Vulnerabilities (CVE)

Filtered by vendor Oracle Subscribe
Filtered by product Siebel Apps - Customer Order Management
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-9281 4 Ckeditor, Drupal, Fedoraproject and 1 more 11 Ckeditor, Drupal, Fedora and 8 more 2024-11-21 4.3 MEDIUM 6.1 MEDIUM
A cross-site scripting (XSS) vulnerability in the HTML Data Processor for CKEditor 4.0 before 4.14 allows remote attackers to inject arbitrary web script through a crafted "protected" comment (with the cke_protected syntax).