oracle financial services enterprise case management 8.1.2.0 vulnerabilities and exploits

(subscribe to this query)

Some components in Apache Kafka use `Arrays.equals` to validate a password or key, which is vulnerable to timing attacks that make brute force attacks for such credentials more likely to be successful. Users should upgrade to 2.8.1 or higher, or 3.0.0 or higher where this vulnera...

Apache Kafka Apache Kafka 2.8.0 Quarkus Quarkus Oracle Primavera Unifier 18.8 Oracle Primavera Unifier 19.12 Oracle Primavera Unifier 20.12 Oracle Primavera Unifier 21.12 Oracle Financial Services Enterprise Case Management 8.0.8.1 Oracle Financial Services Enterprise Case Management 8.1.1.0 Oracle Financial Services Enterprise Case Management 8.1.1.1 Oracle Financial Services Behavior Detection Platform 8.1.2.0 Oracle Financial Services Behavior Detection Platform 8.1.1.1 Oracle Financial Services Behavior Detection Platform 8.1.1.0 Oracle Financial Services Enterprise Case Management 8.0.7.1 Oracle Financial Services Enterprise Case Management 8.0.8.0 Oracle Financial Services Behavior Detection Platform Oracle Communications Cloud Native Core Policy 1.15.0 Oracle Financial Services Enterprise Case Management 8.0.7.2 Oracle Financial Services Analytical Applications Infrastructure Oracle Communications Brm - Elastic Charging Engine 12.0.0.5.0 Oracle Communications Brm - Elastic Charging Engine

There's a vulnerability within the Apache Xerces Java (XercesJ) XML parser when handling specially crafted XML document payloads. This causes, the XercesJ XML parser to wait in an infinite loop, which may sometimes consume system resources for prolonged duration. This vulner...

Apache Xerces-j Oracle Ilearning 6.2 Oracle Flexcube Universal Banking 12.4.0 Oracle Weblogic Server 12.2.1.3.0 Oracle Agile Plm 9.3.6 Oracle Weblogic Server 12.2.1.4.0 Oracle Peoplesoft Enterprise Peopletools 8.58 Oracle Weblogic Server 14.1.1.0.0 Oracle Retail Bulk Data Integration 16.0.3.0 Oracle Retail Merchandising System 16.0.3 Oracle Global Lifecycle Management Nextgen Oui Framework 13.9.4.2.2 Oracle Agile Engineering Data Management 6.2.1.0 Oracle Retail Service Backbone 16.0.3 Oracle Retail Financial Integration 16.0.3 Oracle Retail Integration Bus 16.0.3 Oracle Peoplesoft Enterprise Peopletools 8.59 Oracle Retail Service Backbone 15.0.3.1 Oracle Retail Service Backbone 14.1.3.2 Oracle Financial Services Enterprise Case Management 8.0.7.2.0 Oracle Banking Party Management 2.7.0 Oracle Retail Merchandising System 19.0.1 Oracle Retail Integration Bus 14.1.3.2

jackson-databind prior to 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects.

4 Github repositories

In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is possible for a user to provide a specially crafted SpEL as a routing-expression that may result in remote code execution and access to local resources.

Vmware Spring Cloud Function Oracle Sd-wan Edge 9.0 Oracle Retail Xstore Point Of Service 20.0.1 Oracle Communications Cloud Native Core Security Edge Protection Proxy 1.7.0 Oracle Banking Cash Management 14.5 Oracle Banking Trade Finance Process Management 14.5 Oracle Banking Credit Facilities Process Management 14.5 Oracle Banking Corporate Lending Process Management 14.5 Oracle Banking Supply Chain Finance 14.5 Oracle Sd-wan Edge 9.1 Oracle Banking Liquidity Management 14.5 Oracle Banking Liquidity Management 14.2 Oracle Banking Virtual Account Management 14.5 Oracle Financial Services Enterprise Case Management 8.1.1.0 Oracle Financial Services Enterprise Case Management 8.1.1.1 Oracle Financial Services Behavior Detection Platform 8.1.2.0 Oracle Financial Services Behavior Detection Platform 8.1.1.1 Oracle Financial Services Behavior Detection Platform 8.1.1.0 Oracle Mysql Enterprise Monitor Oracle Communications Cloud Native Core Console 1.9.0 Oracle Communications Cloud Native Core Policy 1.15.0 Oracle Communications Communications Policy Management 12.6.0.0.0

63 Github repositories3 Articles

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific exploit requires the application to run on Tomcat as a WAR deployment. If the application is deployed as a Spring Boot executable jar, i.e....

Vmware Spring Framework Cisco Cx Cloud Agent Oracle Sd-wan Edge 9.0 Oracle Retail Xstore Point Of Service 20.0.1 Oracle Communications Cloud Native Core Security Edge Protection Proxy 1.7.0 Oracle Financial Services Analytical Applications Infrastructure 8.1.1 Oracle Sd-wan Edge 9.1 Siemens Siveillance Identity 1.6 Siemens Siveillance Identity 1.5 Siemens Sipass Integrated 2.85 Siemens Sipass Integrated 2.80 Oracle Product Lifecycle Analytics 3.6.1 Oracle Financial Services Enterprise Case Management 8.1.1.0 Oracle Financial Services Enterprise Case Management 8.1.1.1 Oracle Financial Services Behavior Detection Platform 8.1.2.0 Oracle Financial Services Behavior Detection Platform 8.1.1.1 Oracle Financial Services Behavior Detection Platform 8.1.1.0 Oracle Communications Cloud Native Core Console 1.9.0 Oracle Communications Cloud Native Core Policy 1.15.0 Oracle Communications Cloud Native Core Unified Data Repository 1.15.0 Oracle Communications Cloud Native Core Unified Data Repository 22.1.0 Oracle Communications Cloud Native Core Security Edge Protection Proxy 22.1.0

180 Github repositories7 Articles

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook