Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

oracle banking platform 2.7.0 vulnerabilities and exploits

(subscribe to this query)
6.1
CVSSv3
CVE-2021-35043
OWASP AntiSamy prior to 1.6.4 allows XSS via HTML attributes when using the HTML output serializer (XHTML is not affected). This was demonstrated by a javascript: URL with &#00058 as the replacement for the : character.
Antisamy Project AntisamyOracle Retail Back Office 14.1Oracle Retail Back Office 14.0Oracle Retail Returns Management 14.0Oracle Retail Returns Management 14.1Oracle Retail Central Office 14.0Oracle Retail Central Office 14.1Oracle Banking Platform 2.6.2Oracle Banking Platform 2.7.0Oracle Banking Platform 2.7.1Oracle Insurance Policy Administration 11.3.0Oracle Insurance Policy Administration 11.0.2Oracle Banking Enterprise Default Management 2.12.0Oracle Banking Enterprise Default Management 2.10.0Oracle Banking Party Management 2.7.0Oracle Banking PlatformOracle Banking Enterprise Default ManagmentOracle Insurance Policy Administration 11.1.0Oracle Insurance Policy Administration 11.3.1Oracle Banking Enterprise Default Management 2.7.0Oracle Banking Enterprise Default Management 2.7.1Oracle Banking Enterprise Default Management 2.6.2
6.1
CVSSv3
CVE-2020-27193
A cross-site scripting (XSS) vulnerability in the Color Dialog plugin for CKEditor 4.15.0 allows remote malicious users to run arbitrary web script after persuading a user to copy and paste crafted HTML code into one of editor inputs.
Ckeditor Ckeditor 4.15.0Oracle Agile Plm 9.3.5Oracle Agile Plm 9.3.6Oracle Application ExpressOracle Banking Party Management 2.7.0Oracle Banking Platform 2.4.0Oracle Banking Platform 2.7.0Oracle Banking Platform 2.7.1Oracle Banking Platform 2.8.0Oracle Banking Platform 2.9.0Oracle Commerce Merchandising 11.0.0Oracle Commerce Merchandising 11.1.0Oracle Commerce Merchandising 11.2.0Oracle Commerce Merchandising 11.3.0Oracle Commerce Merchandising 11.3.1Oracle Commerce Merchandising 11.3.2Oracle Financial Services Analytical Applications InfrastructureOracle Financial Services Analytical Applications Infrastructure 8.1.0Oracle Financial Services Analytical Applications Infrastructure 8.1.1Oracle Jd Edwards Enterpriseone ToolsOracle Peoplesoft Enterprise Peopletools 8.56Oracle Peoplesoft Enterprise Peopletools 8.57
9.8
CVSSv3
CVE-2019-2904
Vulnerability in the Oracle JDeveloper and ADF product of Oracle Fusion Middleware (component: ADF Faces). Supported versions that are affected are 11.1.1.9.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP...
Oracle Application Testing Suite 12.5.0.3Oracle Application Testing Suite 13.1.0.1Oracle Application Testing Suite 13.2.0.1Oracle Application Testing Suite 13.3.0.1Oracle Banking Enterprise Collections 2.7.0Oracle Banking Enterprise Collections 2.8.0Oracle Banking Enterprise Originations 2.7.0Oracle Banking Enterprise Originations 2.8.0Oracle Banking Enterprise Product Manufacturing 2.7.0Oracle Banking Enterprise Product Manufacturing 2.8.0Oracle Banking Platform 2.4.0Oracle Banking Platform 2.4.1Oracle Banking Platform 2.5.0Oracle Banking Platform 2.6.0Oracle Banking Platform 2.6.1Oracle Banking Platform 2.6.2Oracle Banking Platform 2.7.0Oracle Banking Platform 2.7.1Oracle Banking Platform 2.9.0Oracle Business Process Management Suite 12.2.1.3.0Oracle Business Process Management Suite 12.2.1.4.0Oracle Clinical 5.2
5.5
CVSSv3
CVE-2019-12415
In Apache POI up to 4.1.0, when using the tool XSSFExportToXml to convert user-provided Microsoft Excel documents, a specially crafted document can allow an malicious user to read files from the local filesystem or from internal network resources via XML External Entity (XXE) Pro...
Apache PoiOracle Flexcube Private Banking 12.1.0Oracle Primavera Unifier 16.2Oracle Banking Platform 2.4.0Oracle Enterprise Manager Base Platform 12.1.0.5Oracle Flexcube Private Banking 12.0.0Oracle Banking Platform 2.4.1Oracle Enterprise Repository 12.1.3.0.0Oracle Banking Platform 2.5.0Oracle Primavera Unifier 16.1Oracle Insurance Rules Palette 10.2.0Oracle Application Testing Suite 12.5.0.3Oracle Webcenter Portal 12.2.1.3.0Oracle Banking Payments 14.0.0Oracle Webcenter Sites 12.2.1.3.0Oracle Banking Payments 14.1.0Oracle Peoplesoft Enterprise Peopletools 8.57Oracle Application Testing Suite 13.1.0.1Oracle Application Testing Suite 13.2.0.1Oracle Application Testing Suite 13.3.0.1Oracle Retail Order Broker 15.0Oracle Retail Order Broker 16.0
6.5
CVSSv3
CVE-2020-6950
Directory traversal in Eclipse Mojarra prior to 2.3.14 allows malicious users to read arbitrary files via the loc parameter or con parameter.
Eclipse MojarraOracle Solaris Cluster 4.0Oracle Banking Platform 2.6.2Oracle Banking Platform 2.7.1Oracle Banking Platform 2.9.0Oracle Communications Network Integrity 7.3.6Oracle Communications Pricing Design Center 12.0.0.3.0Oracle Banking Platform 2.12.0Oracle Banking Enterprise Default Management 2.12.0Oracle Banking Enterprise Default Management 2.10.0Oracle Retail Merchandising System 19.0.1Oracle Hyperion Calculation ManagerOracle Time And Labor
7.5
CVSSv3
CVE-2019-12399
When Connect workers in Apache Kafka 2.0.0, 2.0.1, 2.1.0, 2.1.1, 2.2.0, 2.2.1, or 2.3.0 are configured with one or more config providers, and a connector is created/updated on that Connect cluster to use an externalized secret variable in a substring of a connector configuration ...
Apache Kafka 2.0.1Apache Kafka 2.1.1Apache Kafka 2.2.0Apache Kafka 2.2.1Apache Kafka 2.3.0Apache Kafka 2.0.0Apache Kafka 2.1.0Oracle Financial Services Analytical Applications InfrastructureOracle Banking Platform 2.7.0Oracle Flexcube Universal Banking 14.4.0Oracle Banking Virtual Account Management 14.1.0Oracle Banking Virtual Account Management 14.3.0Oracle Banking Virtual Account Management 14.4.0Oracle Banking Trade Finance Process Management 14.1.0Oracle Banking Trade Finance Process Management 14.3.0Oracle Banking Trade Finance Process Management 14.4.0Oracle Banking Supply Chain FinanceOracle Banking Liquidity ManagementOracle Banking Credit Facilities Process Management 14.1.0Oracle Banking Credit Facilities Process Management 14.3.0Oracle Banking Credit Facilities Process Management 14.4.0Oracle Banking Corporate Lending Process Management 14.3.0
9.8
CVSSv3
CVE-2019-16335
A Polymorphic Typing issue exists in FasterXML jackson-databind prior to 2.9.10. It is related to com.zaxxer.hikari.HikariDataSource. This is a different vulnerability than CVE-2019-14540.
Fasterxml Jackson-databindFedoraproject Fedora 30Fedoraproject Fedora 31Debian Debian Linux 8.0Debian Debian Linux 9.0Debian Debian Linux 10.0Netapp Steelstore Cloud Integrated Storage -Netapp Oncommand Workflow Automation -Netapp Oncommand Api Services -Redhat Jboss Enterprise Application Platform 7.2Redhat Jboss Enterprise Application Platform 7.3Oracle Retail Xstore Point Of Service 15.0Oracle Banking Platform 2.4.0Oracle Retail Xstore Point Of Service 7.1Oracle Banking Platform 2.4.1Oracle Primavera Gateway 16.1Oracle Primavera Gateway 16.2Oracle Primavera Gateway 15.2Oracle Banking Platform 2.5.0Oracle Weblogic Server 12.2.1.3.0Oracle Retail Xstore Point Of Service 16.0Oracle Banking Platform 2.6.0
8.1
CVSSv3
CVE-2020-35491
FasterXML jackson-databind 2.x prior to 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.SharedPoolDataSource.
Fasterxml Jackson-databindNetapp Service Level Manager -Debian Debian Linux 9.0Oracle Webcenter Portal 12.2.1.3.0Oracle Application Testing Suite 13.3.0.1Oracle Banking Platform 2.6.2Oracle Agile Plm 9.3.6Oracle Webcenter Portal 12.2.1.4.0Oracle Sd-wan Edge 9.0Oracle Communications Services Gatekeeper 7.0Oracle Retail Merchandising System 15.0.3Oracle Banking Platform 2.7.0Oracle Banking Platform 2.7.1Oracle Banking Platform 2.9.0Oracle Communications Evolved Communications Application Server 7.1Oracle Banking Platform 2.8.0Oracle Banking Virtual Account Management 14.3.0Oracle Insurance Policy Administration J2ee 11.0.2Oracle Communications Unified Inventory Management 7.4.1Oracle Retail Xstore Point Of Service 16.0.6Oracle Retail Xstore Point Of Service 17.0.4Oracle Retail Xstore Point Of Service 18.0.3
8.1
CVSSv3
CVE-2020-35490
FasterXML jackson-databind 2.x prior to 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.PerUserPoolDataSource.
Fasterxml Jackson-databindNetapp Service Level Manager -Debian Debian Linux 9.0Oracle Webcenter Portal 12.2.1.3.0Oracle Application Testing Suite 13.3.0.1Oracle Banking Platform 2.6.2Oracle Agile Plm 9.3.6Oracle Webcenter Portal 12.2.1.4.0Oracle Communications Services Gatekeeper 7.0Oracle Retail Merchandising System 15.0.3Oracle Banking Platform 2.7.0Oracle Banking Platform 2.7.1Oracle Banking Platform 2.9.0Oracle Communications Evolved Communications Application Server 7.1Oracle Banking Platform 2.8.0Oracle Banking Virtual Account Management 14.3.0Oracle Insurance Policy Administration J2ee 11.2.0Oracle Communications Interactive Session Recorder 6.3Oracle Communications Interactive Session Recorder 6.4Oracle Communications Diameter Signaling RouterOracle Communications Unified Inventory Management 7.4.1Oracle Retail Xstore Point Of Service 16.0.6
8.8
CVSSv3
CVE-2020-13936
An attacker that is able to modify Velocity templates may execute arbitrary Java code or run arbitrary system commands with the same privileges as the account running the Servlet container. This applies to applications that allow untrusted users to upload/modify velocity template...
Apache Velocity EngineApache Wss4j 2.3.1Debian Debian Linux 9.0Oracle Retail Order Broker 16.0Oracle Banking Platform 2.6.2Oracle Banking Platform 2.7.1Oracle Communications Network Integrity 7.3.6Oracle Banking Enterprise Default Management 2.12.0Oracle Banking Enterprise Default Management 2.10.0Oracle Banking Party Management 2.7.0Oracle Utilities Testing Accelerator 6.0.0.2.2Oracle Utilities Testing Accelerator 6.0.0.3.1Oracle Utilities Testing Accelerator 6.0.0.1.1Oracle Communications Cloud Native Core Policy 1.14.0Oracle Banking PlatformOracle Banking Loans Servicing 2.12.0Oracle Retail Service Backbone 19.0.1Oracle Retail Integration Bus 19.0.1Oracle Banking Enterprise Default Management 2.7.1Oracle Banking Enterprise Default Management 2.6.2Oracle Banking Enterprise Default ManagementOracle Banking Deposits And Lines Of Credit Servicing 2.12.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-3400CVE-2023-7252CVE-2024-21111denial of serviceCVE-2024-29661CVE-2024-22856remote attackersencryptionCVE-2023-38299
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook