CVE records

Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program, by email as they are published. Where the data comes from: sources.

Updated under an hour ago ()

What this means for you

This week: 5,437 CVEs published, 355 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.

Published in the last 7 days
5,437
Show in the list
Critical, last 7 days
355
Show in the list
Healthcare-tagged, last 7 days
4
Show in the list
Known exploited (CISA KEV)
1,747
Show in the list

Showing CVEs that name the product oracle:jd_edwards_enterpriseone_orchestrator. Show all products

27 CVEs, showing 1 to 27
CVESeverityTitlePublished
CVE-2026-61270High 8.1Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator Security).
Assigned by oracle
Aug 18, 2026
CVE-2026-61265High 8.1Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator Security).
Assigned by oracle
Aug 18, 2026
CVE-2020-36183High 8.1FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.docx4j.org.apache.xalan.lib.sql.JNDIConnectionPool.
Assigned by mitre
Jan 6, 2021
CVE-2020-36185High 8.1FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.SharedPoolDataSource.
Assigned by mitre
Jan 6, 2021
CVE-2020-36186High 8.1FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.PerUserPoolDataSource.
Assigned by mitre
Jan 6, 2021
CVE-2020-36187High 8.1FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.SharedPoolDataSource.
Assigned by mitre
Jan 6, 2021
CVE-2020-36188High 8.1FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.JNDIConnectionSource.
Assigned by mitre
Jan 6, 2021
CVE-2020-36189High 8.1FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.DriverManagerConnectionSo…
Assigned by mitre
Jan 6, 2021
CVE-2020-17521
Healthcare
Medium 5.5Apache Groovy provides extension methods to aid with creating temporary directories.
Assigned by apache
Dec 7, 2020
CVE-2020-25649High 7.5A flaw was found in FasterXML Jackson Databind, where it did not have entity expansion secured properly.
Assigned by redhat
Dec 3, 2020
CVE-2020-13956Medium 5.3Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in request URIs passed to the library as java.net.URI object and pick the wrong target host…
Assigned by apache
Dec 2, 2020
CVE-2020-11023
Known exploited
Healthcare
Medium 6.9Potential XSS vulnerability in jQuery
Assigned by GitHub_M
Apr 29, 2020
CVE-2020-11620High 8.1FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.jelly.impl.Embedded (aka commons-jelly).
Assigned by mitre
Apr 7, 2020
CVE-2020-11619High 8.1FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.springframework.aop.config.MethodLocatingFactoryBean (aka spring-aop…
Assigned by mitre
Apr 7, 2020
CVE-2020-9547Critical 9.8FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.ibatis.sqlmap.engine.transaction.jta.JtaTransactionConfig (aka ibati…Mar 2, 2020
CVE-2020-9546Critical 9.8FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.hadoop.shaded.com.zaxxer.hikari.HikariConfig (aka shaded hika…Mar 2, 2020
CVE-2020-9548Critical 9.8FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPConfig (aka anteros-core).
Assigned by mitre
Mar 2, 2020
CVE-2019-20330Critical 9.8FasterXML jackson-databind 2.x before 2.9.10.2 lacks certain net.sf.ehcache blocking.
Assigned by mitre
Jan 3, 2020
CVE-2019-10219
Healthcare
Medium 6.5A vulnerability was found in Hibernate-Validator.
Assigned by redhat
Nov 8, 2019
CVE-2019-17195
Healthcare
Critical 9.8Connect2id Nimbus JOSE+JWT before v7.9 can throw various uncaught exceptions while parsing a JWT, which could result in an application crash (potential information disclosure) or a potential authenti…
Assigned by mitre
Oct 15, 2019
CVE-2019-17531Critical 9.8A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10.
Assigned by mitre
Oct 12, 2019
CVE-2019-16943Critical 9.8A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10.Oct 1, 2019
CVE-2019-16942Critical 9.8A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10.
Assigned by mitre
Oct 1, 2019
CVE-2019-10086
Healthcare
High 7.3In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all Ja…
Assigned by apache
Aug 20, 2019
CVE-2019-14439High 7.5A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x before 2.9.9.2.
Assigned by mitre
Jul 30, 2019
CVE-2019-14379Critical 9.8SubTypeValidator.java in FasterXML jackson-databind before 2.9.9.2 mishandles default typing when ehcache is used (because of net.sf.ehcache.transaction.manager.DefaultTransactionManagerLookup), lead…
Assigned by mitre
Jul 29, 2019
CVE-2018-14718Critical 9.8FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to execute arbitrary code by leveraging failure to block the slf4j-ext class from polymorphic deserialization.
Assigned by mitre
Jan 2, 2019

CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.