Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

oracle financial services analytical applications infrastructure 8.0.8 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2023-21901
Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are affected are 8.0.7, 8.0.8, 8.0.9, 8.1.0, 8.1.1 and 8.1.2. Easily exploitable vulnerabil...
Oracle Financial Services Analytical Applications Infrastructure 8.0.7Oracle Financial Services Analytical Applications Infrastructure 8.1.1Oracle Financial Services Analytical Applications Infrastructure 8.1.0Oracle Financial Services Analytical Applications Infrastructure 8.0.8Oracle Financial Services Analytical Applications Infrastructure 8.0.9Oracle Financial Services Analytical Applications Infrastructure 8.1.2
3.5
CVSSv2
CVE-2022-24728
CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. A vulnerability has been discovered in the core HTML processing module and may affect all plugins used by CKEditor 4 prior to version 4.18.0. The vulnerability allows someone to inject malformed HTML bypassing ...
Ckeditor CkeditorDrupal DrupalOracle Peoplesoft Enterprise Peopletools 8.58Oracle Peoplesoft Enterprise Peopletools 8.59Oracle Commerce Merchandising 11.3.2Oracle Financial Services Trade-based Anti Money Laundering 8.0.7Oracle Financial Services Trade-based Anti Money Laundering 8.0.8Fedoraproject Fedora 36Oracle Financial Services Analytical Applications Infrastructure 8.1.2.0Oracle Financial Services Analytical Applications Infrastructure 8.1.1.0Oracle Application ExpressOracle Financial Services Analytical Applications Infrastructure 8.1.2.1Oracle Financial Services Behavior Detection PlatformOracle Financial Services Analytical Applications InfrastructureOracle Financial Services Behavior Detection Platform 8.0.8.0Oracle Financial Services Behavior Detection Platform 8.0.7.0Fedoraproject Fedora 37
5
CVSSv2
CVE-2022-24729
CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. CKEditor4 prior to version 4.18.0 contains a vulnerability in the `dialog` plugin. The vulnerability allows abuse of a dialog input validator regular expression, which can cause a significant performance drop r...
Ckeditor CkeditorDrupal DrupalOracle Peoplesoft Enterprise Peopletools 8.58Oracle Peoplesoft Enterprise Peopletools 8.59Oracle Commerce Merchandising 11.3.2Oracle Financial Services Trade-based Anti Money Laundering 8.0.7Oracle Financial Services Trade-based Anti Money Laundering 8.0.8Fedoraproject Fedora 36Oracle Financial Services Analytical Applications Infrastructure 8.1.2.0Oracle Financial Services Analytical Applications Infrastructure 8.1.1.0Oracle Application ExpressOracle Financial Services Analytical Applications Infrastructure 8.1.2.1Oracle Financial Services Behavior Detection PlatformOracle Financial Services Analytical Applications InfrastructureOracle Financial Services Behavior Detection Platform 8.0.8.0Oracle Financial Services Behavior Detection Platform 8.0.7.0Fedoraproject Fedora 37
5.5
CVSSv2
CVE-2019-2823
Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 8.0.5-8.0.8. Easily exploitable vulnerability allows low privileged a...
Oracle Financial Services Analytical Applications Infrastructure
5.5
CVSSv2
CVE-2020-2688
Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Object Migration). Supported versions that are affected are 8.0.4-8.0.8. Easily exploitable vulnerability allows low privileged atta...
Oracle Financial Services Analytical Applications Infrastructure
5
CVSSv2
CVE-2020-36518
jackson-databind prior to 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects.
Fasterxml Jackson-databindOracle Weblogic Server 12.2.1.3.0Oracle Commerce Platform 11.3.1Oracle Utilities Framework 4.3.0.5.0Oracle Utilities Framework 4.3.0.6.0Oracle Utilities Framework 4.4.0.0.0Oracle Weblogic Server 12.2.1.4.0Oracle Peoplesoft Enterprise Peopletools 8.58Oracle Primavera Unifier 19.12Oracle Sd-wan Edge 9.0Oracle Weblogic Server 14.1.1.0.0Oracle Coherence 14.1.1.0.0Oracle Utilities Framework 4.4.0.2.0Oracle Global Lifecycle Management Nextgen Oui Framework 13.9.4.2.2Oracle Primavera Unifier 20.12Oracle Peoplesoft Enterprise Peopletools 8.59Oracle Primavera GatewayOracle Utilities Framework 4.4.0.3.0Oracle Sd-wan Edge 9.1Oracle Commerce Platform 11.3.0Oracle Commerce Platform 11.3.2Oracle Primavera Unifier 21.12
4.3
CVSSv2
CVE-2020-11022
In jQuery versions greater than or equal to 1.2 and prior to 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuer...
Jquery JqueryDrupal DrupalDebian Debian Linux 9.0Fedoraproject Fedora 31Fedoraproject Fedora 32Fedoraproject Fedora 33Oracle Weblogic Server 12.1.3.0.0Oracle Jdeveloper 11.1.1.9.0Oracle Retail Back Office 14.1Oracle Retail Back Office 14.0Oracle Peoplesoft Enterprise Peopletools 8.56Oracle Weblogic Server 10.3.6.0.0Oracle Communications Webrtc Session Controller 7.2Oracle Weblogic Server 12.2.1.3.0Oracle Agile Product Lifecycle Management For Process 6.2.0.0Oracle Peoplesoft Enterprise Peopletools 8.57Oracle Application Testing Suite 13.3.0.1Oracle Retail Returns Management 14.0Oracle Retail Returns Management 14.1Oracle Jdeveloper 12.2.1.3.0Oracle Policy Automation Connector For Siebel 10.4.6Oracle Financial Services Market Risk Measurement And Management 8.0.6
4.3
CVSSv2
CVE-2019-11358
jQuery prior to 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.
Jquery JqueryDebian Debian Linux 8.0Debian Debian Linux 9.0Debian Debian Linux 10.0Drupal DrupalBackdropcms BackdropFedoraproject Fedora 28Fedoraproject Fedora 29Fedoraproject Fedora 30Opensuse Leap 15.1Opensuse Backports Sle 15.0Netapp Snapcenter -Netapp Oncommand System ManagerRedhat Cloudforms 4.7Redhat Virtualization Manager 4.3Oracle Service Bus 12.1.3.0.0Oracle Primavera Unifier 16.2Oracle Jd Edwards Enterpriseone Tools 9.2Oracle Weblogic Server 12.1.3.0.0Oracle Service Bus 11.1.1.9.0Oracle Jdeveloper 11.1.1.9.0Oracle Primavera Unifier 16.1
2.1
CVSSv2
CVE-2019-12415
In Apache POI up to 4.1.0, when using the tool XSSFExportToXml to convert user-provided Microsoft Excel documents, a specially crafted document can allow an malicious user to read files from the local filesystem or from internal network resources via XML External Entity (XXE) Pro...
Apache PoiOracle Flexcube Private Banking 12.1.0Oracle Primavera Unifier 16.2Oracle Banking Platform 2.4.0Oracle Enterprise Manager Base Platform 12.1.0.5Oracle Flexcube Private Banking 12.0.0Oracle Banking Platform 2.4.1Oracle Enterprise Repository 12.1.3.0.0Oracle Banking Platform 2.5.0Oracle Primavera Unifier 16.1Oracle Insurance Rules Palette 10.2.0Oracle Application Testing Suite 12.5.0.3Oracle Webcenter Portal 12.2.1.3.0Oracle Banking Payments 14.0.0Oracle Webcenter Sites 12.2.1.3.0Oracle Banking Payments 14.1.0Oracle Peoplesoft Enterprise Peopletools 8.57Oracle Application Testing Suite 13.1.0.1Oracle Application Testing Suite 13.2.0.1Oracle Application Testing Suite 13.3.0.1Oracle Retail Order Broker 15.0Oracle Retail Order Broker 16.0
4.3
CVSSv2
CVE-2020-9488
Improper validation of certificate with host mismatch in Apache Log4j SMTP appender. This could allow an SMTPS connection to be intercepted by a man-in-the-middle attack which could leak any log messages sent through that appender. Fixed in Apache Log4j 2.12.3 and 2.13.1
Apache Log4jOracle Flexcube Private Banking 12.1.0Oracle Retail Integration Bus 14.1Oracle Flexcube Private Banking 12.0.0Oracle Flexcube Core Banking 5.2.0Oracle Retail Integration Bus 15.0Oracle Peoplesoft Enterprise Peopletools 8.56Oracle Weblogic Server 10.3.6.0.0Oracle Utilities Framework 4.2.0.3.0Oracle Utilities Framework 4.2.0.2.0Oracle Utilities Framework 2.2.0.0.0Oracle Peoplesoft Enterprise Peopletools 8.57Oracle Retail Integration Bus 16.0Oracle Primavera Unifier 18.8Oracle Retail Customer Management And Segmentation Foundation 16.0Oracle Retail Customer Management And Segmentation Foundation 17.0Oracle Retail Customer Management And Segmentation Foundation 18.0Oracle Policy Automation Connector For Siebel 10.4.6Oracle Data Integrator 12.2.1.3.0Oracle Jd Edwards World Security A9.4Oracle Financial Services Market Risk Measurement And Management 8.0.6Oracle Utilities Framework 4.4.0.0.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook