Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

oracle banking enterprise default management 2.12.0 vulnerabilities and exploits

(subscribe to this query)

6.1
CVSSv3
CVE-2021-35043
OWASP AntiSamy before 1.6.4 allows XSS via HTML attributes when using the HTML output serializer (XHTML is not affected). This was demonstrated by a javascript: URL with &#00058 as the replacement for the : character....
Antisamy Project AntisamyOracle Retail Back Office 14.1Oracle Retail Back Office 14.0Oracle Retail Returns Management 14.0Oracle Retail Returns Management 14.1Oracle Retail Central Office 14.0Oracle Retail Central Office 14.1Oracle Banking Platform 2.6.2Oracle Banking Platform 2.7.0Oracle Banking Platform 2.7.1Oracle Insurance Policy Administration 11.3.0Oracle Insurance Policy Administration 11.0.2Oracle Banking Party Management 2.7.0Oracle Banking PlatformOracle Banking Enterprise Default Managment 2.6.2Oracle Banking Enterprise Default Managment 2.7.0Oracle Banking Enterprise Default Managment 2.7.1Oracle Banking Enterprise Default ManagmentOracle Banking Enterprise Default Managment 2.10.0Oracle Banking Enterprise Default Managment 2.12.0Oracle Insurance Policy Administration 11.1.0Oracle Insurance Policy Administration 11.2.8Oracle Insurance Policy Administration 11.3.1Netapp Active Iq Unified Manager -
7.5
CVSSv3
CVE-2021-36090
When reading a specially crafted ZIP archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs. This could be used to mount a denial of service attack against services that use Compress' zip...
Apache Commons CompressOracle Webcenter Portal 12.2.1.3.0Oracle Business Process Management Suite 12.2.1.3.0Oracle Peoplesoft Enterprise Peopletools 8.57Oracle Banking Platform 2.6.2Oracle Primavera Unifier 18.8Oracle Primavera UnifierOracle Communications Unified Inventory Management 7.4.0Oracle Banking Digital Experience 19.1Oracle Flexcube Universal BankingOracle Peoplesoft Enterprise Peopletools 8.58Oracle Banking Digital Experience 19.2Oracle Banking Digital Experience 20.1Oracle Banking Platform 2.7.1Oracle Banking Platform 2.9.0Oracle Business Process Management Suite 12.2.1.4.0Oracle Commerce Guided Search 11.3.2Oracle Communications Unified Inventory Management 7.4.1Oracle Financial Services Enterprise Case ManagementOracle Financial Services Enterprise Case Management 8.0.7.2.0Oracle Financial Services Enterprise Case Management 8.0.8.1.0Oracle Insurance Policy Administration 11.0.2Oracle Insurance Policy Administration 11.3.0Oracle Peoplesoft Enterprise Peopletools 8.59Oracle Primavera GatewayOracle Primavera Unifier 19.12Oracle Primavera Unifier 20.12Oracle Webcenter Portal 12.2.1.4.0Oracle Communications Messaging Server 8.1Oracle Banking ApisOracle Banking Apis 19.1Oracle Banking Apis 19.2Oracle Banking Apis 20.1Oracle Banking Apis 21.1Oracle Banking Digital ExperienceOracle Banking Digital Experience 21.1Oracle Banking Enterprise Default Management 2.7.0Oracle Banking Party Management 2.7.0Oracle Banking Payments 14.5Oracle Banking Platform 2.12.0Oracle Banking Trade Finance 14.5Oracle Banking Treasury Management 14.5Oracle Communications Billing And Revenue Management 12.0.0.4Oracle Communications Cloud Native Core Automated Test Suite 1.8.0Oracle Communications Cloud Native Core Service Communication Proxy 1.14.0Oracle Communications Cloud Native Core Unified Data Repository 1.14.0Oracle Communications Diameter Intelligence HubOracle Communications Diameter Intelligence Hub 8.2.3Oracle Communications Element ManagerOracle Communications Session Report ManagerOracle Communications Session Route ManagerOracle Communications Unified Inventory Management 7.4.2Oracle Communications Unified Inventory Management 7.5.0Oracle Financial Services Analytical Applications InfrastructureOracle Flexcube Universal Banking 12.4Oracle Flexcube Universal Banking 14.5Oracle Healthcare Data Repository 8.1.0Oracle Insurance Policy Administration 11.1.0Oracle Insurance Policy Administration 11.2.8Oracle Insurance Policy Administration 11.3.1Oracle Utilities Testing Accelerator 6.0.0.1.1Oracle Utilities Testing Accelerator 6.0.0.2.2Oracle Utilities Testing Accelerator 6.0.0.3.1Netapp Oncommand Insight -Netapp Active Iq Unified Manager -
6.5
CVSSv3
CVE-2020-6950
Directory traversal in Eclipse Mojarra before 2.3.14 allows attackers to read arbitrary files via the loc parameter or con parameter....
Eclipse MojarraOracle Solaris Cluster 4.0Oracle Banking Platform 2.6.2Oracle Banking Platform 2.7.1Oracle Banking Platform 2.9.0Oracle Communications Network Integrity 7.3.6Oracle Communications Pricing Design Center 12.0.0.3.0Oracle Banking Platform 2.12.0Oracle Banking Enterprise Default Management 2.12.0Oracle Banking Enterprise Default Management 2.10.0Oracle Retail Merchandising System 19.0.1Oracle Hyperion Calculation ManagerOracle Time And Labor
4.8
CVSSv3
CVE-2021-29425
In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like "//../foo", or "\\..\foo", the result would be the same value, thus possibly providing access to files in the parent directory, but not...
Apache Commons Io 2.2Apache Commons Io 2.3Apache Commons Io 2.4Apache Commons Io 2.5Apache Commons Io 2.6Debian Debian Linux 9.0Oracle Weblogic Server 12.1.3.0.0Oracle Retail Integration Bus 13.0Oracle Solaris Cluster 4.0Oracle Access Manager 11.1.2.3.0Oracle Weblogic Server 12.2.1.3.0Oracle Webcenter Portal 12.2.1.3.0Oracle Access Manager 12.2.1.3.0Oracle Application Testing Suite 13.3.0.1Oracle Retail Order Broker 16.0Oracle Banking Platform 2.6.2Oracle Agile Plm 9.3.6Oracle Banking Digital Experience 18.1Oracle Banking Digital Experience 18.3Oracle Banking Digital Experience 19.1Oracle Banking Digital Experience 19.2Oracle Banking Digital Experience 20.1Oracle Banking Platform 2.7.0Oracle Banking Platform 2.7.1Oracle Communications Order And Service Management 7.4Oracle Enterprise Session Border Controller 8.4Oracle Fusion Middleware Mapviewer 12.2.1.4.0Oracle Insurance Rules Palette 11.0.2Oracle Primavera UnifierOracle Primavera Unifier 18.8Oracle Primavera Unifier 19.12Oracle Primavera Unifier 20.12Oracle Retail Order Broker 18.0Oracle Webcenter Portal 12.2.1.4.0Oracle Weblogic Server 12.2.1.4.0Oracle Weblogic Server 14.1.1.0.0Oracle Access Manager 12.2.1.4.0Oracle Banking Apis 19.1Oracle Banking Apis 19.2Oracle Banking Digital Experience 21.1Oracle Banking Party Management 2.7.0Oracle Commerce Guided Search 11.3.2Oracle Communications Application Session Controller 3.9.0Oracle Communications Billing And Revenue Management Elastic Charging Engine 11.3Oracle Communications Billing And Revenue Management Elastic Charging Engine 12.0Oracle Communications Cloud Native Core Network Repository Function 1.14.0Oracle Communications Cloud Native Core Unified Data Repository 1.4.0Oracle Communications Converged Application Server - Service Controller 6.2Oracle Communications Convergence 3.0.2.2.0Oracle Communications Interactive Session Recorder 6.3Oracle Communications Interactive Session Recorder 6.4Oracle Communications Order And Service Management 7.3Oracle Communications Pricing Design Center 12.0.0.4.0Oracle Communications Service Broker 6.2Oracle Enterprise Session Border Controller 9.0Oracle Financial Services Analytical Applications InfrastructureOracle Healthcare Data Repository 8.1.0Oracle Insurance Policy Administration 11.0.2Oracle Insurance Policy Administration 11.3.0Oracle Insurance Rules Palette 11.1.0Oracle Primavera Unifier 21.12Oracle Real User Experience Insight 13.4.1.0Oracle Real User Experience Insight 13.5.1.0Oracle Retail Assortment Planning 16.0.3Oracle Retail Integration Bus 14.1.3.2Oracle Retail Integration Bus 15.0.3.1Oracle Retail Integration BusOracle Retail Order Broker 19.1Oracle Retail Service Backbone 14.1.3.2Oracle Retail Service Backbone 15.0.3.1Oracle Retail Service BackboneOracle Retail Service Backbone 19.0.0Oracle Retail Size Profile Optimization 16.0.3Oracle Utilities Testing Accelerator 6.0.0.1.1Oracle Utilities Testing Accelerator 6.0.0.2.2Oracle Utilities Testing Accelerator 6.0.0.3.1Oracle Application Performance Management 13.4.1.0Oracle Application Performance Management 13.5.1.0Oracle Banking Apis 18.1Oracle Banking Apis 18.2Oracle Banking Apis 18.3Oracle Banking Apis 20.1Oracle Banking Apis 21.1Oracle Banking Digital Experience 17.2Oracle Banking Enterprise Default ManagmentOracle Banking Enterprise Default Managment 2.6.2Oracle Banking Enterprise Default Managment 2.7.0Oracle Banking Enterprise Default Managment 2.7.1Oracle Banking Enterprise Default Managment 2.10.0Oracle Banking Enterprise Default Managment 2.12.0Oracle Banking PlatformOracle Blockchain PlatformOracle Communications Cloud Native Core Policy 1.14.0Oracle Communications Contacts Server 8.0.0.6.0Oracle Communications Design Studio 7.3.5Oracle Communications Design StudioOracle Communications Diameter Intelligence HubOracle Communications Offline Mediation Controller 12.0.0.3Oracle Communications Policy Management 12.5.0.0.0Oracle Communications Pricing Design Center 12.0.0.5.0Oracle Enterprise Communications Broker 3.3Oracle Financial Services Model Management And GovernanceOracle Health Sciences Information ManagerOracle Helidon 1.4.7Oracle Helidon 2.2.0Oracle Insurance Policy Administration 11.1.0Oracle Insurance Policy Administration 11.2.8Oracle Insurance Policy Administration 11.3.1Oracle Insurance Rules Palette 11.2.8Oracle Insurance Rules Palette 11.3.0Oracle Insurance Rules Palette 11.3.1Oracle Oss Support ToolsOracle Rest Data ServicesOracle Rest Data Services 21.3Oracle Retail Integration Bus 14.1.3.0Oracle Retail Integration Bus 19.0.0Oracle Retail Integration Bus 19.0.1Oracle Retail Service Backbone 14.1.3.0Oracle Retail Service Backbone 19.0.1Netapp Active Iq Unified Manager -
8.6
CVSSv3
CVE-2021-21349
XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker to request data from internal resources that are not publicly available only by manipulating the processed input...
Xstream Project XstreamDebian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0Fedoraproject Fedora 33Fedoraproject Fedora 34Fedoraproject Fedora 35Oracle Banking Enterprise Default Management 2.10.0Oracle Banking Enterprise Default Management 2.12.0Oracle Banking Platform 2.4.0Oracle Banking Platform 2.7.1Oracle Banking Platform 2.9.0Oracle Banking Platform 2.12.0Oracle Banking Virtual Account Management 14.2.0Oracle Banking Virtual Account Management 14.3.0Oracle Banking Virtual Account Management 14.5.0Oracle Business Activity Monitoring 11.1.1.9.0Oracle Business Activity Monitoring 12.2.1.3.0Oracle Business Activity Monitoring 12.2.1.4.0Oracle Communications Billing And Revenue Management Elastic Charging Engine 12.0.0.3.0Oracle Communications Policy Management 12.5.0Oracle Communications Unified Inventory Management 7.3.2Oracle Communications Unified Inventory Management 7.3.4Oracle Communications Unified Inventory Management 7.3.5Oracle Communications Unified Inventory Management 7.4.0Oracle Communications Unified Inventory Management 7.4.1Oracle Graalvm 20.3.4Oracle Graalvm 21.3.0Oracle Java Se 7u321Oracle Java Se 8u311Oracle Retail Xstore Point Of Service 16.0.6Oracle Retail Xstore Point Of Service 17.0.4Oracle Retail Xstore Point Of Service 18.0.3Oracle Retail Xstore Point Of Service 19.0.2Oracle Webcenter Portal 11.1.1.9.0Oracle Webcenter Portal 12.2.1.3.0Oracle Webcenter Portal 12.2.1.4.0
9.9
CVSSv3
CVE-2021-21345
XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker who has sufficient rights to execute commands of the host only by manipulating the processed input stream. No user...
Xstream Project XstreamDebian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0Fedoraproject Fedora 33Fedoraproject Fedora 34Fedoraproject Fedora 35Oracle Banking Enterprise Default Management 2.10.0Oracle Banking Enterprise Default Management 2.12.0Oracle Banking Platform 2.4.0Oracle Banking Platform 2.7.1Oracle Banking Platform 2.9.0Oracle Banking Platform 2.12.0Oracle Banking Virtual Account Management 14.2.0Oracle Banking Virtual Account Management 14.3.0Oracle Banking Virtual Account Management 14.5.0Oracle Business Activity Monitoring 11.1.1.9.0Oracle Business Activity Monitoring 12.2.1.3.0Oracle Business Activity Monitoring 12.2.1.4.0Oracle Communications Billing And Revenue Management Elastic Charging Engine 12.0.0.3.0Oracle Communications Policy Management 12.5.0Oracle Communications Unified Inventory Management 7.3.2Oracle Communications Unified Inventory Management 7.3.4Oracle Communications Unified Inventory Management 7.3.5Oracle Communications Unified Inventory Management 7.4.0Oracle Communications Unified Inventory Management 7.4.1Oracle Peoplesoft Enterprise Peopletools 8.58Oracle Peoplesoft Enterprise Peopletools 8.59Oracle Retail Xstore Point Of Service 16.0.6Oracle Retail Xstore Point Of Service 17.0.4Oracle Retail Xstore Point Of Service 18.0.3Oracle Retail Xstore Point Of Service 19.0.2Oracle Webcenter Portal 11.1.1.9.0Oracle Webcenter Portal 12.2.1.3.0Oracle Webcenter Portal 12.2.1.4.0
7.5
CVSSv3
CVE-2021-21341
XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is vulnerability which may allow a remote attacker to allocate 100% CPU time on the target system depending on CPU type or parallel execution of such a payload resulting...
Xstream Project XstreamDebian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0Fedoraproject Fedora 33Fedoraproject Fedora 34Fedoraproject Fedora 35Oracle Banking Enterprise Default Management 2.10.0Oracle Banking Enterprise Default Management 2.12.0Oracle Banking Platform 2.4.0Oracle Banking Platform 2.7.1Oracle Banking Platform 2.9.0Oracle Banking Platform 2.12.0Oracle Banking Virtual Account Management 14.2.0Oracle Banking Virtual Account Management 14.3.0Oracle Banking Virtual Account Management 14.5.0Oracle Business Activity Monitoring 11.1.1.9.0Oracle Business Activity Monitoring 12.2.1.3.0Oracle Business Activity Monitoring 12.2.1.4.0Oracle Communications Billing And Revenue Management Elastic Charging Engine 12.0.0.3.0Oracle Communications Policy Management 12.5.0Oracle Communications Unified Inventory Management 7.3.2Oracle Communications Unified Inventory Management 7.3.4Oracle Communications Unified Inventory Management 7.3.5Oracle Communications Unified Inventory Management 7.4.0Oracle Communications Unified Inventory Management 7.4.1Oracle Graalvm 20.3.4Oracle Graalvm 21.3.0Oracle Java Se 7u321Oracle Java Se 8u311Oracle Java Se 11.0.13Oracle Java Se 17.01Oracle Retail Xstore Point Of Service 16.0.6Oracle Retail Xstore Point Of Service 17.0.4Oracle Retail Xstore Point Of Service 18.0.3Oracle Retail Xstore Point Of Service 19.0.2Oracle Webcenter Portal 11.1.1.9.0Oracle Webcenter Portal 12.2.1.3.0Oracle Webcenter Portal 12.2.1.4.0
9.8
CVSSv3
CVE-2021-21347
XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is...
