oracle financial services price creation and discovery 8.0.7 vulnerabilities and exploits

(subscribe to this query)

Vulnerability in the Oracle Financial Services Price Creation and Discovery product of Oracle Financial Services Applications (component: User Interface). The supported version that is affected is 8.0.7. Easily exploitable vulnerability allows low privileged attacker with network...

Oracle Financial Services Price Creation And Discovery 8.0.7

FasterXML jackson-databind 2.x prior to 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.aries.transaction.jms.internal.XaPooledConnectionFactory (aka aries.transaction.jms).

FasterXML jackson-databind 2.x prior to 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.caucho.config.types.ResourceRef (aka caucho-quercus).

1 Github repository

FasterXML jackson-databind 2.x prior to 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.hadoop.shaded.com.zaxxer.hikari.HikariConfig (aka shaded hikari-config).

FasterXML jackson-databind 2.x prior to 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.proxy.provider.remoting.RmiProvider (aka apache/commons-proxy).

FasterXML jackson-databind 2.x prior to 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.openjpa.ee.WASRegistryManagedRuntime (aka openjpa).

1 Github repository

FasterXML jackson-databind 2.x prior to 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.aoju.bus.proxy.provider.remoting.RmiProvider (aka bus-proxy).

FasterXML jackson-databind 2.x prior to 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to javax.swing.JEditorPane.

Improper validation of certificate with host mismatch in Apache Log4j SMTP appender. This could allow an SMTPS connection to be intercepted by a man-in-the-middle attack which could leak any log messages sent through that appender. Fixed in Apache Log4j 2.12.3 and 2.13.1

Apache Log4j Oracle Flexcube Private Banking 12.1.0 Oracle Retail Integration Bus 14.1 Oracle Flexcube Private Banking 12.0.0 Oracle Flexcube Core Banking 5.2.0 Oracle Retail Integration Bus 15.0 Oracle Peoplesoft Enterprise Peopletools 8.56 Oracle Weblogic Server 10.3.6.0.0 Oracle Utilities Framework 4.2.0.3.0 Oracle Utilities Framework 4.2.0.2.0 Oracle Utilities Framework 2.2.0.0.0 Oracle Peoplesoft Enterprise Peopletools 8.57 Oracle Retail Integration Bus 16.0 Oracle Primavera Unifier 18.8 Oracle Retail Customer Management And Segmentation Foundation 16.0 Oracle Retail Customer Management And Segmentation Foundation 17.0 Oracle Retail Customer Management And Segmentation Foundation 18.0 Oracle Policy Automation Connector For Siebel 10.4.6 Oracle Data Integrator 12.2.1.3.0 Oracle Jd Edwards World Security A9.4 Oracle Financial Services Market Risk Measurement And Management 8.0.6 Oracle Utilities Framework 4.4.0.0.0

3 Github repositories1 Article

In jQuery versions greater than or equal to 1.2 and prior to 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuer...

12 Github repositories

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook