Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

oracle financial services analytical applications infrastructure 8.1.1 vulnerabilities and exploits

(subscribe to this query)
7.4
CVSSv3
CVE-2023-21901
Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are affected are 8.0.7, 8.0.8, 8.0.9, 8.1.0, 8.1.1 and 8.1.2. Easily exploitable vulnerabil...
Oracle Financial Services Analytical Applications Infrastructure 8.0.7Oracle Financial Services Analytical Applications Infrastructure 8.1.1Oracle Financial Services Analytical Applications Infrastructure 8.1.0Oracle Financial Services Analytical Applications Infrastructure 8.0.8Oracle Financial Services Analytical Applications Infrastructure 8.0.9Oracle Financial Services Analytical Applications Infrastructure 8.1.2
6.5
CVSSv3
CVE-2021-26271
It was possible to execute a ReDoS-type attack inside CKEditor 4 prior to 4.16 by persuading a victim to paste crafted text into the Styles input of specific dialogs (in the Advanced Tab for Dialogs plugin).
Ckeditor CkeditorOracle Agile Plm 9.3.5Oracle Agile Plm 9.3.6Oracle Application ExpressOracle Financial Services Analytical Applications InfrastructureOracle Financial Services Analytical Applications Infrastructure 8.1.0Oracle Financial Services Analytical Applications Infrastructure 8.1.1Oracle Jd Edwards Enterpriseone ToolsOracle Siebel Ui FrameworkOracle Webcenter Sites 12.2.1.3.0Oracle Webcenter Sites 12.2.1.4.0
5.3
CVSSv3
CVE-2021-35687
Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Unified Metadata Manager). Supported versions that are affected are 8.0.7-8.1.1. Easily exploitable vulnerability allows unauthentic...
Oracle Financial Services Analytical Applications Infrastructure
4.3
CVSSv3
CVE-2021-35686
Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Unified Metadata Manager). Supported versions that are affected are 8.0.7-8.1.1. Easily exploitable vulnerability allows low privile...
Oracle Financial Services Analytical Applications Infrastructure
6.5
CVSSv3
CVE-2021-26272
It was possible to execute a ReDoS-type attack inside CKEditor 4 prior to 4.16 by persuading a victim to paste crafted URL-like text into the editor, and then press Enter or Space (in the Autolink plugin).
Ckeditor CkeditorOracle Agile Plm 9.3.5Oracle Agile Plm 9.3.6Oracle Application ExpressOracle Banking Party Management 2.7.0Oracle Commerce Merchandising 11.1.0Oracle Commerce Merchandising 11.2.0Oracle Commerce MerchandisingOracle Financial Services Analytical Applications InfrastructureOracle Financial Services Analytical Applications Infrastructure 8.1.0Oracle Financial Services Analytical Applications Infrastructure 8.1.1Oracle Financial Services Model Management And GovernanceOracle Jd Edwards Enterpriseone ToolsOracle Siebel Ui FrameworkOracle Webcenter Sites 12.2.1.3.0Oracle Webcenter Sites 12.2.1.4.0
6.1
CVSSv3
CVE-2020-27193
A cross-site scripting (XSS) vulnerability in the Color Dialog plugin for CKEditor 4.15.0 allows remote malicious users to run arbitrary web script after persuading a user to copy and paste crafted HTML code into one of editor inputs.
Ckeditor Ckeditor 4.15.0Oracle Agile Plm 9.3.5Oracle Agile Plm 9.3.6Oracle Application ExpressOracle Banking Party Management 2.7.0Oracle Banking Platform 2.4.0Oracle Banking Platform 2.7.0Oracle Banking Platform 2.7.1Oracle Banking Platform 2.8.0Oracle Banking Platform 2.9.0Oracle Commerce Merchandising 11.0.0Oracle Commerce Merchandising 11.1.0Oracle Commerce Merchandising 11.2.0Oracle Commerce Merchandising 11.3.0Oracle Commerce Merchandising 11.3.1Oracle Commerce Merchandising 11.3.2Oracle Financial Services Analytical Applications InfrastructureOracle Financial Services Analytical Applications Infrastructure 8.1.0Oracle Financial Services Analytical Applications Infrastructure 8.1.1Oracle Jd Edwards Enterpriseone ToolsOracle Peoplesoft Enterprise Peopletools 8.56Oracle Peoplesoft Enterprise Peopletools 8.57
6.1
CVSSv3
CVE-2019-11358
jQuery prior to 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.
Jquery JqueryDebian Debian Linux 8.0Debian Debian Linux 9.0Debian Debian Linux 10.0Drupal DrupalBackdropcms BackdropFedoraproject Fedora 28Fedoraproject Fedora 29Fedoraproject Fedora 30Opensuse Leap 15.1Opensuse Backports Sle 15.0Netapp Snapcenter -Netapp Oncommand System ManagerRedhat Cloudforms 4.7Redhat Virtualization Manager 4.3Oracle Service Bus 12.1.3.0.0Oracle Primavera Unifier 16.2Oracle Jd Edwards Enterpriseone Tools 9.2Oracle Weblogic Server 12.1.3.0.0Oracle Service Bus 11.1.1.9.0Oracle Jdeveloper 11.1.1.9.0Oracle Primavera Unifier 16.1
7.5
CVSSv3
CVE-2020-11979
As mitigation for CVE-2020-1945 Apache Ant 1.10.8 changed the permissions of temporary files it created so that only the current user was allowed to access them. Unfortunately the fixcrlf task deleted the temporary file and created a new one without said protection, effectively n...
Apache Ant 1.10.8Gradle GradleFedoraproject Fedora 31Fedoraproject Fedora 32Fedoraproject Fedora 33Oracle Flexcube Private Banking 12.1.0Oracle Primavera Unifier 16.2Oracle Banking Platform 2.4.0Oracle Flexcube Private Banking 12.0.0Oracle Api Gateway 11.1.2.4.0Oracle Banking Platform 2.4.1Oracle Primavera Unifier 16.1Oracle Enterprise Repository 11.1.1.7.0Oracle Retail Predictive Application Server 14.1Oracle Banking Platform 2.6.2Oracle Primavera Unifier 18.8Oracle Data Integrator 12.2.1.3.0Oracle Primavera UnifierOracle Utilities Framework 4.3.0.5.0Oracle Utilities Framework 4.3.0.6.0Oracle Utilities Framework 4.4.0.0.0Oracle Communications Unified Inventory Management 7.4.0
6.1
CVSSv3
CVE-2018-8032
Apache Axis 1.x up to and including 1.4 is vulnerable to a cross-site scripting (XSS) attack in the default servlet/services.
Apache AxisOracle Agile Product Lifecycle Management Framework 9.3.3Oracle Flexcube Private Banking 12.1.0Oracle Primavera Unifier 16.2Oracle Peoplesoft Enterprise Human Capital Management Human Resources 9.2Oracle Retail Xstore Point Of Service 7.1Oracle Enterprise Manager Base Platform 12.1.0.5Oracle Flexcube Private Banking 12.0.0Oracle Primavera Unifier 16.1Oracle Peoplesoft Enterprise Peopletools 8.56Oracle Hospitality Guest Access 4.2.0Oracle Hospitality Guest Access 4.2.1Oracle Tuxedo 12.1.3Oracle Internet Directory 12.2.1.3.0Oracle Webcenter Portal 12.2.1.3.0Oracle Communications Order And Service Management 7.3.0.0.0Oracle Flexcube Core Banking 11.7.0Oracle Peoplesoft Enterprise Peopletools 8.57Oracle Application Testing Suite 13.2.0.1Oracle Application Testing Suite 13.3.0.1Oracle Secure Global Desktop 5.4Oracle Retail Order Broker 15.0
7.5
CVSSv3
CVE-2019-0227
A Server Side Request Forgery (SSRF) vulnerability affected the Apache Axis 1.4 distribution that was last released in 2006. Security and bug commits commits continue in the projects Axis 1.x Subversion repository, legacy users are encouraged to build from source. The successor t...
Apache Axis 1.4Oracle Agile Product Lifecycle Management Framework 9.3.3Oracle Flexcube Private Banking 12.1.0Oracle Primavera Unifier 16.2Oracle Peoplesoft Enterprise Human Capital Management Human Resources 9.2Oracle Retail Xstore Point Of Service 7.1Oracle Enterprise Manager Base Platform 12.1.0.5Oracle Flexcube Private Banking 12.0.0Oracle Primavera Unifier 16.1Oracle Peoplesoft Enterprise Peopletools 8.56Oracle Hospitality Guest Access 4.2.0Oracle Hospitality Guest Access 4.2.1Oracle Tuxedo 12.1.3Oracle Internet Directory 12.2.1.3.0Oracle Webcenter Portal 12.2.1.3.0Oracle Communications Order And Service Management 7.3.0.0.0Oracle Flexcube Core Banking 11.7.0Oracle Peoplesoft Enterprise Peopletools 8.57Oracle Application Testing Suite 13.2.0.1Oracle Application Testing Suite 13.3.0.1Oracle Secure Global Desktop 5.4Oracle Retail Order Broker 15.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
deserializationCVE-2024-4040cross-site scriptingCVE-2023-25790CVE-2024-2961XML external entityCVE-2024-26926CVE-2024-32806CVE-2024-32711
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook