# Oracle Primavera Gateway


- [CVE-2020-11023](https://insights.sbomify.com/CVE-2020-11023/): JQuery Cross-Site Scripting (XSS) (medium 6.9, exploited in the wild)
- [CVE-2019-17571](https://insights.sbomify.com/CVE-2019-17571/): Deserialization of Untrusted Data in Log4j (critical 9.8)
- [CVE-2019-17195](https://insights.sbomify.com/CVE-2019-17195/): Improper Check for Unusual or Exceptional Conditions in Connect2id Nimbus JOSE+JWT (critical 9.8)
- [CVE-2019-17531](https://insights.sbomify.com/CVE-2019-17531/): jackson-databind polymorphic typing issue (critical 9.8)
- [CVE-2019-17495](https://insights.sbomify.com/CVE-2019-17495/): Cross-site scripting in Swagger-UI (critical 9.8)
- [CVE-2019-16942](https://insights.sbomify.com/CVE-2019-16942/): Polymorphic Typing in FasterXML jackson-databind (critical 9.8)
- [CVE-2019-16943](https://insights.sbomify.com/CVE-2019-16943/): jackson-databind polymorphic typing issue (critical 9.8)
- [CVE-2019-14540](https://insights.sbomify.com/CVE-2019-14540/): Polymorphic Typing issue in FasterXML jackson-databind (critical 9.8)
- [CVE-2019-16335](https://insights.sbomify.com/CVE-2019-16335/): Polymorphic Typing issue in FasterXML jackson-databind (critical 9.8)
- [CVE-2019-14379](https://insights.sbomify.com/CVE-2019-14379/): Deserialization of untrusted data in FasterXML jackson-databind (critical 9.8)
- [CVE-2018-1275](https://insights.sbomify.com/CVE-2018-1275/): Spring Framework has Improperly Implemented Security Check for Standard (critical 9.8)
- [CVE-2018-1270](https://insights.sbomify.com/CVE-2018-1270/): Spring Framework allows applications to expose STOMP over WebSocket endpoints (critical 9.8)

---
From sbomify Insights: https://insights.sbomify.com/products/oracle/primavera-gateway/