oracle financial services analytical applications infrastructure 8.0.5 vulnerabilities and exploits

(subscribe to this query)

FasterXML jackson-databind 2.x prior to 2.9.7 might allow remote malicious users to conduct server-side request forgery (SSRF) attacks by leveraging failure to block the axis2-jaxws class from polymorphic deserialization.

Fasterxml Jackson-databind 2.7.0 Fasterxml Jackson-databind Fasterxml Jackson-databind 2.8.0 Fasterxml Jackson-databind 2.9.0 Debian Debian Linux 8.0 Debian Debian Linux 9.0 Oracle Primavera Unifier 16.2 Oracle Banking Platform 2.5.0 Oracle Primavera Unifier 16.1 Oracle Jdeveloper 12.1.3.0.0 Oracle Retail Merchandising System 16.0 Oracle Webcenter Portal 12.2.1.3.0 Oracle Primavera Unifier Oracle Communications Billing And Revenue Management 7.5 Oracle Communications Billing And Revenue Management 12.0 Oracle Financial Services Analytical Applications Infrastructure 8.0.2 Oracle Financial Services Analytical Applications Infrastructure 8.0.3 Oracle Financial Services Analytical Applications Infrastructure 8.0.4 Oracle Financial Services Analytical Applications Infrastructure 8.0.5 Oracle Financial Services Analytical Applications Infrastructure 8.0.6 Oracle Financial Services Analytical Applications Infrastructure 8.0.7 Oracle Banking Platform 2.6.0

FasterXML jackson-databind 2.x prior to 2.9.7 might allow remote malicious users to execute arbitrary code by leveraging failure to block the slf4j-ext class from polymorphic deserialization.

Fasterxml Jackson-databind Debian Debian Linux 8.0 Debian Debian Linux 9.0 Oracle Primavera Unifier 16.2 Oracle Jd Edwards Enterpriseone Tools 9.2 Oracle Primavera P6 Enterprise Project Portfolio Management 16.2 Oracle Primavera P6 Enterprise Project Portfolio Management 15.1 Oracle Banking Platform 2.5.0 Oracle Primavera Unifier 16.1 Oracle Primavera P6 Enterprise Project Portfolio Management 16.1 Oracle Jdeveloper 12.1.3.0.0 Oracle Primavera P6 Enterprise Project Portfolio Management 15.2 Oracle Retail Merchandising System 16.0 Oracle Webcenter Portal 12.2.1.3.0 Oracle Business Process Management Suite 12.1.3.0.0 Oracle Business Process Management Suite 12.2.1.3.0 Oracle Primavera P6 Enterprise Project Portfolio Management Oracle Primavera P6 Enterprise Project Portfolio Management 18.8 Oracle Jd Edwards Enterpriseone Orchestrator 9.2 Oracle Communications Billing And Revenue Management 7.5 Oracle Communications Billing And Revenue Management 12.0 Oracle Financial Services Analytical Applications Infrastructure 8.0.2

FasterXML jackson-databind 2.x prior to 2.9.7 might allow remote malicious users to execute arbitrary code by leveraging failure to block the blaze-ds-opt and blaze-ds-core classes from polymorphic deserialization.

Fasterxml Jackson-databind Debian Debian Linux 8.0 Debian Debian Linux 9.0 Oracle Primavera Unifier 16.2 Oracle Primavera P6 Enterprise Project Portfolio Management 16.2 Oracle Primavera P6 Enterprise Project Portfolio Management 15.1 Oracle Database Server 12.1.0.2 Oracle Banking Platform 2.5.0 Oracle Primavera Unifier 16.1 Oracle Database Server 11.2.0.4 Oracle Primavera P6 Enterprise Project Portfolio Management 16.1 Oracle Jdeveloper 12.1.3.0.0 Oracle Primavera P6 Enterprise Project Portfolio Management 15.2 Oracle Retail Merchandising System 16.0 Oracle Webcenter Portal 12.2.1.3.0 Oracle Database Server 12.2.0.1 Oracle Business Process Management Suite 12.1.3.0.0 Oracle Business Process Management Suite 12.2.1.3.0 Oracle Primavera P6 Enterprise Project Portfolio Management Oracle Primavera P6 Enterprise Project Portfolio Management 18.8 Oracle Database Server 18c Oracle Communications Billing And Revenue Management 7.5

FasterXML jackson-databind 2.x prior to 2.9.7 might allow malicious users to conduct external XML entity (XXE) attacks by leveraging failure to block unspecified JDK classes from polymorphic deserialization.

Fasterxml Jackson-databind 2.7.0 Fasterxml Jackson-databind Fasterxml Jackson-databind 2.8.0 Fasterxml Jackson-databind 2.9.0 Debian Debian Linux 8.0 Debian Debian Linux 9.0 Oracle Primavera Unifier 16.2 Oracle Banking Platform 2.5.0 Oracle Primavera Unifier 16.1 Oracle Jdeveloper 12.1.3.0.0 Oracle Retail Merchandising System 16.0 Oracle Webcenter Portal 12.2.1.3.0 Oracle Primavera Unifier Oracle Communications Billing And Revenue Management 7.5 Oracle Communications Billing And Revenue Management 12.0 Oracle Financial Services Analytical Applications Infrastructure 8.0.2 Oracle Financial Services Analytical Applications Infrastructure 8.0.3 Oracle Financial Services Analytical Applications Infrastructure 8.0.4 Oracle Financial Services Analytical Applications Infrastructure 8.0.5 Oracle Financial Services Analytical Applications Infrastructure 8.0.6 Oracle Financial Services Analytical Applications Infrastructure 8.0.7 Oracle Banking Platform 2.6.0

jQuery prior to 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.

97 Github repositories

Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 8.0.5-8.0.8. Easily exploitable vulnerability allows low privileged a...

Oracle Financial Services Analytical Applications Infrastructure

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook