command Execution attack5.8Mar 22, 2021
• CVE-2021-21346XStream is vulnerable to an Arbitrary Code Execution attack6.1Mar 22, 2021
• CVE-2021-21347XStream is vulnerable to an Arbitrary Code Execution attack6.1Mar 22, 2021
• CVE-2019-10173It was found that xstream API version 1.4.10 before 1.4.11 introduced a regression for a previous deserialization flaw. If the security framework has not been initialized, it may allow a remote att...9.8Jul 23, 2019