oracle banking digital experience 19.1 vulnerabilities and exploits

(subscribe to this query)

5.4

CVSSv3

Vulnerability in the Oracle Banking Digital Experience product of Oracle Financial Services Applications (component: Loan Calculator). Supported versions that are affected are 18.1, 18.2, 18.3 and 19.1. Easily exploitable vulnerability allows low privileged attacker with network...

Oracle Banking Digital Experience 18.3 Oracle Banking Digital Experience 19.1 Oracle Banking Digital Experience 18.1 Oracle Banking Digital Experience 18.2

9.8

CVSSv3

A Cascading Style Sheets (CSS) injection vulnerability in Swagger UI before 3.23.11 allows attackers to use the Relative Path Overwrite (RPO) technique to perform CSS-based input field value exfiltration, such as exfiltration of a CSRF token value. In other words, this product...

Smartbear Swagger Ui Oracle Utilities Framework 4.3.0.6.0 Oracle Utilities Framework 4.4.0.0.0 Oracle Banking Digital Experience 19.1 Oracle Utilities Framework 4.4.0.2.0 Oracle Banking Digital Experience 19.2 Oracle Banking Digital Experience 20.1 Oracle Primavera Gateway Oracle Banking Platform Oracle Banking Digital Experience 21.1 Oracle Banking Apis Oracle Banking Apis 19.1 Oracle Banking Apis 19.2 Oracle Banking Apis 20.1 Oracle Banking Apis 21.1 Oracle Banking Digital Experience9 Github repositories available

5.4

CVSSv3

CKEditor4 is an open source WYSIWYG HTML editor. In affected versions a vulnerability has been discovered in the Advanced Content Filter (ACF) module and may affect all plugins used by CKEditor 4. The vulnerability allowed to inject malformed HTML bypassing content sanitization,...

5.4

CVSSv3

CKEditor4 is an open source WYSIWYG HTML editor. In affected version a vulnerability has been discovered in the core HTML processing module and may affect all plugins used by CKEditor 4. The vulnerability allowed to inject malformed comments HTML bypassing content sanitization,...

Ckeditor Ckeditor Drupal Drupal Oracle Webcenter Portal 12.2.1.3.0 Oracle Agile Product Lifecycle Management 9.3.6 Oracle Banking Digital Experience 19.1 Oracle Peoplesoft Enterprise Peopletools 8.58 Oracle Webcenter Portal 12.2.1.4.0 Oracle Banking Digital Experience 19.2 Oracle Banking Digital Experience 20.1 Oracle Commerce Guided Search 11.3.2 Oracle Peoplesoft Enterprise Peopletools 8.59 Oracle Banking Digital Experience 21.1 Oracle Banking Apis Oracle Banking Apis 19.1 Oracle Banking Apis 19.2 Oracle Banking Apis 20.1 Oracle Banking Apis 21.1 Oracle Banking Digital Experience Oracle Application Express1 Github repository available

7.5

CVSSv3

The Snappy frame decoder function doesn't restrict the chunk length which may lead to excessive memory usage. Beside this it also may buffer reserved skippable chunks until the whole chunk was received which may lead to excessive memory usage as well. This vulnerability can...

Netty Netty Oracle Webcenter Portal 12.2.1.3.0 Oracle Peoplesoft Enterprise Peopletools 8.57 Oracle Banking Digital Experience 18.2 Oracle Banking Digital Experience 18.3 Oracle Banking Digital Experience 19.1 Oracle Banking Digital Experience 18.1 Oracle Peoplesoft Enterprise Peopletools 8.58 Oracle Webcenter Portal 12.2.1.4.0 Oracle Banking Digital Experience 19.2 Oracle Banking Digital Experience 20.1 Oracle Commerce Guided Search 11.3.2 Oracle Peoplesoft Enterprise Peopletools 8.59 Oracle Banking Digital Experience 21.1 Oracle Banking Apis Oracle Banking Apis 19.1 Oracle Banking Apis 19.2 Oracle Banking Apis 20.1 Oracle Banking Apis 21.1 Oracle Communications Cloud Native Core Binding Support Function 1.10.0 Oracle Communications Diameter Signaling Router Oracle Communications Brm - Elastic Charging Engine 12.0.0.5.0 Oracle Communications Brm - Elastic Charging Engine Quarkus Quarkus Netapp Oncommand Insight -Debian Debian Linux 10.0 Debian Debian Linux 11.02 Github repositories available

8.1

CVSSv3

FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.xalan.lib.sql.JNDIConnectionPool (aka apache/drill)....

Fasterxml Jackson-databind Netapp Active Iq Unified Manager Netapp Steelstore Cloud Integrated Storage -Oracle Agile Plm 9.3.6 Oracle Banking Digital Experience 18.1 Oracle Banking Digital Experience 18.2 Oracle Banking Digital Experience 18.3 Oracle Banking Digital Experience 19.1 Oracle Banking Digital Experience 19.2 Oracle Banking Digital Experience 20.1 Oracle Communications Calendar Server 8.0.0.4.0 Oracle Communications Contacts Server 8.0.0.5.0 Oracle Communications Diameter Signaling Router Oracle Communications Element Manager Oracle Communications Evolved Communications Application Server 7.1 Oracle Communications Session Report Manager Oracle Communications Session Route Manager2 Github repositories available

8.1

CVSSv3

FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to com.sun.org.apache.xalan.internal.lib.sql.JNDIConnectionPool (aka xalan2)....

Fasterxml Jackson-databind Netapp Active Iq Unified Manager Netapp Steelstore Cloud Integrated Storage -Debian Debian Linux 8.0 Oracle Agile Plm 9.3.6 Oracle Banking Digital Experience 18.1 Oracle Banking Digital Experience 18.2 Oracle Banking Digital Experience 18.3 Oracle Banking Digital Experience 19.1 Oracle Banking Digital Experience 19.2 Oracle Banking Digital Experience 20.1 Oracle Communications Calendar Server 8.0.0.4.0 Oracle Communications Contacts Server 8.0.0.5.0 Oracle Communications Diameter Signaling Router Oracle Communications Element Manager Oracle Communications Evolved Communications Application Server 7.1 Oracle Communications Session Report Manager Oracle Communications Session Route Manager2 Github repositories available

8.1

CVSSv3

FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to org.jsecurity.realm.jndi.JndiRealmFactory (aka org.jsecurity)....

Fasterxml Jackson-databind Netapp Active Iq Unified Manager Netapp Steelstore Cloud Integrated Storage -Debian Debian Linux 8.0 Oracle Agile Plm 9.3.6 Oracle Banking Digital Experience 18.1 Oracle Banking Digital Experience 18.2 Oracle Banking Digital Experience 18.3 Oracle Banking Digital Experience 19.1 Oracle Banking Digital Experience 19.2 Oracle Banking Digital Experience 20.1 Oracle Communications Calendar Server 8.0.0.4.0 Oracle Communications Contacts Server 8.0.0.5.0 Oracle Communications Diameter Signaling Router Oracle Communications Element Manager Oracle Communications Evolved Communications Application Server 7.1 Oracle Communications Instant Messaging Server 10.0.1.4.0 Oracle Communications Session Report Manager Oracle Communications Session Route Manager9 Github repositories available

8.1

CVSSv3

FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to oracle.jms.AQjmsQueueConnectionFactory, oracle.jms.AQjmsXATopicConnectionFactory, oracle.jms.AQjmsTopicConnectionFactory,...

Fasterxml Jackson-databind Netapp Active Iq Unified Manager Netapp Steelstore Cloud Integrated Storage -Debian Debian Linux 8.0 Oracle Agile Plm 9.3.6 Oracle Autovue For Agile Product Lifecycle Management 21.0.2 Oracle Banking Digital Experience 18.1 Oracle Banking Digital Experience 18.2 Oracle Banking Digital Experience 18.3 Oracle Banking Digital Experience 19.1 Oracle Banking Digital Experience 19.2 Oracle Banking Digital Experience 20.1 Oracle Communications Calendar Server 8.0.0.4.0 Oracle Communications Contacts Server 8.0.0.5.0 Oracle Communications Diameter Signaling Router Oracle Communications Element Manager Oracle Communications Evolved Communications Application Server 7.1 Oracle Communications Instant Messaging Server 10.0.1.4.0 Oracle Communications Session Report Manager Oracle Communications Session Route Manager1 Github repository available

8.2

CVSSv3

Apache Batik 1.13 is vulnerable to server-side request forgery, caused by improper input validation by the NodePickerPanel. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server to make arbitrary GET requests....

Apache Batik Fedoraproject Fedora 33 Fedoraproject Fedora 34 Oracle Enterprise Repository 11.1.1.7.0 Oracle Retail Back Office 14.1 Oracle Retail Order Broker 15.0 Oracle Retail Order Broker 16.0 Oracle Retail Returns Management 14.1 Oracle Retail Central Office 14.1 Oracle Retail Point-of-service 14.1 Oracle Instantis Enterprisetrack 17.1 Oracle Instantis Enterprisetrack 17.2 Oracle Instantis Enterprisetrack 17.3 Oracle Communications Metasolv Solution 6.3.0 Oracle Banking Digital Experience 18.3 Oracle Banking Digital Experience 19.1 Oracle Fusion Middleware Mapviewer 12.2.1.4.0 Oracle Banking Digital Experience 19.2 Oracle Banking Digital Experience 20.1 Oracle Communications Offline Mediation Controller 12.0.0.3.0 Oracle Communications Metasolv Solution 6.3.1 Oracle Communications Application Session Controller 3.9m0p3 Oracle Insurance Policy Administration Oracle Retail Order Management System Cloud Service 19.5 Oracle Flexcube Universal Banking Oracle Banking Digital Experience 21.1 Oracle Banking Apis 19.1 Oracle Banking Apis 19.2 Oracle Banking Apis 20.1 Oracle Banking Apis 21.1 Oracle Banking Apis 18.31 Github repository available

Get Started

1 2 3 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook