Storagetek Tape Analytics Sw Tool vulnerabilities

3 known vulnerabilities in Storagetek Tape Analytics Sw Tool from Oracle. 2 are rated high or critical, and 3 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 6.1 Medium severity

  JQuery Cross-Site Scripting (XSS) Exploited

  CVE-2020-11023Apr 29, 2020JqueryEPSS 84.9%

  In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untr

• 9.8 Critical severity

  Oracle WebLogic Server, Injection Exploited

  CVE-2019-2725Apr 26, 2019OracleEPSS 100%

  Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supported versions that are affected are 10.3.6.0.0 and 12.1.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network ac

• 9.8 Critical severity

  Oracle WebLogic Server Deserialization of Untrusted Data Exploited

  CVE-2015-4852Nov 18, 2015OracleEPSS 95%

  The WLS Security component in Oracle WebLogic Server 10.3.6.0, 12.1.2.0, 12.1.3.0, and 12.2.1.0 allows remote attackers to execute arbitrary commands via a crafted serialized Java object in T3 protocol traffic to TCP port 7001, related to oracle_common/modules