# Oracle Siebel Ui Framework


- [CVE-2020-1938](https://insights.sbomify.com/CVE-2020-1938/): Apache Tomcat Improper Privilege Management (critical 9.8, exploited in the wild)
- [CVE-2019-20330](https://insights.sbomify.com/CVE-2019-20330/): Deserialization of Untrusted Data in jackson-databind (critical 9.8)
- [CVE-2019-16942](https://insights.sbomify.com/CVE-2019-16942/): Polymorphic Typing in FasterXML jackson-databind (critical 9.8)
- [CVE-2019-14379](https://insights.sbomify.com/CVE-2019-14379/): Deserialization of untrusted data in FasterXML jackson-databind (critical 9.8)
- [CVE-2018-14718](https://insights.sbomify.com/CVE-2018-14718/): Arbitrary Code Execution in jackson-databind (critical 9.8)
- [CVE-2017-5645](https://insights.sbomify.com/CVE-2017-5645/): Deserialization of Untrusted Data in Log4j (critical 9.8)
- [CVE-2021-2351](https://insights.sbomify.com/CVE-2021-2351/): Weak cryptography in WebLogic Server (high 8.3)
- [CVE-2017-10263](https://insights.sbomify.com/CVE-2017-10263/): Cross-site scripting in Siebel UI Framework (high 8.2)
- [CVE-2017-3325](https://insights.sbomify.com/CVE-2017-3325/): Information disclosure in Siebel UI Framework (high 8.2)
- [CVE-2020-24750](https://insights.sbomify.com/CVE-2020-24750/): Unsafe Deserialization in jackson-databind (high 8.1)
- [CVE-2020-24616](https://insights.sbomify.com/CVE-2020-24616/): Code Injection in jackson-databind (high 8.1)
- [CVE-2016-5451](https://insights.sbomify.com/CVE-2016-5451/): Information disclosure in n/a (high 8.1)

---
From sbomify Insights: https://insights.sbomify.com/products/oracle/siebel-ui-framework/