Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

oracle banking trade finance process management 14.5.0 vulnerabilities and exploits

(subscribe to this query)
5
CVSSv2
CVE-2021-35515
When reading a specially crafted 7Z archive, the construction of the list of codecs that decompress an entry can result in an infinite loop. This could be used to mount a denial of service attack against services that use Compress' sevenz package.
Apache Commons CompressNetapp Oncommand Insight -Netapp Active Iq Unified Manager -Oracle Flexcube Universal Banking 12.4.0Oracle Business Process Management Suite 12.2.1.3.0Oracle Peoplesoft Enterprise Peopletools 8.57Oracle Primavera Unifier 18.8Oracle Primavera UnifierOracle Banking Digital Experience 19.1Oracle Flexcube Universal BankingOracle Peoplesoft Enterprise Peopletools 8.58Oracle Primavera Unifier 19.12Oracle Banking Digital Experience 20.1Oracle Primavera Unifier 20.12Oracle Business Process Management Suite 12.2.1.4.0Oracle Communications Messaging Server 8.1Oracle Commerce Guided Search 11.3.2Oracle Peoplesoft Enterprise Peopletools 8.59Oracle Insurance Policy Administration 11.3.0Oracle Insurance Policy Administration 11.0.2Oracle Financial Services Enterprise Case Management 8.0.8.1.0Oracle Financial Services Enterprise Case Management 8.0.7.2.0
4.3
CVSSv2
CVE-2021-31811
In Apache PDFBox, a carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file. This issue affects Apache PDFBox version 2.0.23 and prior 2.0.x versions.
Apache PdfboxFedoraproject Fedora 33Fedoraproject Fedora 34Oracle Primavera Unifier 18.8Oracle Primavera UnifierOracle Flexcube Universal BankingOracle Outside In Technology 8.5.5Oracle Primavera Unifier 19.12Oracle Primavera Unifier 20.12Oracle Banking Credit Facilities Process Management 14.3.0Oracle Banking Corporate Lending Process Management 14.3.0Oracle Communications Messaging Server 8.1Oracle Banking Supply Chain Finance 14.2.0Oracle Banking Credit Facilities Process Management 14.2.0Oracle Banking Credit Facilities Process Management 14.5.0Oracle Banking Corporate Lending Process Management 14.2.0Oracle Banking Corporate Lending Process Management 14.5.0Oracle Banking Supply Chain Finance 14.5.0Oracle Banking Supply Chain Finance 14.3.0Oracle Retail Customer Management And Segmentation Foundation 18.1Oracle Banking Trade Finance 14.5Oracle Banking Treasury Management 14.5
6.5
CVSSv2
CVE-2021-29505
XStream is software for serializing Java objects to XML and back again. A vulnerability in XStream versions before 1.4.17 may allow a remote attacker has sufficient rights to execute commands of the host only by manipulating the processed input stream. No user who followed the re...
Xstream Project XstreamDebian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0Fedoraproject Fedora 33Fedoraproject Fedora 34Fedoraproject Fedora 35Netapp Snapmanager -Oracle Webcenter Portal 12.2.1.3.0Oracle Webcenter Sites 12.2.1.3.0Oracle Communications Unified Inventory Management 7.3.4Oracle Communications Unified Inventory Management 7.3.5Oracle Communications Unified Inventory Management 7.4.0Oracle Webcenter Sites 12.2.1.4.0Oracle Webcenter Portal 12.2.1.4.0Oracle Enterprise Manager Ops Center 12.4.0.0Oracle Banking Credit Facilities Process Management 14.3.0Oracle Banking Corporate Lending Process Management 14.3.0Oracle Business Activity Monitoring 12.2.1.3.0Oracle Business Activity Monitoring 11.1.1.9.0Oracle Business Activity Monitoring 12.2.1.4.0Oracle Communications Unified Inventory Management 7.4.1
4.3
CVSSv2
CVE-2021-21409
Netty is an open-source, asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. In Netty (io.netty:netty-codec-http2) before version 4.1.61.Final there is a vulnerability that enables request ...
Netty NettyDebian Debian Linux 10.0Netapp Oncommand Workflow Automation -Netapp Oncommand Api Services -Oracle Coherence 12.2.1.4.0Oracle Coherence 14.1.1.0.0Oracle Banking Trade Finance Process Management 14.3.0Oracle Banking Credit Facilities Process Management 14.3.0Oracle Banking Corporate Lending Process Management 14.3.0Oracle Primavera GatewayOracle Banking Trade Finance Process Management 14.5.0Oracle Banking Credit Facilities Process Management 14.2.0Oracle Banking Credit Facilities Process Management 14.5.0Oracle Banking Corporate Lending Process Management 14.2.0Oracle Banking Corporate Lending Process Management 14.5.0Oracle Banking Trade Finance Process Management 14.2.0Oracle Communications Messaging Server 8.1Oracle Communications Brm - Elastic Charging Engine 12.0.0.3Oracle Communications Design Studio 7.4.2.0.0Oracle Communications Cloud Native Core Console 1.7.0Oracle Nosql DatabaseOracle Communications Cloud Native Core Policy 1.14.0
4.3
CVSSv2
CVE-2021-27906
A carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file. This issue affects Apache PDFBox version 2.0.22 and prior 2.0.x versions.
Apache PdfboxFedoraproject Fedora 32Fedoraproject Fedora 33Fedoraproject Fedora 34Oracle Hyperion Financial Reporting 11.1.2.4Oracle Webcenter Sites 12.2.1.3.0Oracle Primavera Unifier 18.8Oracle Primavera UnifierOracle Flexcube Universal BankingOracle Peoplesoft Enterprise Peopletools 8.58Oracle Outside In Technology 8.5.5Oracle Primavera Unifier 19.12Oracle Webcenter Sites 12.2.1.4.0Oracle Retail Customer Management And Segmentation Foundation 19.0Oracle Primavera Unifier 20.12Oracle Banking Virtual Account Management 14.3.0Oracle Banking Trade Finance Process Management 14.3.0Oracle Banking Credit Facilities Process Management 14.3.0Oracle Banking Corporate Lending Process Management 14.3.0Oracle Communications Messaging Server 8.1Oracle Peoplesoft Enterprise Peopletools 8.59Oracle Retail Xstore Point Of Service 16.0.6
4.3
CVSSv2
CVE-2021-27807
A carefully crafted PDF file can trigger an infinite loop while loading the file. This issue affects Apache PDFBox version 2.0.22 and prior 2.0.x versions.
Apache PdfboxFedoraproject Fedora 32Fedoraproject Fedora 33Fedoraproject Fedora 34Oracle Hyperion Financial Reporting 11.1.2.4Oracle Webcenter Sites 12.2.1.3.0Oracle Primavera Unifier 18.8Oracle Primavera UnifierOracle Flexcube Universal BankingOracle Outside In Technology 8.5.5Oracle Primavera Unifier 19.12Oracle Webcenter Sites 12.2.1.4.0Oracle Retail Customer Management And Segmentation Foundation 19.0Oracle Primavera Unifier 20.12Oracle Banking Virtual Account Management 14.3.0Oracle Banking Trade Finance Process Management 14.3.0Oracle Communications Messaging Server 8.1Oracle Retail Xstore Point Of Service 16.0.6Oracle Retail Xstore Point Of Service 17.0.4Oracle Retail Xstore Point Of Service 18.0.3Oracle Retail Xstore Point Of Service 19.0.2Oracle Retail Xstore Point Of Service 20.0.1
6.5
CVSSv2
CVE-2021-23337
Lodash versions before 4.17.21 are vulnerable to Command Injection via the template function.
Lodash LodashOracle Primavera Unifier 18.8Oracle Primavera UnifierOracle Peoplesoft Enterprise Peopletools 8.58Oracle Primavera Unifier 19.12Oracle Retail Customer Management And Segmentation Foundation 19.0Oracle Communications Services Gatekeeper 7.0Oracle Enterprise Communications Broker 3.2.0Oracle Primavera Unifier 20.12Oracle Banking Extensibility Workbench 14.3.0Oracle Banking Trade Finance Process Management 14.3.0Oracle Banking Credit Facilities Process Management 14.3.0Oracle Banking Corporate Lending Process Management 14.3.0Oracle Peoplesoft Enterprise Peopletools 8.59Oracle Primavera GatewayOracle Communications Session Border Controller 8.4Oracle Communications Session Border Controller 9.0Oracle Banking Supply Chain Finance 14.2.0Oracle Banking Trade Finance Process Management 14.5.0Oracle Banking Credit Facilities Process Management 14.2.0Oracle Banking Credit Facilities Process Management 14.5.0Oracle Banking Corporate Lending Process Management 14.2.0
5
CVSSv2
CVE-2020-28500
Lodash versions before 4.17.21 are vulnerable to Regular Expression Denial of Service (ReDoS) via the toNumber, trim and trimEnd functions.
Lodash LodashOracle Primavera Unifier 18.8Oracle Primavera UnifierOracle Peoplesoft Enterprise Peopletools 8.58Oracle Primavera Unifier 19.12Oracle Retail Customer Management And Segmentation Foundation 19.0Oracle Communications Services Gatekeeper 7.0Oracle Enterprise Communications Broker 3.2.0Oracle Primavera Unifier 20.12Oracle Banking Extensibility Workbench 14.3.0Oracle Banking Trade Finance Process Management 14.3.0Oracle Banking Credit Facilities Process Management 14.3.0Oracle Banking Corporate Lending Process Management 14.3.0Oracle Peoplesoft Enterprise Peopletools 8.59Oracle Primavera GatewayOracle Communications Session Border Controller 8.4Oracle Communications Session Border Controller 9.0Oracle Banking Supply Chain Finance 14.2.0Oracle Banking Trade Finance Process Management 14.5.0Oracle Banking Credit Facilities Process Management 14.2.0Oracle Banking Credit Facilities Process Management 14.5.0Oracle Banking Corporate Lending Process Management 14.2.0
1.9
CVSSv2
CVE-2021-21290
Netty is an open-source, asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. In Netty before version 4.1.59.Final there is a vulnerability on Unix-like systems involving an insecure temp fi...
Netty NettyDebian Debian Linux 9.0Debian Debian Linux 10.0Quarkus QuarkusOracle Banking Trade Finance Process Management 14.3.0Oracle Banking Credit Facilities Process Management 14.3.0Oracle Banking Corporate Lending Process Management 14.3.0Oracle Nosql DatabaseOracle Banking Trade Finance Process Management 14.5.0Oracle Banking Credit Facilities Process Management 14.2.0Oracle Banking Credit Facilities Process Management 14.5.0Oracle Banking Corporate Lending Process Management 14.2.0Oracle Banking Corporate Lending Process Management 14.5.0Oracle Banking Trade Finance Process Management 14.2.0Oracle Communications Messaging Server 8.1Oracle Communications Design Studio 7.4.2Oracle Communications Brm - Elastic Charging Engine 12.0.0.3Netapp Snapcenter -Netapp Active Iq Unified Manager -Netapp Cloud Secure Agent -
9.3
CVSSv2
CVE-2020-26217
XStream before version 1.4.14 is vulnerable to Remote Code Execution.The vulnerability may allow a remote malicious user to run arbitrary shell commands only by manipulating the processed input stream. Only users who rely on blocklists are affected. Anyone using XStream's Se...
Xstream Project XstreamDebian Debian Linux 9.0Debian Debian Linux 10.0Netapp SnapmanagerNetapp Snapmanager -Apache Activemq 5.15.4Oracle Banking Platform 2.4.0Oracle Communications Policy Management 12.5.0Oracle Banking Platform 2.7.1Oracle Banking Platform 2.9.0Oracle Banking Virtual Account Management 14.3.0Oracle Business Activity Monitoring 12.2.1.3.0Oracle Business Activity Monitoring 11.1.1.9.0Oracle Business Activity Monitoring 12.2.1.4.0Oracle Retail Xstore Point Of Service 16.0.6Oracle Retail Xstore Point Of Service 17.0.4Oracle Retail Xstore Point Of Service 18.0.3Oracle Retail Xstore Point Of Service 19.0.2Oracle Banking Virtual Account Management 14.2.0Oracle Banking Virtual Account Management 14.5.0Oracle Banking Cash Management 14.2Oracle Banking Cash Management 14.3
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48654CVE-2024-2757authentication bypassCVE-2024-3194CVE-2024-33640CVE-2024-21111dosinsecure direct object referenceCVE-2024-21345
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook