Xoev

3 CVEs vendor

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2017-10670 Jun 30, 12:29 CRITICAL Act Now

An XML External Entity (XXE) issue exists in OSCI-Transport 1.2 as used in OSCI Transport Library 1.6.1 (Java) and OSCI Transport Library 1.6 (.NET), exploitable by sending a crafted. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XXE Osci Transport Library Xoev

NVD

CVSS 3.0

9.8

EPSS

0.4%

CVE-2017-10669 Jun 30, 12:29 MEDIUM This Month

Signature Wrapping exists in OSCI-Transport 1.2 as used in OSCI Transport Library 1.6.1 (Java) and OSCI Transport Library 1.6 (.NET). Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Jwt Attack Osci Transport Library Xoev

NVD

CVSS 3.0

6.5

EPSS

0.1%

CVE-2017-10668 Jun 30, 12:29 MEDIUM This Month

A Padding Oracle exists in OSCI-Transport 1.2 as used in OSCI Transport Library 1.6.1 (Java) and OSCI Transport Library 1.6 (.NET). Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

Information Disclosure Oracle Osci Transport Library Xoev

NVD

CVSS 3.0

5.9

EPSS

0.1%

CVE-2017-10670

EPSS 0% CVSS 9.8

CRITICAL Act Now

XXE Osci Transport Library Xoev

NVD

CVE-2017-10669

EPSS 0% CVSS 6.5

MEDIUM This Month

Information Disclosure Jwt Attack Osci Transport Library +1

NVD

CVE-2017-10668

EPSS 0% CVSS 5.9

MEDIUM This Month

Information Disclosure Oracle Osci Transport Library +1

NVD