Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

oracle banking extensibility workbench 14.3.0 vulnerabilities and exploits

(subscribe to this query)
7.4
CVSSv3
CVE-2020-8172
TLS session reuse can lead to host certificate verification bypass in node version < 12.18.0 and < 14.4.0.
Nodejs Node.jsOracle Graalvm 19.3.2Oracle Graalvm 20.1.0Oracle Banking Extensibility Workbench 14.4.0Oracle Banking Extensibility Workbench 14.3.0Oracle Mysql ClusterOracle Blockchain Platform
7.5
CVSSv3
CVE-2020-11080
In nghttp2 before version 1.41.0, the overly large HTTP/2 SETTINGS frame payload causes denial of service. The proof of concept attack involves a malicious client constructing a SETTINGS frame with a length of 14,400 bytes (2400 individual settings entries) over and over again. T...
Nghttp2 Nghttp2Debian Debian Linux 9.0Debian Debian Linux 10.0Opensuse Leap 15.1Fedoraproject Fedora 31Fedoraproject Fedora 33Oracle Enterprise Communications Broker 3.1.0Oracle Graalvm 19.3.2Oracle Graalvm 20.1.0Oracle MysqlOracle Enterprise Communications Broker 3.2.0Oracle Banking Extensibility Workbench 14.4.0Oracle Banking Extensibility Workbench 14.3.0Oracle Blockchain PlatformNodejs Node.js
7.4
CVSSv3
CVE-2020-8203
Prototype pollution attack when using _.zipObjectDeep in lodash prior to 4.17.20.
Lodash LodashOracle Peoplesoft Enterprise Peopletools 8.58Oracle Communications Billing And Revenue Management 12.0.0.3.0Oracle Communications Billing And Revenue Management 7.5.0.23.0Oracle Enterprise Communications Broker 3.2.0Oracle Banking Extensibility Workbench 14.3.0Oracle Banking Virtual Account Management 14.3.0Oracle Banking Trade Finance Process Management 14.3.0Oracle Banking Credit Facilities Process Management 14.3.0Oracle Banking Corporate Lending Process Management 14.3.0Oracle Peoplesoft Enterprise Peopletools 8.59Oracle Primavera GatewayOracle Enterprise Communications Broker Pcz3.3Oracle Communications Subscriber-aware Load Balancer Cz8.3Oracle Communications Subscriber-aware Load Balancer Cz8.4Oracle Communications Session Router Cz8.4Oracle Communications Session Border Controller Cz8.4Oracle Communications Session Border Controller 8.4Oracle Communications Session Border Controller 9.0Oracle Banking Virtual Account Management 14.2.0Oracle Banking Virtual Account Management 14.5.0Oracle Banking Supply Chain Finance 14.2.0
5.3
CVSSv3
CVE-2020-28500
Lodash versions before 4.17.21 are vulnerable to Regular Expression Denial of Service (ReDoS) via the toNumber, trim and trimEnd functions.
Lodash LodashOracle Primavera Unifier 18.8Oracle Primavera UnifierOracle Peoplesoft Enterprise Peopletools 8.58Oracle Primavera Unifier 19.12Oracle Retail Customer Management And Segmentation Foundation 19.0Oracle Communications Services Gatekeeper 7.0Oracle Enterprise Communications Broker 3.2.0Oracle Primavera Unifier 20.12Oracle Banking Extensibility Workbench 14.3.0Oracle Banking Trade Finance Process Management 14.3.0Oracle Banking Credit Facilities Process Management 14.3.0Oracle Banking Corporate Lending Process Management 14.3.0Oracle Peoplesoft Enterprise Peopletools 8.59Oracle Primavera GatewayOracle Communications Session Border Controller 8.4Oracle Communications Session Border Controller 9.0Oracle Banking Supply Chain Finance 14.2.0Oracle Banking Trade Finance Process Management 14.5.0Oracle Banking Credit Facilities Process Management 14.2.0Oracle Banking Credit Facilities Process Management 14.5.0Oracle Banking Corporate Lending Process Management 14.2.0
8.1
CVSSv3
CVE-2020-8174
napi_get_value_string_*() allows various kinds of memory corruption in node < 10.21.0, 12.18.0, and < 14.4.0.
Nodejs Node.jsOracle Banking Extensibility Workbench 14.4.0Oracle Banking Extensibility Workbench 14.3.0Oracle Retail Xstore Point Of Service 16.0.6Oracle Retail Xstore Point Of Service 17.0.4Oracle Retail Xstore Point Of Service 18.0.3Oracle Retail Xstore Point Of Service 19.0.2Oracle Retail Xstore Point Of Service 20.0.1Oracle Mysql ClusterOracle Blockchain PlatformNetapp Snapcenter -Netapp Oncommand Workflow Automation -Netapp Oncommand Insight -Netapp Active Iq Unified Manager -
7.2
CVSSv3
CVE-2021-23337
Lodash versions before 4.17.21 are vulnerable to Command Injection via the template function.
Lodash LodashOracle Primavera Unifier 18.8Oracle Primavera UnifierOracle Peoplesoft Enterprise Peopletools 8.58Oracle Primavera Unifier 19.12Oracle Retail Customer Management And Segmentation Foundation 19.0Oracle Communications Services Gatekeeper 7.0Oracle Enterprise Communications Broker 3.2.0Oracle Primavera Unifier 20.12Oracle Banking Extensibility Workbench 14.3.0Oracle Banking Trade Finance Process Management 14.3.0Oracle Banking Credit Facilities Process Management 14.3.0Oracle Banking Corporate Lending Process Management 14.3.0Oracle Peoplesoft Enterprise Peopletools 8.59Oracle Primavera GatewayOracle Communications Session Border Controller 8.4Oracle Communications Session Border Controller 9.0Oracle Banking Supply Chain Finance 14.2.0Oracle Banking Trade Finance Process Management 14.5.0Oracle Banking Credit Facilities Process Management 14.2.0Oracle Banking Credit Facilities Process Management 14.5.0Oracle Banking Corporate Lending Process Management 14.2.0
8.1
CVSSv3
CVE-2020-28052
An issue exists in Legion of the Bouncy Castle BC Java 1.65 and 1.66. The OpenBSDBCrypt.checkPassword utility method compared incorrect data when checking the password, allowing incorrect passwords to indicate they were matching with previously hashed ones that were different.
Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.66Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.65Apache Karaf 4.3.2Oracle Peoplesoft Enterprise Peopletools 8.56Oracle Webcenter Portal 12.2.1.3.0Oracle Webcenter Portal 11.1.1.9.0Oracle Peoplesoft Enterprise Peopletools 8.57Oracle Utilities Framework 4.3.0.6.0Oracle Utilities Framework 4.4.0.0.0Oracle Peoplesoft Enterprise Peopletools 8.58Oracle Webcenter Portal 12.2.1.4.0Oracle Utilities Framework 4.4.0.2.0Oracle Banking Extensibility Workbench 14.3.0Oracle Banking Virtual Account Management 14.3.0Oracle Banking Credit Facilities Process Management 14.3.0Oracle Banking Corporate Lending Process Management 14.3.0Oracle Communications Messaging Server 8.1Oracle Commerce Guided Search 11.3.2Oracle Communications Messaging Server 8.0.2Oracle Utilities Framework 4.4.0.3.0Oracle Communications Cloud Native Core Network Slice Selection Function 1.2.1Oracle Communications Pricing Design Center 12.0.0.3.0
8.8
CVSSv3
CVE-2020-10531
An issue exists in International Components for Unicode (ICU) for C/C++ up to and including 66.1. An integer overflow, leading to a heap-based buffer overflow, exists in the UnicodeString::doAppend() function in common/unistr.cpp.
Icu-project International Components For UnicodeRedhat Enterprise Linux Desktop 6.0Redhat Enterprise Linux Server 6.0Redhat Enterprise Linux Workstation 6.0Google ChromeFedoraproject Fedora 30Fedoraproject Fedora 31Fedoraproject Fedora 33Debian Debian Linux 8.0Debian Debian Linux 9.0Debian Debian Linux 10.0Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 19.10Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 12.04Opensuse Leap 15.1Oracle Banking Extensibility Workbench 14.4.0Oracle Banking Extensibility Workbench 14.3.0Nodejs Node.js
8.1
CVSSv3
CVE-2020-35728
FasterXML jackson-databind 2.x prior to 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.oracle.wls.shaded.org.apache.xalan.lib.sql.JNDIConnectionPool (aka embedded Xalan in org.glassfish.web/javax.servlet.jsp.jstl).
Fasterxml Jackson-databindDebian Debian Linux 9.0Netapp Service Level Manager -Oracle Webcenter Portal 12.2.1.3.0Oracle Application Testing Suite 13.3.0.1Oracle Primavera UnifierOracle Agile Plm 9.3.6Oracle Communications Policy Management 12.5.0Oracle Webcenter Portal 12.2.1.4.0Oracle Communications Billing And Revenue Management 12.0.0.3.0Oracle Communications Billing And Revenue Management 7.5.0.23.0Oracle Communications Services Gatekeeper 7.0Oracle Retail Merchandising System 15.0.3Oracle Communications Evolved Communications Application Server 7.1Oracle Goldengate Application Adapters 19.1.0.0.0Oracle Data Integrator 12.2.1.4.0Oracle Primavera Unifier 20.12Oracle Banking Virtual Account Management 14.3.0Oracle Autovue 21.0.2Oracle Insurance Rules Palette 11.0.2Oracle Commerce PlatformOracle Commerce Platform 11.2.0
8.1
CVSSv3
CVE-2020-36181
FasterXML jackson-databind 2.x prior to 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.cpdsadapter.DriverAdapterCPDS.
Netapp Service Level Manager -Debian Debian Linux 9.0Oracle Webcenter Portal 12.2.1.3.0Oracle Primavera Unifier 17.2Oracle Application Testing Suite 13.3.0.1Oracle Primavera Unifier 18.8Oracle Primavera UnifierOracle Agile Plm 9.3.6Oracle Communications Policy Management 12.5.0Oracle Primavera Unifier 19.12Oracle Webcenter Portal 12.2.1.4.0Oracle Communications Billing And Revenue Management 12.0.0.3.0Oracle Communications Billing And Revenue Management 7.5.0.23.0Oracle Communications Services Gatekeeper 7.0Oracle Retail Merchandising System 15.0.3Oracle Communications Evolved Communications Application Server 7.1Oracle Goldengate Application Adapters 19.1.0.0.0Oracle Data Integrator 12.2.1.4.0Oracle Primavera Unifier 20.12Oracle Banking Virtual Account Management 14.3.0Oracle Insurance Rules Palette 11.0.2Oracle Commerce Platform
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook