Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

oracle financial services analytical applications infrastructure 8.1.1 vulnerabilities and exploits

(subscribe to this query)
7.4
CVSSv3

CVE-2023-21901

Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are affected are 8.0.7, 8.0.8, 8.0.9, 8.1.0, 8.1.1 and 8.1.2. Easily exploitable vulnerabil...
Oracle Financial Services Analytical Applications Infrastructure 8.0.7Oracle Financial Services Analytical Applications Infrastructure 8.0.8Oracle Financial Services Analytical Applications Infrastructure 8.0.9Oracle Financial Services Analytical Applications Infrastructure 8.1.0Oracle Financial Services Analytical Applications Infrastructure 8.1.1Oracle Financial Services Analytical Applications Infrastructure 8.1.2
6.5
CVSSv3

CVE-2021-26271

It was possible to execute a ReDoS-type attack inside CKEditor 4 prior to 4.16 by persuading a victim to paste crafted text into the Styles input of specific dialogs (in the Advanced Tab for Dialogs plugin).
Ckeditor CkeditorOracle Agile Plm 9.3.5Oracle Agile Plm 9.3.6Oracle Application ExpressOracle Financial Services Analytical Applications InfrastructureOracle Financial Services Analytical Applications Infrastructure 8.1.0Oracle Financial Services Analytical Applications Infrastructure 8.1.1Oracle Jd Edwards Enterpriseone ToolsOracle Siebel Ui FrameworkOracle Webcenter Sites 12.2.1.3.0Oracle Webcenter Sites 12.2.1.4.0
4.3
CVSSv3

CVE-2021-35686

Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Unified Metadata Manager). Supported versions that are affected are 8.0.7-8.1.1. Easily exploitable vulnerability allows low privile...
Oracle Financial Services Analytical Applications Infrastructure
5.3
CVSSv3

CVE-2021-35687

Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Unified Metadata Manager). Supported versions that are affected are 8.0.7-8.1.1. Easily exploitable vulnerability allows unauthentic...
Oracle Financial Services Analytical Applications Infrastructure
6.5
CVSSv3

CVE-2021-26272

It was possible to execute a ReDoS-type attack inside CKEditor 4 prior to 4.16 by persuading a victim to paste crafted URL-like text into the editor, and then press Enter or Space (in the Autolink plugin).
Ckeditor CkeditorOracle Agile Plm 9.3.5Oracle Agile Plm 9.3.6Oracle Application ExpressOracle Banking Party Management 2.7.0Oracle Commerce MerchandisingOracle Commerce Merchandising 11.1.0Oracle Commerce Merchandising 11.2.0Oracle Financial Services Analytical Applications InfrastructureOracle Financial Services Analytical Applications Infrastructure 8.1.0Oracle Financial Services Analytical Applications Infrastructure 8.1.1Oracle Financial Services Model Management And Governance
6.1
CVSSv3

CVE-2020-27193

A cross-site scripting (XSS) vulnerability in the Color Dialog plugin for CKEditor 4.15.0 allows remote malicious users to run arbitrary web script after persuading a user to copy and paste crafted HTML code into one of editor inputs.
Ckeditor Ckeditor 4.15.0Oracle Agile Plm 9.3.5Oracle Agile Plm 9.3.6Oracle Application ExpressOracle Banking Party Management 2.7.0Oracle Banking Platform 2.4.0Oracle Banking Platform 2.7.0Oracle Banking Platform 2.7.1Oracle Banking Platform 2.8.0Oracle Banking Platform 2.9.0Oracle Commerce Merchandising 11.0.0Oracle Commerce Merchandising 11.1.0
7.5
CVSSv3

CVE-2020-11979

As mitigation for CVE-2020-1945 Apache Ant 1.10.8 changed the permissions of temporary files it created so that only the current user was allowed to access them. Unfortunately the fixcrlf task deleted the temporary file and created a new one without said protection, effectively n...
Apache Ant 1.10.8Gradle GradleFedoraproject Fedora 31Fedoraproject Fedora 32Fedoraproject Fedora 33Oracle Agile Engineering Data Management 6.2.1.0Oracle Api Gateway 11.1.2.4.0Oracle Banking Platform 2.4.0Oracle Banking Platform 2.4.1Oracle Banking Platform 2.6.2Oracle Banking Platform 2.7.0Oracle Banking Platform 2.7.1
6.1
CVSSv3

CVE-2019-11358

jQuery prior to 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.
Jquery JqueryDebian Debian Linux 8.0Debian Debian Linux 9.0Debian Debian Linux 10.0Drupal DrupalBackdropcms BackdropFedoraproject Fedora 28Fedoraproject Fedora 29Fedoraproject Fedora 30Opensuse Backports Sle 15.0Opensuse Leap 15.1Netapp Oncommand System Manager
9.8
CVSSv3

CVE-2022-22965

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific exploit requires the application to run on Tomcat as a WAR deployment. If the application is deployed as a Spring Boot executable jar, i.e....
Vmware Spring FrameworkCisco Cx Cloud AgentOracle Communications Cloud Native Core Automated Test Suite 1.9.0Oracle Communications Cloud Native Core Automated Test Suite 22.1.0Oracle Communications Cloud Native Core Console 1.9.0Oracle Communications Cloud Native Core Console 22.1.0Oracle Communications Cloud Native Core Network Exposure Function 22.1.0Oracle Communications Cloud Native Core Network Function Cloud Native Environment 1.10.0Oracle Communications Cloud Native Core Network Function Cloud Native Environment 22.1.0Oracle Communications Cloud Native Core Network Repository Function 1.15.0Oracle Communications Cloud Native Core Network Repository Function 22.1.0Oracle Communications Cloud Native Core Network Slice Selection Function 1.8.0
7.5
CVSSv3

CVE-2019-0227

A Server Side Request Forgery (SSRF) vulnerability affected the Apache Axis 1.4 distribution that was last released in 2006. Security and bug commits commits continue in the projects Axis 1.x Subversion repository, legacy users are encouraged to build from source. The successor t...
Apache Axis 1.4Oracle Agile Engineering Data Management 6.2.1.0Oracle Agile Product Lifecycle Management Framework 9.3.3Oracle Application Testing Suite 13.2.0.1Oracle Application Testing Suite 13.3.0.1Oracle Big Data Discovery 1.6Oracle Communications Asap Cartridges 7.2Oracle Communications Asap Cartridges 7.3Oracle Communications Design Studio 7.3.4.3.0Oracle Communications Design Studio 7.3.5.5.0Oracle Communications Design Studio 7.4.0.4.0Oracle Communications Design Studio 7.4.1.1.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
localIMAPCVE-2024-8504CVE-2024-42327CVE-2024-11904CVE-2024-47107CVE-2024-53143XML injectionCVE-2024-54750
Home
/
Search Results
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook