Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

oracle banking supply chain finance 14.2.0 vulnerabilities and exploits

(subscribe to this query)
5.5
CVSSv3

CVE-2021-31812

In Apache PDFBox, a carefully crafted PDF file can trigger an infinite loop while loading the file. This issue affects Apache PDFBox version 2.0.23 and prior 2.0.x versions.
Apache PdfboxFedoraproject Fedora 33Fedoraproject Fedora 34Oracle Banking Corporate Lending Process Management 14.2.0Oracle Banking Corporate Lending Process Management 14.3.0Oracle Banking Corporate Lending Process Management 14.5.0Oracle Banking Credit Facilities Process Management 14.2.0Oracle Banking Credit Facilities Process Management 14.3.0Oracle Banking Credit Facilities Process Management 14.5.0Oracle Banking Supply Chain Finance 14.2.0Oracle Banking Supply Chain Finance 14.3.0Oracle Banking Supply Chain Finance 14.5.0
9.8
CVSSv3

CVE-2020-5413

Spring Integration framework provides Kryo Codec implementations as an alternative for Java (de)serialization. When Kryo is configured with default options, all unregistered classes are resolved on demand. This leads to the "deserialization gadgets" exploit when provide...
Vmware Spring IntegrationOracle Banking Corporate Lending Process Management 14.2.0Oracle Banking Corporate Lending Process Management 14.3.0Oracle Banking Corporate Lending Process Management 14.5.0Oracle Banking Credit Facilities Process Management 14.2.0Oracle Banking Credit Facilities Process Management 14.3.0Oracle Banking Credit Facilities Process Management 14.5.0Oracle Banking Supply Chain Finance 14.2.0Oracle Banking Supply Chain Finance 14.3.0Oracle Banking Supply Chain Finance 14.5.0Oracle Banking Virtual Account Management 14.2.0Oracle Banking Virtual Account Management 14.3.0
5.5
CVSSv3

CVE-2021-31811

In Apache PDFBox, a carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file. This issue affects Apache PDFBox version 2.0.23 and prior 2.0.x versions.
Apache PdfboxFedoraproject Fedora 33Fedoraproject Fedora 34Oracle Banking Corporate Lending Process Management 14.2.0Oracle Banking Corporate Lending Process Management 14.3.0Oracle Banking Corporate Lending Process Management 14.5.0Oracle Banking Credit Facilities Process Management 14.2.0Oracle Banking Credit Facilities Process Management 14.3.0Oracle Banking Credit Facilities Process Management 14.5.0Oracle Banking Supply Chain Finance 14.2.0Oracle Banking Supply Chain Finance 14.3.0Oracle Banking Supply Chain Finance 14.5.0
7.4
CVSSv3

CVE-2020-8203

Prototype pollution attack when using _.zipObjectDeep in lodash prior to 4.17.20.
Lodash LodashOracle Banking Corporate Lending Process Management 14.2.0Oracle Banking Corporate Lending Process Management 14.3.0Oracle Banking Corporate Lending Process Management 14.5.0Oracle Banking Credit Facilities Process Management 14.2.0Oracle Banking Credit Facilities Process Management 14.3.0Oracle Banking Credit Facilities Process Management 14.5.0Oracle Banking Extensibility Workbench 14.2.0Oracle Banking Extensibility Workbench 14.3.0Oracle Banking Extensibility Workbench 14.5.0Oracle Banking Liquidity Management 14.2.0Oracle Banking Liquidity Management 14.3.0
5.3
CVSSv3

CVE-2020-28500

Lodash versions before 4.17.21 are vulnerable to Regular Expression Denial of Service (ReDoS) via the toNumber, trim and trimEnd functions.
Lodash LodashOracle Banking Corporate Lending Process Management 14.2.0Oracle Banking Corporate Lending Process Management 14.3.0Oracle Banking Corporate Lending Process Management 14.5.0Oracle Banking Credit Facilities Process Management 14.2.0Oracle Banking Credit Facilities Process Management 14.3.0Oracle Banking Credit Facilities Process Management 14.5.0Oracle Banking Extensibility Workbench 14.2.0Oracle Banking Extensibility Workbench 14.3.0Oracle Banking Extensibility Workbench 14.5.0Oracle Banking Supply Chain Finance 14.2.0Oracle Banking Supply Chain Finance 14.3.0
5.5
CVSSv3

CVE-2021-27906

A carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file. This issue affects Apache PDFBox version 2.0.22 and prior 2.0.x versions.
Apache PdfboxFedoraproject Fedora 32Fedoraproject Fedora 33Fedoraproject Fedora 34Oracle Banking Corporate Lending Process Management 14.2.0Oracle Banking Corporate Lending Process Management 14.3.0Oracle Banking Corporate Lending Process Management 14.5.0Oracle Banking Credit Facilities Process Management 14.2.0Oracle Banking Credit Facilities Process Management 14.3.0Oracle Banking Credit Facilities Process Management 14.5.0Oracle Banking Supply Chain Finance 14.2.0Oracle Banking Supply Chain Finance 14.3.0
7.2
CVSSv3

CVE-2021-23337

Lodash versions before 4.17.21 are vulnerable to Command Injection via the template function.
Lodash LodashOracle Banking Corporate Lending Process Management 14.2.0Oracle Banking Corporate Lending Process Management 14.3.0Oracle Banking Corporate Lending Process Management 14.5.0Oracle Banking Credit Facilities Process Management 14.2.0Oracle Banking Credit Facilities Process Management 14.3.0Oracle Banking Credit Facilities Process Management 14.5.0Oracle Banking Extensibility Workbench 14.2.0Oracle Banking Extensibility Workbench 14.3.0Oracle Banking Extensibility Workbench 14.5.0Oracle Banking Supply Chain Finance 14.2.0Oracle Banking Supply Chain Finance 14.3.0
8.1
CVSSv3

CVE-2020-28052

An issue exists in Legion of the Bouncy Castle BC Java 1.65 and 1.66. The OpenBSDBCrypt.checkPassword utility method compared incorrect data when checking the password, allowing incorrect passwords to indicate they were matching with previously hashed ones that were different.
Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.65Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.66Apache Karaf 4.3.2Oracle Banking Corporate Lending Process Management 14.2.0Oracle Banking Corporate Lending Process Management 14.3.0Oracle Banking Corporate Lending Process Management 14.5.0Oracle Banking Credit Facilities Process Management 14.2.0Oracle Banking Credit Facilities Process Management 14.3.0Oracle Banking Credit Facilities Process Management 14.5.0Oracle Banking Extensibility Workbench 14.2.0Oracle Banking Extensibility Workbench 14.3.0Oracle Banking Extensibility Workbench 14.5.0
8.1
CVSSv3

CVE-2020-24750

FasterXML jackson-databind 2.x prior to 2.9.10.6 mishandles the interaction between serialization gadgets and typing, related to com.pastdev.httpcomponents.configuration.JndiConfiguration.
Fasterxml Jackson-databindOracle Agile Plm 9.3.6Oracle Application Testing Suite 13.3.0.1Oracle Autovue For Agile Product Lifecycle Management 21.0.2Oracle Banking Corporate Lending Process Management 14.2.0Oracle Banking Corporate Lending Process Management 14.3.0Oracle Banking Corporate Lending Process Management 14.5.0Oracle Banking Credit Facilities Process Management 14.2.0Oracle Banking Credit Facilities Process Management 14.3.0Oracle Banking Credit Facilities Process Management 14.5.0Oracle Banking Liquidity Management 14.2Oracle Banking Liquidity Management 14.3
8.8
CVSSv3

CVE-2020-26217

XStream before version 1.4.14 is vulnerable to Remote Code Execution.The vulnerability may allow a remote malicious user to run arbitrary shell commands only by manipulating the processed input stream. Only users who rely on blocklists are affected. Anyone using XStream's Se...
Xstream Project XstreamDebian Debian Linux 9.0Debian Debian Linux 10.0Netapp SnapmanagerNetapp Snapmanager -Apache Activemq 5.15.4Oracle Banking Cash Management 14.2Oracle Banking Cash Management 14.3Oracle Banking Cash Management 14.5Oracle Banking Corporate Lending Process Management 14.2Oracle Banking Corporate Lending Process Management 14.3Oracle Banking Corporate Lending Process Management 14.5
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
log injectionCVE-2024-42327CVE-2024-53691cameraCVE-2024-53810CVE-2024-41649logic flawCVE-2024-38921CVE-2024-41713
Home
/
Search Results
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook