CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago (2026-10-19 08:40 UTC)

What this means for you

This week: 5,437 CVEs published, 355 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Do this next

Start free and add your stack

Free account, 1 product

This week's critical CVEs

Exploited in the last 30 days

Published in the last 7 days: 5,437; Show in the list
Critical, last 7 days: 355; Show in the list
Healthcare-tagged, last 7 days: 4; Show in the list
Known exploited (CISA KEV): 1,747; Show in the list

Showing CVEs that name the product oracle:financial_services_crime_and_compliance_management_studio. Show all products

12 CVEs, showing 1 to 12

CVE	Severity	Title	Published
CVE-2018-1273 Known exploited	Critical 9.8	Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property binder vulnerability caused by improper neutralization of special elements. Assigned by dell	Apr 11, 2018
CVE-2020-7712	High 7.2	Command Injection Assigned by snyk	Aug 30, 2020
CVE-2020-28500	Medium 5.3	Regular Expression Denial of Service (ReDoS) Assigned by snyk	Feb 15, 2021
CVE-2021-23337	High 7.2	Command Injection Assigned by snyk	Feb 15, 2021
CVE-2021-35515 Healthcare	High 7.5	Apache Commons Compress 1.6 to 1.20 denial of service vulnerability Assigned by apache	Jul 13, 2021
CVE-2021-35516 Healthcare	High 7.5	Apache Commons Compress 1.6 to 1.20 denial of service vulnerability Assigned by apache	Jul 13, 2021
CVE-2021-35517 Healthcare	High 7.5	Apache Commons Compress 1.1 to 1.20 denial of service vulnerability Assigned by apache	Jul 13, 2021
CVE-2021-36090 Healthcare	High 7.5	Apache Commons Compress 1.0 to 1.20 denial of service vulnerability Assigned by apache	Jul 13, 2021
CVE-2021-37714	High 7.5	Crafted input may cause the jsoup HTML and XML parser to get stuck, timeout, or throw unchecked exceptions Assigned by GitHub_M	Aug 18, 2021
CVE-2022-23437	Medium 6.5	Infinite loop within Apache XercesJ xml parser Assigned by apache	Jan 24, 2022
CVE-2022-22970	Medium 5.3	In spring framework versions prior to 5.3.20+ , 5.2.22+ and old unsupported versions, applications that handle file uploads are vulnerable to DoS attack if they rely on data binding to set a Multipar… Assigned by vmware	May 12, 2022
CVE-2022-22971	Medium 6.5	In spring framework versions prior to 5.3.20+ , 5.2.22+ and old unsupported versions, application with a STOMP over WebSocket endpoint is vulnerable to a denial of service attack by an authenticated… Assigned by vmware	May 12, 2022

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.