Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

oracle financial services analytical applications infrastructure 8.0.6 vulnerabilities and exploits

(subscribe to this query)
10
CVSSv3
CVE-2018-14721
FasterXML jackson-databind 2.x prior to 2.9.7 might allow remote malicious users to conduct server-side request forgery (SSRF) attacks by leveraging failure to block the axis2-jaxws class from polymorphic deserialization.
Fasterxml Jackson-databind 2.7.0Fasterxml Jackson-databindFasterxml Jackson-databind 2.8.0Fasterxml Jackson-databind 2.9.0Debian Debian Linux 8.0Debian Debian Linux 9.0Oracle Primavera Unifier 16.2Oracle Banking Platform 2.5.0Oracle Primavera Unifier 16.1Oracle Jdeveloper 12.1.3.0.0Oracle Retail Merchandising System 16.0Oracle Webcenter Portal 12.2.1.3.0Oracle Primavera UnifierOracle Communications Billing And Revenue Management 7.5Oracle Communications Billing And Revenue Management 12.0Oracle Financial Services Analytical Applications Infrastructure 8.0.2Oracle Financial Services Analytical Applications Infrastructure 8.0.3Oracle Financial Services Analytical Applications Infrastructure 8.0.4Oracle Financial Services Analytical Applications Infrastructure 8.0.5Oracle Financial Services Analytical Applications Infrastructure 8.0.6Oracle Financial Services Analytical Applications Infrastructure 8.0.7Oracle Banking Platform 2.6.0
9.8
CVSSv3
CVE-2020-9546
FasterXML jackson-databind 2.x prior to 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.hadoop.shaded.com.zaxxer.hikari.HikariConfig (aka shaded hikari-config).
Fasterxml Jackson-databindNetapp Active Iq Unified ManagerDebian Debian Linux 8.0Oracle Retail Xstore Point Of Service 15.0Oracle Primavera Unifier 16.2Oracle Retail Service Backbone 14.1Oracle Primavera Unifier 16.1Oracle Retail Service Backbone 15.0Oracle Weblogic Server 12.2.1.3.0Oracle Retail Xstore Point Of Service 16.0Oracle Primavera Unifier 18.8Oracle Primavera UnifierOracle Retail Merchandising System 15.0Oracle Agile Plm 9.3.6Oracle Banking Digital Experience 18.2Oracle Banking Digital Experience 18.3Oracle Banking Digital Experience 19.1Oracle Banking Digital Experience 18.1Oracle Weblogic Server 12.2.1.4.0Oracle Enterprise Manager Base Platform 13.3.0.0Oracle Financial Services Price Creation And Discovery 8.0.7Oracle Primavera Unifier 19.12
9.8
CVSSv3
CVE-2018-14718
FasterXML jackson-databind 2.x prior to 2.9.7 might allow remote malicious users to execute arbitrary code by leveraging failure to block the slf4j-ext class from polymorphic deserialization.
Fasterxml Jackson-databindDebian Debian Linux 8.0Debian Debian Linux 9.0Oracle Primavera Unifier 16.2Oracle Jd Edwards Enterpriseone Tools 9.2Oracle Primavera P6 Enterprise Project Portfolio Management 16.2Oracle Primavera P6 Enterprise Project Portfolio Management 15.1Oracle Banking Platform 2.5.0Oracle Primavera Unifier 16.1Oracle Primavera P6 Enterprise Project Portfolio Management 16.1Oracle Jdeveloper 12.1.3.0.0Oracle Primavera P6 Enterprise Project Portfolio Management 15.2Oracle Retail Merchandising System 16.0Oracle Webcenter Portal 12.2.1.3.0Oracle Business Process Management Suite 12.1.3.0.0Oracle Business Process Management Suite 12.2.1.3.0Oracle Primavera P6 Enterprise Project Portfolio ManagementOracle Primavera P6 Enterprise Project Portfolio Management 18.8Oracle Jd Edwards Enterpriseone Orchestrator 9.2Oracle Communications Billing And Revenue Management 7.5Oracle Communications Billing And Revenue Management 12.0Oracle Financial Services Analytical Applications Infrastructure 8.0.2
9.8
CVSSv3
CVE-2018-14719
FasterXML jackson-databind 2.x prior to 2.9.7 might allow remote malicious users to execute arbitrary code by leveraging failure to block the blaze-ds-opt and blaze-ds-core classes from polymorphic deserialization.
Fasterxml Jackson-databindDebian Debian Linux 8.0Debian Debian Linux 9.0Oracle Primavera Unifier 16.2Oracle Primavera P6 Enterprise Project Portfolio Management 16.2Oracle Primavera P6 Enterprise Project Portfolio Management 15.1Oracle Database Server 12.1.0.2Oracle Banking Platform 2.5.0Oracle Primavera Unifier 16.1Oracle Database Server 11.2.0.4Oracle Primavera P6 Enterprise Project Portfolio Management 16.1Oracle Jdeveloper 12.1.3.0.0Oracle Primavera P6 Enterprise Project Portfolio Management 15.2Oracle Retail Merchandising System 16.0Oracle Webcenter Portal 12.2.1.3.0Oracle Database Server 12.2.0.1Oracle Business Process Management Suite 12.1.3.0.0Oracle Business Process Management Suite 12.2.1.3.0Oracle Primavera P6 Enterprise Project Portfolio ManagementOracle Primavera P6 Enterprise Project Portfolio Management 18.8Oracle Database Server 18cOracle Communications Billing And Revenue Management 7.5
9.8
CVSSv3
CVE-2018-14720
FasterXML jackson-databind 2.x prior to 2.9.7 might allow malicious users to conduct external XML entity (XXE) attacks by leveraging failure to block unspecified JDK classes from polymorphic deserialization.
Fasterxml Jackson-databind 2.7.0Fasterxml Jackson-databindFasterxml Jackson-databind 2.8.0Fasterxml Jackson-databind 2.9.0Debian Debian Linux 8.0Debian Debian Linux 9.0Oracle Primavera Unifier 16.2Oracle Banking Platform 2.5.0Oracle Primavera Unifier 16.1Oracle Jdeveloper 12.1.3.0.0Oracle Retail Merchandising System 16.0Oracle Webcenter Portal 12.2.1.3.0Oracle Primavera UnifierOracle Communications Billing And Revenue Management 7.5Oracle Communications Billing And Revenue Management 12.0Oracle Financial Services Analytical Applications Infrastructure 8.0.2Oracle Financial Services Analytical Applications Infrastructure 8.0.3Oracle Financial Services Analytical Applications Infrastructure 8.0.4Oracle Financial Services Analytical Applications Infrastructure 8.0.5Oracle Financial Services Analytical Applications Infrastructure 8.0.6Oracle Financial Services Analytical Applications Infrastructure 8.0.7Oracle Banking Platform 2.6.0
8.8
CVSSv3
CVE-2020-11112
FasterXML jackson-databind 2.x prior to 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.proxy.provider.remoting.RmiProvider (aka apache/commons-proxy).
Fasterxml Jackson-databindDebian Debian Linux 8.0Netapp Steelstore Cloud Integrated Storage -Oracle Retail Xstore Point Of Service 15.0Oracle Primavera Unifier 16.2Oracle Retail Service Backbone 14.1Oracle Primavera Unifier 16.1Oracle Retail Service Backbone 15.0Oracle Weblogic Server 12.2.1.3.0Oracle Retail Xstore Point Of Service 16.0Oracle Primavera Unifier 18.8Oracle Primavera UnifierOracle Retail Merchandising System 15.0Oracle Agile Plm 9.3.6Oracle Banking Digital Experience 18.2Oracle Banking Digital Experience 18.3Oracle Banking Digital Experience 19.1Oracle Banking Digital Experience 18.1Oracle Weblogic Server 12.2.1.4.0Oracle Enterprise Manager Base Platform 13.3.0.0Oracle Financial Services Price Creation And Discovery 8.0.7Oracle Primavera Unifier 19.12
8.8
CVSSv3
CVE-2020-11113
FasterXML jackson-databind 2.x prior to 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.openjpa.ee.WASRegistryManagedRuntime (aka openjpa).
Fasterxml Jackson-databindDebian Debian Linux 8.0Netapp Steelstore Cloud Integrated Storage -Oracle Retail Xstore Point Of Service 15.0Oracle Primavera Unifier 16.2Oracle Retail Service Backbone 14.1Oracle Primavera Unifier 16.1Oracle Retail Service Backbone 15.0Oracle Weblogic Server 12.2.1.3.0Oracle Webcenter Portal 12.2.1.3.0Oracle Retail Xstore Point Of Service 16.0Oracle Primavera Unifier 18.8Oracle Primavera UnifierOracle Retail Merchandising System 15.0Oracle Agile Plm 9.3.6Oracle Banking Digital Experience 18.2Oracle Banking Digital Experience 18.3Oracle Banking Digital Experience 19.1Oracle Banking Digital Experience 18.1Oracle Weblogic Server 12.2.1.4.0Oracle Enterprise Manager Base Platform 13.3.0.0Oracle Financial Services Price Creation And Discovery 8.0.7
8.8
CVSSv3
CVE-2020-10968
FasterXML jackson-databind 2.x prior to 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.aoju.bus.proxy.provider.remoting.RmiProvider (aka bus-proxy).
Fasterxml Jackson-databindDebian Debian Linux 8.0Netapp Steelstore Cloud Integrated Storage -Oracle Retail Xstore Point Of Service 15.0Oracle Primavera Unifier 16.2Oracle Retail Service Backbone 14.1Oracle Primavera Unifier 16.1Oracle Retail Service Backbone 15.0Oracle Weblogic Server 12.2.1.3.0Oracle Retail Xstore Point Of Service 16.0Oracle Primavera Unifier 18.8Oracle Primavera UnifierOracle Retail Merchandising System 15.0Oracle Agile Plm 9.3.6Oracle Banking Digital Experience 18.2Oracle Banking Digital Experience 18.3Oracle Banking Digital Experience 19.1Oracle Banking Digital Experience 18.1Oracle Weblogic Server 12.2.1.4.0Oracle Enterprise Manager Base Platform 13.3.0.0Oracle Financial Services Price Creation And Discovery 8.0.7Oracle Primavera Unifier 19.12
8.8
CVSSv3
CVE-2020-10969
FasterXML jackson-databind 2.x prior to 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to javax.swing.JEditorPane.
Fasterxml Jackson-databindDebian Debian Linux 8.0Netapp Steelstore Cloud Integrated Storage -Oracle Retail Xstore Point Of Service 15.0Oracle Primavera Unifier 16.2Oracle Retail Service Backbone 14.1Oracle Primavera Unifier 16.1Oracle Retail Service Backbone 15.0Oracle Weblogic Server 12.2.1.3.0Oracle Retail Xstore Point Of Service 16.0Oracle Primavera Unifier 18.8Oracle Primavera UnifierOracle Retail Merchandising System 15.0Oracle Agile Plm 9.3.6Oracle Banking Digital Experience 18.2Oracle Banking Digital Experience 18.3Oracle Banking Digital Experience 19.1Oracle Banking Digital Experience 18.1Oracle Weblogic Server 12.2.1.4.0Oracle Enterprise Manager Base Platform 13.3.0.0Oracle Financial Services Price Creation And Discovery 8.0.7Oracle Primavera Unifier 19.12
8.8
CVSSv3
CVE-2020-10672
FasterXML jackson-databind 2.x prior to 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.aries.transaction.jms.internal.XaPooledConnectionFactory (aka aries.transaction.jms).
Fasterxml Jackson-databindDebian Debian Linux 8.0Netapp Steelstore Cloud Integrated Storage -Oracle Retail Xstore Point Of Service 15.0Oracle Primavera Unifier 16.2Oracle Retail Service Backbone 14.1Oracle Primavera Unifier 16.1Oracle Retail Service Backbone 15.0Oracle Weblogic Server 12.2.1.3.0Oracle Retail Xstore Point Of Service 16.0Oracle Primavera Unifier 18.8Oracle Primavera UnifierOracle Retail Merchandising System 15.0Oracle Agile Plm 9.3.6Oracle Banking Digital Experience 18.2Oracle Banking Digital Experience 18.3Oracle Banking Digital Experience 19.1Oracle Banking Digital Experience 18.1Oracle Weblogic Server 12.2.1.4.0Oracle Enterprise Manager Base Platform 13.3.0.0Oracle Financial Services Price Creation And Discovery 8.0.7Oracle Primavera Unifier 19.12
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-21111CVE-2024-32884IDORCVE-2023-1000CVE-2024-33260CVE-2024-3682reflected XSSrace conditionCVE-2024-3400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook