Approved changes feed: RSS · Atom

cpe:2.3:a:oracle:documaker:12.6.4:*:*:*:*:*:*:*

part: a version: 12.6.4 update: *

VendorOracle (3509f9eb-d8a0-57da-b153-b8021021b133)
ProductDocumaker (99d70dd0-529e-5f97-8c83-85db7dee7dcb)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-37695 vulnerable 2026-06-08 05:32:54.613105 Execution of JavaScript code using malformed HTML in ckeditor
HIGH (7.3)
ckeditor is an open source WYSIWYG HTML editor with rich content support. A potential vulnerability has been discovered in CKEditor 4 [Fake Objects](https://ckeditor.com/cke4/addon/fakeobjects) package. The vulnerability allowed to inject malformed Fake Objects HTML, which could result in executing JavaScript code. It affects all users using the CKEditor 4 plugins listed above at version < 4.16.2. The problem has been recognized and patched. The fix will be available in version 4.16.2.
Published: 2021-08-12T23:10:10.000Z
Updated: 2024-08-04T01:23:01.506Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-32809 vulnerable 2026-06-08 05:32:08.084023 Arbitrary HTML injection vulnerability in ckeditor
MEDIUM (4.6)
ckeditor is an open source WYSIWYG HTML editor with rich content support. A potential vulnerability has been discovered in CKEditor 4 [Clipboard](https://ckeditor.com/cke4/addon/clipboard) package. The vulnerability allowed to abuse paste functionality using malformed HTML, which could result in injecting arbitrary HTML into the editor. It affects all users using the CKEditor 4 plugins listed above at version >= 4.5.2. The problem has been recognized and patched. The fix will be available in version 4.16.2.
Published: 2021-08-12T17:10:09.000Z
Updated: 2024-08-03T23:33:56.090Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-32808 vulnerable 2026-06-08 05:32:08.076522 Cross-site scripting in ckeditor via abuse of undo functionality
HIGH (7.6)
ckeditor is an open source WYSIWYG HTML editor with rich content support. A vulnerability has been discovered in the clipboard Widget plugin if used alongside the undo feature. The vulnerability allows a user to abuse undo functionality using malformed widget HTML, which could result in executing JavaScript code. It affects all users using the CKEditor 4 plugins listed above at version >= 4.13.0. The problem has been recognized and patched. The fix will be available in version 4.16.2.
Published: 2021-08-12T16:25:10.000Z
Updated: 2024-08-03T23:33:55.865Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-36189 vulnerable 2026-06-08 05:25:02.698550 Details available
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.DriverManagerConnectionSource.
Published: 2021-01-06T22:29:28.000Z
Updated: 2024-08-04T17:23:09.508Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-36188 vulnerable 2026-06-08 05:25:02.635089 Details available
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.JNDIConnectionSource.
Published: 2021-01-06T22:29:36.000Z
Updated: 2024-08-04T17:23:09.309Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-36187 vulnerable 2026-06-08 05:25:02.630760 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-36186 vulnerable 2026-06-08 05:25:02.625914 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-36185 vulnerable 2026-06-08 05:25:02.621567 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-36184 vulnerable 2026-06-08 05:25:02.614674 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-36183 vulnerable 2026-06-08 05:25:02.607735 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-36182 vulnerable 2026-06-08 05:25:02.603221 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-36181 vulnerable 2026-06-08 05:25:02.597009 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-36180 vulnerable 2026-06-08 05:25:02.584352 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-35491 vulnerable 2026-06-08 05:25:01.181575 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-35490 vulnerable 2026-06-08 05:25:01.169490 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.