Xstream Project XstreamDebian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0Fedoraproject Fedora 33Fedoraproject Fedora 34Fedoraproject Fedora 35Oracle Banking Enterprise Default Management 2.10.0Oracle Banking Enterprise Default Management 2.12.0Oracle Banking Platform 2.4.0Oracle Banking Platform 2.7.1Oracle Banking Platform 2.9.0Oracle Banking Platform 2.12.0Oracle Banking Virtual Account Management 14.2.0Oracle Banking Virtual Account Management 14.3.0Oracle Banking Virtual Account Management 14.5.0Oracle Business Activity Monitoring 11.1.1.9.0Oracle Business Activity Monitoring 12.2.1.3.0Oracle Business Activity Monitoring 12.2.1.4.0Oracle Communications Billing And Revenue Management Elastic Charging Engine 12.0.0.3.0Oracle Communications Policy Management 12.5.0Oracle Communications Unified Inventory Management 7.3.2Oracle Communications Unified Inventory Management 7.3.4Oracle Communications Unified Inventory Management 7.3.5Oracle Communications Unified Inventory Management 7.4.0Oracle Communications Unified Inventory Management 7.4.1Oracle Retail Xstore Point Of Service 16.0.6Oracle Retail Xstore Point Of Service 17.0.4Oracle Retail Xstore Point Of Service 18.0.3Oracle Retail Xstore Point Of Service 19.0.2Oracle Webcenter Portal 11.1.1.9.0Oracle Webcenter Portal 12.2.1.3.0Oracle Webcenter Portal 12.2.1.4.0Oracle Weblogic Server 12.1.3.0.0Oracle Weblogic Server 12.2.1.3.0Oracle Weblogic Server 12.2.1.4.0Oracle Weblogic Server 14.1.1.0.0
9.8
CVSSv3
CVE-2021-21344
XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is...
Xstream Project XstreamDebian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0Fedoraproject Fedora 33Fedoraproject Fedora 34Fedoraproject Fedora 35Oracle Banking Enterprise Default Management 2.10.0Oracle Banking Enterprise Default Management 2.12.0Oracle Banking Platform 2.4.0Oracle Banking Platform 2.7.1Oracle Banking Platform 2.9.0Oracle Banking Platform 2.12.0Oracle Banking Virtual Account Management 14.2.0Oracle Banking Virtual Account Management 14.3.0Oracle Banking Virtual Account Management 14.5.0Oracle Business Activity Monitoring 11.1.1.9.0Oracle Business Activity Monitoring 12.2.1.3.0Oracle Business Activity Monitoring 12.2.1.4.0Oracle Communications Billing And Revenue Management Elastic Charging Engine 12.0.0.3.0Oracle Communications Policy Management 12.5.0Oracle Communications Unified Inventory Management 7.3.2Oracle Communications Unified Inventory Management 7.3.4Oracle Communications Unified Inventory Management 7.3.5Oracle Communications Unified Inventory Management 7.4.0Oracle Communications Unified Inventory Management 7.4.1Oracle Mysql ServerOracle Retail Xstore Point Of Service 16.0.6Oracle Retail Xstore Point Of Service 17.0.4Oracle Retail Xstore Point Of Service 18.0.3Oracle Retail Xstore Point Of Service 19.0.2Oracle Webcenter Portal 11.1.1.9.0Oracle Webcenter Portal 12.2.1.3.0Oracle Webcenter Portal 12.2.1.4.0
7.5
CVSSv3
CVE-2021-21348
XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker to occupy a thread that consumes maximum CPU time and will never return. No user is affected, who followed the...
Xstream Project XstreamDebian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0Fedoraproject Fedora 33Fedoraproject Fedora 34Fedoraproject Fedora 35Oracle Banking Enterprise Default Management 2.10.0Oracle Banking Enterprise Default Management 2.12.0Oracle Banking Platform 2.4.0Oracle Banking Platform 2.7.1Oracle Banking Platform 2.9.0Oracle Banking Platform 2.12.0Oracle Banking Virtual Account Management 14.2.0Oracle Banking Virtual Account Management 14.3.0Oracle Banking Virtual Account Management 14.5.0Oracle Business Activity Monitoring 11.1.1.9.0Oracle Business Activity Monitoring 12.2.1.3.0Oracle Business Activity Monitoring 12.2.1.4.0Oracle Communications Billing And Revenue Management Elastic Charging Engine 12.0.0.3.0Oracle Communications Policy Management 12.5.0Oracle Communications Unified Inventory Management 7.3.2Oracle Communications Unified Inventory Management 7.3.4Oracle Communications Unified Inventory Management 7.3.5Oracle Communications Unified Inventory Management 7.4.0Oracle Communications Unified Inventory Management 7.4.1Oracle Mysql ServerOracle Retail Xstore Point Of Service 16.0.6Oracle Retail Xstore Point Of Service 17.0.4Oracle Retail Xstore Point Of Service 18.0.3Oracle Retail Xstore Point Of Service 19.0.2Oracle Webcenter Portal 11.1.1.9.0Oracle Webcenter Portal 12.2.1.3.0Oracle Webcenter Portal 12.2.1.4.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-30600CVE-2022-30138HTML injectionCVE-2022-28924malicious code‎open redirectCVE-2022-1388CVE-2022-29383CVE-2020-16235
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook