Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

financial services behavior detection platform vulnerabilities and exploits

(subscribe to this query)
9.8
CVSSv3
CVE-2022-22963
In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is possible for a user to provide a specially crafted SpEL as a routing-expression that may result in remote code execution and access to local resources.
Vmware Spring Cloud FunctionOracle Sd-wan Edge 9.0Oracle Retail Xstore Point Of Service 20.0.1Oracle Communications Cloud Native Core Security Edge Protection Proxy 1.7.0Oracle Banking Cash Management 14.5Oracle Banking Trade Finance Process Management 14.5Oracle Banking Credit Facilities Process Management 14.5Oracle Banking Corporate Lending Process Management 14.5Oracle Banking Supply Chain Finance 14.5Oracle Sd-wan Edge 9.1Oracle Banking Liquidity Management 14.5Oracle Banking Liquidity Management 14.2Oracle Banking Virtual Account Management 14.5Oracle Financial Services Enterprise Case Management 8.1.1.0Oracle Financial Services Enterprise Case Management 8.1.1.1Oracle Financial Services Behavior Detection Platform 8.1.2.0Oracle Financial Services Behavior Detection Platform 8.1.1.1Oracle Financial Services Behavior Detection Platform 8.1.1.0Oracle Mysql Enterprise MonitorOracle Communications Cloud Native Core Console 1.9.0Oracle Communications Cloud Native Core Policy 1.15.0Oracle Communications Communications Policy Management 12.6.0.0.0
9.8
CVSSv3
CVE-2022-22965
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific exploit requires the application to run on Tomcat as a WAR deployment. If the application is deployed as a Spring Boot executable jar, i.e....
Vmware Spring FrameworkCisco Cx Cloud AgentOracle Sd-wan Edge 9.0Oracle Retail Xstore Point Of Service 20.0.1Oracle Communications Cloud Native Core Security Edge Protection Proxy 1.7.0Oracle Financial Services Analytical Applications Infrastructure 8.1.1Oracle Sd-wan Edge 9.1Siemens Siveillance Identity 1.6Siemens Siveillance Identity 1.5Siemens Sipass Integrated 2.85Siemens Sipass Integrated 2.80Oracle Product Lifecycle Analytics 3.6.1Oracle Financial Services Enterprise Case Management 8.1.1.0Oracle Financial Services Enterprise Case Management 8.1.1.1Oracle Financial Services Behavior Detection Platform 8.1.2.0Oracle Financial Services Behavior Detection Platform 8.1.1.1Oracle Financial Services Behavior Detection Platform 8.1.1.0Oracle Communications Cloud Native Core Console 1.9.0Oracle Communications Cloud Native Core Policy 1.15.0Oracle Communications Cloud Native Core Unified Data Repository 1.15.0Oracle Communications Cloud Native Core Unified Data Repository 22.1.0Oracle Communications Cloud Native Core Security Edge Protection Proxy 22.1.0
8.8
CVSSv3
CVE-2016-0635
Unspecified vulnerability in the Enterprise Manager Ops Center component in Oracle Enterprise Manager Grid Control 12.1.4, 12.2.2, and 12.3.2; the Oracle Health Sciences Information Manager component in Oracle Health Sciences Applications 1.2.8.3, 2.0.2.3, and 3.0.1.0; the Oracle...
Oracle Insurance Policy Administration J2ee 9.7.1Oracle Insurance Policy Administration J2ee 10.0.1Oracle Insurance Rules Palette 10.2.0Oracle Insurance Rules Palette 10.2.2Oracle Retail Integration Bus 15.0Oracle Insurance Policy Administration J2ee 9.6.1Oracle Insurance Rules Palette 10.0.1Oracle Insurance Rules Palette 10.1.2Oracle Primavera P6 Enterprise Project Portfolio Management 15.2Oracle Primavera P6 Enterprise Project Portfolio Management 16.1Oracle Health Sciences Information Manager 3.0.1.0Oracle Enterprise Manager Ops Center 12.1.4Oracle Retail Order Broker Cloud Service 15.0Oracle DocumakerOracle Insurance Policy Administration J2ee 10.2.2Oracle Insurance Rules Palette 9.6.1Oracle Insurance Rules Palette 9.7.1Oracle Primavera P6 Enterprise Project Portfolio Management 8.4Oracle Primavera P6 Enterprise Project Portfolio Management 15.1Oracle Health Sciences Information Manager 1.2.8.3Oracle Health Sciences Information Manager 2.0.2.3Oracle Retail Order Broker Cloud Service 5.1
8.3
CVSSv3
CVE-2021-2351
Vulnerability in the Advanced Networking Option component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise Advanced N...
Oracle Flexcube Investor Servicing 12.3.0Oracle Flexcube Investor Servicing 12.1.0Oracle Flexcube Private Banking 12.1.0Oracle Flexcube Private Banking 12.0.0Oracle Flexcube Investor Servicing 12.0.4Oracle Retail Store Inventory Management 14.1Oracle Ilearning 6.2Oracle Hospitality Suite8 8.10.2Oracle Retail Back Office 14.1Oracle Weblogic Server 12.2.1.3.0Oracle Utilities Framework 4.2.0.3.0Oracle Flexcube Investor Servicing 12.4.0Oracle Peoplesoft Enterprise Peopletools 8.57Oracle Hospitality Reporting And Analytics 9.1.0Oracle Application Testing Suite 13.3.0.1Oracle Retail Order Broker 16.0Oracle Retail Returns Management 14.1Oracle Retail Central Office 14.1Oracle Banking Platform 2.6.2Oracle Primavera Unifier 18.8Oracle Retail Point-of-service 14.1Oracle Retail Predictive Application Server 15.0.3
7.5
CVSSv3
CVE-2022-24729
CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. CKEditor4 prior to version 4.18.0 contains a vulnerability in the `dialog` plugin. The vulnerability allows abuse of a dialog input validator regular expression, which can cause a significant performance drop r...
Ckeditor CkeditorDrupal DrupalOracle Peoplesoft Enterprise Peopletools 8.58Oracle Peoplesoft Enterprise Peopletools 8.59Oracle Commerce Merchandising 11.3.2Oracle Financial Services Trade-based Anti Money Laundering 8.0.7Oracle Financial Services Trade-based Anti Money Laundering 8.0.8Fedoraproject Fedora 36Oracle Financial Services Analytical Applications Infrastructure 8.1.2.0Oracle Financial Services Analytical Applications Infrastructure 8.1.1.0Oracle Application ExpressOracle Financial Services Analytical Applications Infrastructure 8.1.2.1Oracle Financial Services Behavior Detection PlatformOracle Financial Services Analytical Applications InfrastructureOracle Financial Services Behavior Detection Platform 8.0.8.0Oracle Financial Services Behavior Detection Platform 8.0.7.0Fedoraproject Fedora 37
7.5
CVSSv3
CVE-2020-36518
jackson-databind prior to 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects.
Fasterxml Jackson-databindOracle Weblogic Server 12.2.1.3.0Oracle Commerce Platform 11.3.1Oracle Utilities Framework 4.3.0.5.0Oracle Utilities Framework 4.3.0.6.0Oracle Utilities Framework 4.4.0.0.0Oracle Weblogic Server 12.2.1.4.0Oracle Peoplesoft Enterprise Peopletools 8.58Oracle Primavera Unifier 19.12Oracle Sd-wan Edge 9.0Oracle Weblogic Server 14.1.1.0.0Oracle Coherence 14.1.1.0.0Oracle Utilities Framework 4.4.0.2.0Oracle Global Lifecycle Management Nextgen Oui Framework 13.9.4.2.2Oracle Primavera Unifier 20.12Oracle Peoplesoft Enterprise Peopletools 8.59Oracle Primavera GatewayOracle Utilities Framework 4.4.0.3.0Oracle Sd-wan Edge 9.1Oracle Commerce Platform 11.3.0Oracle Commerce Platform 11.3.2Oracle Primavera Unifier 21.12
6.5
CVSSv3
CVE-2022-23437
There's a vulnerability within the Apache Xerces Java (XercesJ) XML parser when handling specially crafted XML document payloads. This causes, the XercesJ XML parser to wait in an infinite loop, which may sometimes consume system resources for prolonged duration. This vulner...
Apache Xerces-jOracle Ilearning 6.2Oracle Flexcube Universal Banking 12.4.0Oracle Weblogic Server 12.2.1.3.0Oracle Agile Plm 9.3.6Oracle Weblogic Server 12.2.1.4.0Oracle Peoplesoft Enterprise Peopletools 8.58Oracle Weblogic Server 14.1.1.0.0Oracle Retail Bulk Data Integration 16.0.3.0Oracle Retail Merchandising System 16.0.3Oracle Global Lifecycle Management Nextgen Oui Framework 13.9.4.2.2Oracle Agile Engineering Data Management 6.2.1.0Oracle Retail Service Backbone 16.0.3Oracle Retail Financial Integration 16.0.3Oracle Retail Integration Bus 16.0.3Oracle Peoplesoft Enterprise Peopletools 8.59Oracle Retail Service Backbone 15.0.3.1Oracle Retail Service Backbone 14.1.3.2Oracle Financial Services Enterprise Case Management 8.0.7.2.0Oracle Banking Party Management 2.7.0Oracle Retail Merchandising System 19.0.1Oracle Retail Integration Bus 14.1.3.2
6.1
CVSSv3
CVE-2019-10219
A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.
Redhat Hibernate ValidatorRedhat Hibernate Validator 6.1.0Redhat Single Sign-on -Redhat Jboss Enterprise Application Platform -Redhat Jboss Data Grid -Redhat Openshift Application Runtimes -Redhat Fuse 1.0Redhat Jboss Enterprise Application Platform 7.2Redhat Jboss Enterprise Application Platform 7.3Netapp Active Iq Unified Manager -Netapp Element -Netapp Snapcenter Plug-in -Netapp Management Services For Element Software And Netapp Hci -Oracle Flexcube Investor Servicing 12.3.0Oracle Flexcube Investor Servicing 12.1.0Oracle Solaris 11Oracle Flexcube Private Banking 12.1.0Oracle Insurance Policy Administration J2ee 10.2.0Oracle Flexcube Private Banking 12.0.0Oracle Flexcube Investor Servicing 12.0.4Oracle Weblogic Server 12.1.3.0.0Oracle Retail Integration Bus 13.0
5.9
CVSSv3
CVE-2021-38153
Some components in Apache Kafka use `Arrays.equals` to validate a password or key, which is vulnerable to timing attacks that make brute force attacks for such credentials more likely to be successful. Users should upgrade to 2.8.1 or higher, or 3.0.0 or higher where this vulnera...
Apache KafkaApache Kafka 2.8.0Quarkus QuarkusOracle Primavera Unifier 18.8Oracle Primavera Unifier 19.12Oracle Primavera Unifier 20.12Oracle Primavera Unifier 21.12Oracle Financial Services Enterprise Case Management 8.0.8.1Oracle Financial Services Enterprise Case Management 8.1.1.0Oracle Financial Services Enterprise Case Management 8.1.1.1Oracle Financial Services Behavior Detection Platform 8.1.2.0Oracle Financial Services Behavior Detection Platform 8.1.1.1Oracle Financial Services Behavior Detection Platform 8.1.1.0Oracle Financial Services Enterprise Case Management 8.0.7.1Oracle Financial Services Enterprise Case Management 8.0.8.0Oracle Financial Services Behavior Detection PlatformOracle Communications Cloud Native Core Policy 1.15.0Oracle Financial Services Enterprise Case Management 8.0.7.2Oracle Financial Services Analytical Applications InfrastructureOracle Communications Brm - Elastic Charging Engine 12.0.0.5.0Oracle Communications Brm - Elastic Charging Engine
5.4
CVSSv3
CVE-2022-24728
CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. A vulnerability has been discovered in the core HTML processing module and may affect all plugins used by CKEditor 4 prior to version 4.18.0. The vulnerability allows someone to inject malformed HTML bypassing ...
Ckeditor CkeditorDrupal DrupalOracle Peoplesoft Enterprise Peopletools 8.58Oracle Peoplesoft Enterprise Peopletools 8.59Oracle Commerce Merchandising 11.3.2Oracle Financial Services Trade-based Anti Money Laundering 8.0.7Oracle Financial Services Trade-based Anti Money Laundering 8.0.8Fedoraproject Fedora 36Oracle Financial Services Analytical Applications Infrastructure 8.1.2.0Oracle Financial Services Analytical Applications Infrastructure 8.1.1.0Oracle Application ExpressOracle Financial Services Analytical Applications Infrastructure 8.1.2.1Oracle Financial Services Behavior Detection PlatformOracle Financial Services Analytical Applications InfrastructureOracle Financial Services Behavior Detection Platform 8.0.8.0Oracle Financial Services Behavior Detection Platform 8.0.7.0Fedoraproject Fedora 37
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
injectionCVE-2024-30983CVE-2023-4235CVE-2024-21338privilegeencryptionCVE-2023-4232CVE-2024-31497CVE-2024-32341
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook