oracle banking digital experience 18.2 vulnerabilities and exploits

(subscribe to this query)

5.4

CVSSv3

Vulnerability in the Oracle Banking Digital Experience product of Oracle Financial Services Applications (component: Loan Calculator). Supported versions that are affected are 18.1, 18.2, 18.3 and 19.1. Easily exploitable vulnerability allows low privileged attacker with network ...

Oracle Banking Digital Experience 18.3 Oracle Banking Digital Experience 19.1 Oracle Banking Digital Experience 18.1 Oracle Banking Digital Experience 18.2

8.1

CVSSv3

FasterXML jackson-databind 2.x prior to 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.xalan.lib.sql.JNDIConnectionPool (aka apache/drill).

Fasterxml Jackson-databind Netapp Steelstore Cloud Integrated Storage -Netapp Active Iq Unified Manager Oracle Agile Plm 9.3.6 Oracle Banking Digital Experience 18.2 Oracle Banking Digital Experience 18.3 Oracle Banking Digital Experience 19.1 Oracle Banking Digital Experience 18.1 Oracle Communications Diameter Signaling Router Oracle Banking Digital Experience 19.2 Oracle Banking Digital Experience 20.1 Oracle Communications Evolved Communications Application Server 7.1 Oracle Communications Contacts Server 8.0.0.5.0 Oracle Communications Calendar Server 8.0.0.4.0 Oracle Communications Session Route Manager Oracle Communications Session Report Manager Oracle Communications Element Manager

8.1

CVSSv3

FasterXML jackson-databind 2.x prior to 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to com.sun.org.apache.xalan.internal.lib.sql.JNDIConnectionPool (aka xalan2).

Fasterxml Jackson-databind Netapp Steelstore Cloud Integrated Storage -Netapp Active Iq Unified Manager Debian Debian Linux 8.0 Oracle Agile Plm 9.3.6 Oracle Banking Digital Experience 18.2 Oracle Banking Digital Experience 18.3 Oracle Banking Digital Experience 19.1 Oracle Banking Digital Experience 18.1 Oracle Communications Diameter Signaling Router Oracle Banking Digital Experience 19.2 Oracle Banking Digital Experience 20.1 Oracle Communications Evolved Communications Application Server 7.1 Oracle Communications Contacts Server 8.0.0.5.0 Oracle Communications Calendar Server 8.0.0.4.0 Oracle Communications Session Route Manager Oracle Communications Session Report Manager Oracle Communications Element Manager

8.1

CVSSv3

FasterXML jackson-databind 2.x prior to 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to org.jsecurity.realm.jndi.JndiRealmFactory (aka org.jsecurity).

Fasterxml Jackson-databind Netapp Active Iq Unified Manager Netapp Steelstore Cloud Integrated Storage -Debian Debian Linux 8.0 Oracle Agile Plm 9.3.6 Oracle Banking Digital Experience 18.1 Oracle Banking Digital Experience 18.2 Oracle Banking Digital Experience 18.3 Oracle Banking Digital Experience 19.1 Oracle Banking Digital Experience 19.2 Oracle Banking Digital Experience 20.1 Oracle Communications Calendar Server 8.0.0.4.0 Oracle Communications Contacts Server 8.0.0.5.0 Oracle Communications Diameter Signaling Router Oracle Communications Element Manager Oracle Communications Evolved Communications Application Server 7.1 Oracle Communications Instant Messaging Server 10.0.1.4.0 Oracle Communications Session Report Manager Oracle Communications Session Route Manager

7.5

CVSSv3

The Snappy frame decoder function doesn't restrict the chunk length which may lead to excessive memory usage. Beside this it also may buffer reserved skippable chunks until the whole chunk was received which may lead to excessive memory usage as well. This vulnerability can ...

8.1

CVSSv3

FasterXML jackson-databind 2.x prior to 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to oracle.jms.AQjmsQueueConnectionFactory, oracle.jms.AQjmsXATopicConnectionFactory, oracle.jms.AQjmsTopicConnectionFactory, oracle.jms.AQjmsXAQueueConnec...

Fasterxml Jackson-databind Netapp Steelstore Cloud Integrated Storage -Netapp Active Iq Unified Manager Debian Debian Linux 8.0 Oracle Agile Plm 9.3.6 Oracle Banking Digital Experience 18.2 Oracle Banking Digital Experience 18.3 Oracle Banking Digital Experience 19.1 Oracle Banking Digital Experience 18.1 Oracle Communications Instant Messaging Server 10.0.1.4.0 Oracle Communications Diameter Signaling Router Oracle Banking Digital Experience 19.2 Oracle Banking Digital Experience 20.1 Oracle Communications Evolved Communications Application Server 7.1 Oracle Communications Contacts Server 8.0.0.5.0 Oracle Communications Calendar Server 8.0.0.4.0 Oracle Communications Session Route Manager Oracle Communications Session Report Manager Oracle Communications Element Manager Oracle Autovue For Agile Product Lifecycle Management 21.0.2

7.5

CVSSv3

The Bzip2 decompression decoder function doesn't allow setting size restrictions on the decompressed output data (which affects the allocation size used during decompression). All users of Bzip2Decoder are affected. The malicious input can trigger an OOME and so a DoS attack

9.8

CVSSv3

FasterXML jackson-databind 2.x prior to 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPConfig (aka anteros-core).

1 Github repository

8.8

CVSSv3

FasterXML jackson-databind 2.x prior to 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.activemq.* (aka activemq-jms, activemq-core, activemq-pool, and activemq-pool-jms).

8.8

CVSSv3

FasterXML jackson-databind 2.x prior to 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.openjpa.ee.WASRegistryManagedRuntime (aka openjpa).

1 Github repository

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook