oracle banking extensibility workbench 14.3 vulnerabilities and exploits

(subscribe to this query)

8.8

CVSSv3

In JetBrains Kotlin from 1.4-M1 to 1.4-RC (as Kotlin 1.3.7x is not affected by the issue. Fixed version is 1.4.0) there is a script-cache privilege escalation vulnerability due to kotlin-main-kts cached scripts in the system temp directory, which is shared by all users by default...

Jetbrains Kotlin 1.4.0 Oracle Communications Cloud Native Core Policy 1.14.0 Oracle Banking Extensibility Workbench 14.2 Oracle Banking Extensibility Workbench 14.3 Oracle Banking Extensibility Workbench 14.5

8.1

CVSSv3

FasterXML jackson-databind 2.x prior to 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.cpdsadapter.DriverAdapterCPDS.

1 Github repository

8.1

CVSSv3

FasterXML jackson-databind 2.x prior to 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.cpdsadapter.DriverAdapterCPDS.

1 Github repository

8.1

CVSSv3

FasterXML jackson-databind 2.x prior to 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.docx4j.org.apache.xalan.lib.sql.JNDIConnectionPool.

8.1

CVSSv3

FasterXML jackson-databind 2.x prior to 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.cpdsadapter.DriverAdapterCPDS.

Netapp Service Level Manager -Debian Debian Linux 9.0 Oracle Webcenter Portal 12.2.1.3.0 Oracle Primavera Unifier 17.2 Oracle Application Testing Suite 13.3.0.1 Oracle Primavera Unifier 18.8 Oracle Primavera Unifier Oracle Agile Plm 9.3.6 Oracle Communications Policy Management 12.5.0 Oracle Primavera Unifier 19.12 Oracle Webcenter Portal 12.2.1.4.0 Oracle Communications Billing And Revenue Management 12.0.0.3.0 Oracle Communications Billing And Revenue Management 7.5.0.23.0 Oracle Communications Services Gatekeeper 7.0 Oracle Retail Merchandising System 15.0.3 Oracle Communications Evolved Communications Application Server 7.1 Oracle Goldengate Application Adapters 19.1.0.0.0 Oracle Data Integrator 12.2.1.4.0 Oracle Primavera Unifier 20.12 Oracle Banking Virtual Account Management 14.3.0 Oracle Insurance Rules Palette 11.0.2 Oracle Commerce Platform

1 Github repository

8.1

CVSSv3

FasterXML jackson-databind 2.x prior to 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.PerUserPoolDataSource.

1 Github repository

8.1

CVSSv3

FasterXML jackson-databind 2.x prior to 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.SharedPoolDataSource.

8.1

CVSSv3

FasterXML jackson-databind 2.x prior to 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.PerUserPoolDataSource.

8.1

CVSSv3

FasterXML jackson-databind 2.x prior to 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.SharedPoolDataSource.

8.1

CVSSv3

FasterXML jackson-databind 2.x prior to 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.JNDIConnectionSource.

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook