Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

oracle financial services behavior detection platform 8.1.2.0 vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv3

CVE-2022-24729

CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. CKEditor4 prior to version 4.18.0 contains a vulnerability in the `dialog` plugin. The vulnerability allows abuse of a dialog input validator regular expression, which can cause a significant performance drop r...
Ckeditor CkeditorDrupal DrupalOracle Application ExpressOracle Commerce Merchandising 11.3.2Oracle Financial Services Analytical Applications InfrastructureOracle Financial Services Analytical Applications Infrastructure 8.1.1.0Oracle Financial Services Analytical Applications Infrastructure 8.1.2.0Oracle Financial Services Analytical Applications Infrastructure 8.1.2.1Oracle Financial Services Behavior Detection PlatformOracle Financial Services Behavior Detection Platform 8.0.7.0Oracle Financial Services Behavior Detection Platform 8.0.8.0Oracle Financial Services Trade-based Anti Money Laundering 8.0.7
5.4
CVSSv3

CVE-2022-24728

CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. A vulnerability has been discovered in the core HTML processing module and may affect all plugins used by CKEditor 4 prior to version 4.18.0. The vulnerability allows someone to inject malformed HTML bypassing ...
Ckeditor CkeditorDrupal DrupalOracle Application ExpressOracle Commerce Merchandising 11.3.2Oracle Financial Services Analytical Applications InfrastructureOracle Financial Services Analytical Applications Infrastructure 8.1.1.0Oracle Financial Services Analytical Applications Infrastructure 8.1.2.0Oracle Financial Services Analytical Applications Infrastructure 8.1.2.1Oracle Financial Services Behavior Detection PlatformOracle Financial Services Behavior Detection Platform 8.0.7.0Oracle Financial Services Behavior Detection Platform 8.0.8.0Oracle Financial Services Trade-based Anti Money Laundering 8.0.7
5.9
CVSSv3

CVE-2021-38153

Some components in Apache Kafka use `Arrays.equals` to validate a password or key, which is vulnerable to timing attacks that make brute force attacks for such credentials more likely to be successful. Users should upgrade to 2.8.1 or higher, or 3.0.0 or higher where this vulnera...
Apache KafkaApache Kafka 2.8.0Quarkus QuarkusOracle Communications Brm - Elastic Charging EngineOracle Communications Brm - Elastic Charging Engine 12.0.0.5.0Oracle Communications Cloud Native Core Policy 1.15.0Oracle Financial Services Analytical Applications InfrastructureOracle Financial Services Behavior Detection PlatformOracle Financial Services Behavior Detection Platform 8.1.1.0Oracle Financial Services Behavior Detection Platform 8.1.1.1Oracle Financial Services Behavior Detection Platform 8.1.2.0Oracle Financial Services Enterprise Case Management 8.0.7.1
6.5
CVSSv3

CVE-2022-23437

There's a vulnerability within the Apache Xerces Java (XercesJ) XML parser when handling specially crafted XML document payloads. This causes, the XercesJ XML parser to wait in an infinite loop, which may sometimes consume system resources for prolonged duration. This vulner...
Apache Xerces-jOracle Agile Engineering Data Management 6.2.1.0Oracle Agile Plm 9.3.6Oracle Banking Deposits And Lines Of Credit Servicing 2.7Oracle Banking Party Management 2.7.0Oracle Communications Asap 7.3Oracle Communications Element ManagerOracle Communications Session Report ManagerOracle Communications Session Route ManagerOracle Financial Services Analytical Applications InfrastructureOracle Financial Services Behavior Detection PlatformOracle Financial Services Behavior Detection Platform 8.1.1.0
9.8
CVSSv3

CVE-2022-22963

In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is possible for a user to provide a specially crafted SpEL as a routing-expression that may result in remote code execution and access to local resources.
Vmware Spring Cloud FunctionOracle Banking Branch 14.5Oracle Banking Cash Management 14.5Oracle Banking Corporate Lending Process Management 14.5Oracle Banking Credit Facilities Process Management 14.5Oracle Banking Electronic Data Exchange For Corporates 14.5Oracle Banking Liquidity Management 14.2Oracle Banking Liquidity Management 14.5Oracle Banking Origination 14.5Oracle Banking Supply Chain Finance 14.5Oracle Banking Trade Finance Process Management 14.5Oracle Banking Virtual Account Management 14.5
7.5
CVSSv3

CVE-2020-36518

jackson-databind prior to 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects.
Fasterxml Jackson-databindOracle Big Data Spatial And GraphOracle Coherence 14.1.1.0.0Oracle Commerce Platform 11.3.0Oracle Commerce Platform 11.3.1Oracle Commerce Platform 11.3.2Oracle Communications Billing And Revenue ManagementOracle Communications Cloud Native Core Binding Support Function 22.1.3Oracle Communications Cloud Native Core Console 1.9.0Oracle Communications Cloud Native Core Network Repository Function 22.1.2Oracle Communications Cloud Native Core Network Repository Function 22.2.0Oracle Communications Cloud Native Core Network Slice Selection Function 22.1.0
9.8
CVSSv3

CVE-2022-22965

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific exploit requires the application to run on Tomcat as a WAR deployment. If the application is deployed as a Spring Boot executable jar, i.e....
Vmware Spring FrameworkCisco Cx Cloud AgentOracle Communications Cloud Native Core Automated Test Suite 1.9.0Oracle Communications Cloud Native Core Automated Test Suite 22.1.0Oracle Communications Cloud Native Core Console 1.9.0Oracle Communications Cloud Native Core Console 22.1.0Oracle Communications Cloud Native Core Network Exposure Function 22.1.0Oracle Communications Cloud Native Core Network Function Cloud Native Environment 1.10.0Oracle Communications Cloud Native Core Network Function Cloud Native Environment 22.1.0Oracle Communications Cloud Native Core Network Repository Function 1.15.0Oracle Communications Cloud Native Core Network Repository Function 22.1.0Oracle Communications Cloud Native Core Network Slice Selection Function 1.8.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
localIMAPCVE-2024-8504CVE-2024-42327CVE-2024-11904CVE-2024-47107CVE-2024-53143XML injectionCVE-2024-54750
Home
/
Search Results
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook