Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

jboss enterprise portal platform vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv2
CVE-2018-19361
FasterXML jackson-databind 2.x prior to 2.9.8 might allow malicious users to have unspecified impact by leveraging failure to block the openjpa class from polymorphic deserialization.
Fasterxml Jackson-databindDebian Debian Linux 8.0Debian Debian Linux 9.0Oracle Primavera Unifier 16.2Oracle Primavera P6 Enterprise Project Portfolio Management 16.2Oracle Primavera P6 Enterprise Project Portfolio Management 15.1Oracle Primavera Unifier 16.1Oracle Primavera P6 Enterprise Project Portfolio Management 16.1Oracle Primavera P6 Enterprise Project Portfolio Management 15.2Oracle Webcenter Portal 12.2.1.3.0Oracle Business Process Management Suite 12.1.3.0.0Oracle Business Process Management Suite 12.2.1.3.0Oracle Primavera P6 Enterprise Project Portfolio ManagementOracle Primavera P6 Enterprise Project Portfolio Management 18.8Oracle Primavera Unifier 18.8Oracle Retail Workforce Management Software 1.60.9.0.0Oracle Primavera UnifierRedhat Openshift Container Platform 3.11Redhat Jboss Bpm Suite 6.4.11Redhat Jboss Brms 6.4.10Redhat Automation Manager 7.3.1Redhat Decision Manager 7.3.1
7.5
CVSSv2
CVE-2018-19362
FasterXML jackson-databind 2.x prior to 2.9.8 might allow malicious users to have unspecified impact by leveraging failure to block the jboss-common-core class from polymorphic deserialization.
Fasterxml Jackson-databindDebian Debian Linux 8.0Oracle Primavera Unifier 16.2Oracle Primavera P6 Enterprise Project Portfolio Management 16.2Oracle Primavera P6 Enterprise Project Portfolio Management 15.1Oracle Primavera Unifier 16.1Oracle Primavera P6 Enterprise Project Portfolio Management 16.1Oracle Primavera P6 Enterprise Project Portfolio Management 15.2Oracle Webcenter Portal 12.2.1.3.0Oracle Business Process Management Suite 12.1.3.0.0Oracle Business Process Management Suite 12.2.1.3.0Oracle Primavera P6 Enterprise Project Portfolio ManagementOracle Primavera P6 Enterprise Project Portfolio Management 18.8Oracle Primavera Unifier 18.8Oracle Retail Workforce Management Software 1.60.9.0.0Oracle Primavera UnifierRedhat Openshift Container Platform 3.11Redhat Jboss Bpm Suite 6.4.11Redhat Jboss Brms 6.4.10Redhat Automation Manager 7.3.1Redhat Decision Manager 7.3.1
7.5
CVSSv2
CVE-2018-14720
FasterXML jackson-databind 2.x prior to 2.9.7 might allow malicious users to conduct external XML entity (XXE) attacks by leveraging failure to block unspecified JDK classes from polymorphic deserialization.
Fasterxml Jackson-databind 2.7.0Fasterxml Jackson-databindFasterxml Jackson-databind 2.8.0Fasterxml Jackson-databind 2.9.0Debian Debian Linux 8.0Debian Debian Linux 9.0Oracle Primavera Unifier 16.2Oracle Banking Platform 2.5.0Oracle Primavera Unifier 16.1Oracle Jdeveloper 12.1.3.0.0Oracle Retail Merchandising System 16.0Oracle Webcenter Portal 12.2.1.3.0Oracle Primavera UnifierOracle Communications Billing And Revenue Management 7.5Oracle Communications Billing And Revenue Management 12.0Oracle Financial Services Analytical Applications Infrastructure 8.0.2Oracle Financial Services Analytical Applications Infrastructure 8.0.3Oracle Financial Services Analytical Applications Infrastructure 8.0.4Oracle Financial Services Analytical Applications Infrastructure 8.0.5Oracle Financial Services Analytical Applications Infrastructure 8.0.6Oracle Financial Services Analytical Applications Infrastructure 8.0.7Oracle Banking Platform 2.6.0
7.5
CVSSv2
CVE-2018-14721
FasterXML jackson-databind 2.x prior to 2.9.7 might allow remote malicious users to conduct server-side request forgery (SSRF) attacks by leveraging failure to block the axis2-jaxws class from polymorphic deserialization.
Fasterxml Jackson-databind 2.7.0Fasterxml Jackson-databindFasterxml Jackson-databind 2.8.0Fasterxml Jackson-databind 2.9.0Debian Debian Linux 8.0Debian Debian Linux 9.0Oracle Primavera Unifier 16.2Oracle Banking Platform 2.5.0Oracle Primavera Unifier 16.1Oracle Jdeveloper 12.1.3.0.0Oracle Retail Merchandising System 16.0Oracle Webcenter Portal 12.2.1.3.0Oracle Primavera UnifierOracle Communications Billing And Revenue Management 7.5Oracle Communications Billing And Revenue Management 12.0Oracle Financial Services Analytical Applications Infrastructure 8.0.2Oracle Financial Services Analytical Applications Infrastructure 8.0.3Oracle Financial Services Analytical Applications Infrastructure 8.0.4Oracle Financial Services Analytical Applications Infrastructure 8.0.5Oracle Financial Services Analytical Applications Infrastructure 8.0.6Oracle Financial Services Analytical Applications Infrastructure 8.0.7Oracle Banking Platform 2.6.0
6.8
CVSSv2
CVE-2019-17531
A Polymorphic Typing issue exists in FasterXML jackson-databind 2.0.0 up to and including 2.9.10. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the apache-log4j-extra (version 1.2.x) jar in ...
Fasterxml Jackson-databindDebian Debian Linux 8.0Redhat Jboss Enterprise Application Platform 7.2Redhat Jboss Enterprise Application Platform 7.3Oracle Banking Platform 2.4.0Oracle Jd Edwards Enterpriseone Tools 9.2Oracle Banking Platform 2.4.1Oracle Primavera Gateway 16.1Oracle Primavera Gateway 16.2Oracle Banking Platform 2.5.0Oracle Weblogic Server 12.2.1.3.0Oracle Webcenter Portal 12.2.1.3.0Oracle Webcenter Sites 12.2.1.3.0Oracle Jd Edwards Enterpriseone Orchestrator 9.2Oracle Banking Platform 2.6.0Oracle Banking Platform 2.6.1Oracle Banking Platform 2.6.2Oracle Weblogic Server 12.2.1.4.0Oracle Webcenter Sites 12.2.1.4.0Oracle Webcenter Portal 12.2.1.4.0Oracle Communications Billing And Revenue Management 12.0.0.3.0Oracle Communications Billing And Revenue Management 7.5.0.23.0
7.5
CVSSv2
CVE-2018-14719
FasterXML jackson-databind 2.x prior to 2.9.7 might allow remote malicious users to execute arbitrary code by leveraging failure to block the blaze-ds-opt and blaze-ds-core classes from polymorphic deserialization.
Fasterxml Jackson-databindDebian Debian Linux 8.0Debian Debian Linux 9.0Oracle Primavera Unifier 16.2Oracle Primavera P6 Enterprise Project Portfolio Management 16.2Oracle Primavera P6 Enterprise Project Portfolio Management 15.1Oracle Database Server 12.1.0.2Oracle Banking Platform 2.5.0Oracle Primavera Unifier 16.1Oracle Database Server 11.2.0.4Oracle Primavera P6 Enterprise Project Portfolio Management 16.1Oracle Jdeveloper 12.1.3.0.0Oracle Primavera P6 Enterprise Project Portfolio Management 15.2Oracle Retail Merchandising System 16.0Oracle Webcenter Portal 12.2.1.3.0Oracle Database Server 12.2.0.1Oracle Business Process Management Suite 12.1.3.0.0Oracle Business Process Management Suite 12.2.1.3.0Oracle Primavera P6 Enterprise Project Portfolio ManagementOracle Primavera P6 Enterprise Project Portfolio Management 18.8Oracle Database Server 18cOracle Communications Billing And Revenue Management 7.5
7.5
CVSSv2
CVE-2018-14718
FasterXML jackson-databind 2.x prior to 2.9.7 might allow remote malicious users to execute arbitrary code by leveraging failure to block the slf4j-ext class from polymorphic deserialization.
Fasterxml Jackson-databindDebian Debian Linux 8.0Debian Debian Linux 9.0Oracle Primavera Unifier 16.2Oracle Jd Edwards Enterpriseone Tools 9.2Oracle Primavera P6 Enterprise Project Portfolio Management 16.2Oracle Primavera P6 Enterprise Project Portfolio Management 15.1Oracle Banking Platform 2.5.0Oracle Primavera Unifier 16.1Oracle Primavera P6 Enterprise Project Portfolio Management 16.1Oracle Jdeveloper 12.1.3.0.0Oracle Primavera P6 Enterprise Project Portfolio Management 15.2Oracle Retail Merchandising System 16.0Oracle Webcenter Portal 12.2.1.3.0Oracle Business Process Management Suite 12.1.3.0.0Oracle Business Process Management Suite 12.2.1.3.0Oracle Primavera P6 Enterprise Project Portfolio ManagementOracle Primavera P6 Enterprise Project Portfolio Management 18.8Oracle Jd Edwards Enterpriseone Orchestrator 9.2Oracle Communications Billing And Revenue Management 7.5Oracle Communications Billing And Revenue Management 12.0Oracle Financial Services Analytical Applications Infrastructure 8.0.2
5
CVSSv2
CVE-2020-25649
A flaw was found in FasterXML Jackson Databind, where it did not have entity expansion secured properly. This flaw allows vulnerability to XML external entity (XXE) attacks. The highest threat from this vulnerability is data integrity.
Fasterxml Jackson-databindNetapp Oncommand Workflow Automation -Netapp Service Level Manager -Netapp Oncommand Api Services -Fedoraproject Fedora 32Quarkus QuarkusApache IotdbOracle Webcenter Portal 12.2.1.3.0Oracle Banking Platform 2.6.2Oracle Utilities Framework 4.3.0.5.0Oracle Utilities Framework 4.3.0.6.0Oracle Utilities Framework 4.4.0.0.0Oracle Agile Plm 9.3.6Oracle Coherence 12.2.1.4.0Oracle Webcenter Portal 12.2.1.4.0Oracle Sd-wan Edge 9.0Oracle Coherence 14.1.1.0.0Oracle Utilities Framework 4.4.0.2.0Oracle Communications Billing And Revenue Management 12.0.0.3.0Oracle Communications Billing And Revenue Management 7.5.0.23.0Oracle Communications Services Gatekeeper 7.0Oracle Banking Platform 2.7.0
6.8
CVSSv2
CVE-2019-16943
A Polymorphic Typing issue exists in FasterXML jackson-databind 2.0.0 up to and including 2.9.10. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the p6spy (3.8.6) jar in the classpath, and an...
Fasterxml Jackson-databindDebian Debian Linux 8.0Debian Debian Linux 9.0Debian Debian Linux 10.0Fedoraproject Fedora 30Fedoraproject Fedora 31Redhat Jboss Enterprise Application Platform 7.2Redhat Jboss Enterprise Application Platform 7.3Oracle Banking Platform 2.4.0Oracle Jd Edwards Enterpriseone Tools 9.2Oracle Banking Platform 2.4.1Oracle Primavera Gateway 16.1Oracle Primavera Gateway 16.2Oracle Banking Platform 2.5.0Oracle Weblogic Server 12.2.1.3.0Oracle Webcenter Portal 12.2.1.3.0Oracle Webcenter Sites 12.2.1.3.0Oracle Jd Edwards Enterpriseone Orchestrator 9.2Oracle Banking Platform 2.6.0Oracle Banking Platform 2.6.1Oracle Banking Platform 2.6.2Oracle Weblogic Server 12.2.1.4.0
5
CVSSv2
CVE-2018-1000180
Bouncy Castle BC 1.54 - 1.59, BC-FJA 1.0.0, BC-FJA 1.0.1 and previous versions have a flaw in the Low-level interface to RSA key pair generator, specifically RSA Key Pairs generated in low-level API with added certainty may have less M-R tests than expected. This appears to be fi...
Bouncycastle Fips Java ApiBouncycastle Legion-of-the-bouncy-castle-java-crytography-apiDebian Debian Linux 9.0Oracle Retail Xstore Point Of Service 7.1Oracle Api Gateway 11.1.2.4.0Oracle Weblogic Server 12.1.3.0.0Oracle Enterprise Repository 12.1.3.0.0Oracle Retail Xstore Point Of Service 7.0Oracle Peoplesoft Enterprise Peopletools 8.55Oracle Peoplesoft Enterprise Peopletools 8.56Oracle Webcenter Portal 12.2.1.3.0Oracle Webcenter Portal 11.1.1.9.0Oracle Business Process Management Suite 12.1.3.0.0Oracle Business Process Management Suite 12.2.1.3.0Oracle Business Process Management Suite 11.1.1.9.0Oracle Soa Suite 12.1.3.0.0Oracle Soa Suite 12.2.1.3.0Oracle Peoplesoft Enterprise Peopletools 8.57Oracle Managed File Transfer 12.2.1.3.0Oracle Communications Converged Application ServerOracle Communications Webrtc Session ControllerOracle Retail Convenience And Fuel Pos Software 2.8.1
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27977IMAPlocal usersCVE-2024-32038CVE-2023-49963CVE-2023-22869CVE-2024-31497localCVE-2024-2961
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook