Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

oracle primavera unifier 18.8 vulnerabilities and exploits

(subscribe to this query)
7.7
CVSSv3

CVE-2020-5258

In affected versions of dojo (NPM package), the deepCopy method is vulnerable to Prototype Pollution. Prototype Pollution refers to the ability to inject properties into existing JavaScript language construct prototypes, such as objects. An attacker manipulates these attributes t...
Linuxfoundation DojoDebian Debian Linux 8.0Oracle Communications Application Session Controller 3.9.0Oracle Communications Policy Management 12.5.0Oracle Communications Pricing Design Center 12.0.0.3.0Oracle DocumakerOracle MysqlOracle Primavera UnifierOracle Primavera Unifier 18.8Oracle Primavera Unifier 19.12Oracle Primavera Unifier 20.12Oracle Webcenter Sites 12.2.1.3.0
9.8
CVSSv3

CVE-2018-19360

FasterXML jackson-databind 2.x prior to 2.9.8 might allow malicious users to have unspecified impact by leveraging failure to block the axis2-transport-jms class from polymorphic deserialization.
Fasterxml Jackson-databindDebian Debian Linux 8.0Oracle Business Process Management Suite 12.1.3.0.0Oracle Business Process Management Suite 12.2.1.3.0Oracle Primavera P6 Enterprise Project Portfolio ManagementOracle Primavera P6 Enterprise Project Portfolio Management 15.1Oracle Primavera P6 Enterprise Project Portfolio Management 15.2Oracle Primavera P6 Enterprise Project Portfolio Management 16.1Oracle Primavera P6 Enterprise Project Portfolio Management 16.2Oracle Primavera P6 Enterprise Project Portfolio Management 18.8Oracle Primavera UnifierOracle Primavera Unifier 16.1
9.8
CVSSv3

CVE-2018-19362

FasterXML jackson-databind 2.x prior to 2.9.8 might allow malicious users to have unspecified impact by leveraging failure to block the jboss-common-core class from polymorphic deserialization.
Fasterxml Jackson-databindDebian Debian Linux 8.0Oracle Business Process Management Suite 12.1.3.0.0Oracle Business Process Management Suite 12.2.1.3.0Oracle Primavera P6 Enterprise Project Portfolio ManagementOracle Primavera P6 Enterprise Project Portfolio Management 15.1Oracle Primavera P6 Enterprise Project Portfolio Management 15.2Oracle Primavera P6 Enterprise Project Portfolio Management 16.1Oracle Primavera P6 Enterprise Project Portfolio Management 16.2Oracle Primavera P6 Enterprise Project Portfolio Management 18.8Oracle Primavera UnifierOracle Primavera Unifier 16.1
9.8
CVSSv3

CVE-2018-19361

FasterXML jackson-databind 2.x prior to 2.9.8 might allow malicious users to have unspecified impact by leveraging failure to block the openjpa class from polymorphic deserialization.
Fasterxml Jackson-databindDebian Debian Linux 8.0Debian Debian Linux 9.0Oracle Business Process Management Suite 12.1.3.0.0Oracle Business Process Management Suite 12.2.1.3.0Oracle Primavera P6 Enterprise Project Portfolio ManagementOracle Primavera P6 Enterprise Project Portfolio Management 15.1Oracle Primavera P6 Enterprise Project Portfolio Management 15.2Oracle Primavera P6 Enterprise Project Portfolio Management 16.1Oracle Primavera P6 Enterprise Project Portfolio Management 16.2Oracle Primavera P6 Enterprise Project Portfolio Management 18.8Oracle Primavera Unifier
6.1
CVSSv3

CVE-2018-3148

Vulnerability in the Primavera Unifier component of Oracle Construction and Engineering Suite (subcomponent: Web Access). Supported versions that are affected are 15.1, 15.2, 16.1, 16.2, 17.1-17.12 and 18.1-18.8. Easily exploitable vulnerability allows unauthenticated attacker wi...
Oracle Primavera UnifierOracle Primavera Unifier 15.1Oracle Primavera Unifier 15.2Oracle Primavera Unifier 16.1Oracle Primavera Unifier 16.2
3.3
CVSSv3

CVE-2020-8908

A temp directory creation vulnerability exists in all versions of Guava, allowing an attacker with access to the machine to potentially access data in a temporary directory created by the Guava API com.google.common.io.Files.createTempDir(). By default, on unix-like systems, the ...
Google GuavaQuarkus QuarkusOracle Commerce Guided Search 11.3.2Oracle Communications Cloud Native Core Network Slice Selection Function 1.2.1Oracle Communications Pricing Design Center 12.0.0.4.0Oracle Communications Pricing Design Center 12.0.0.5.0Oracle Data Integrator 12.2.1.3.0Oracle Data Integrator 12.2.1.4.0Oracle Nosql DatabaseOracle Peoplesoft Enterprise Peopletools 8.57Oracle Peoplesoft Enterprise Peopletools 8.58Oracle Peoplesoft Enterprise Peopletools 8.59
5.3
CVSSv3

CVE-2020-13956

Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in request URIs passed to the library as java.net.URI object and pick the wrong target host for request execution.
Apache HttpclientQuarkus QuarkusOracle Data Integrator 12.2.1.3.0Oracle Data Integrator 12.2.1.4.0Oracle Jd Edwards Enterpriseone OrchestratorOracle Jd Edwards Enterpriseone ToolsOracle Nosql DatabaseOracle Peoplesoft Enterprise Peopletools 8.57Oracle Peoplesoft Enterprise Peopletools 8.58Oracle Peoplesoft Enterprise Pt Peopletools 8.57Oracle Peoplesoft Enterprise Pt Peopletools 8.58Oracle Peoplesoft Enterprise Pt Peopletools 8.59
6.1
CVSSv3

CVE-2021-41182

jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the `altField` option of the Datepicker widget from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. Any string value passed to the `altFi...
Jqueryui Jquery UiFedoraproject Fedora 33Fedoraproject Fedora 34Fedoraproject Fedora 35Fedoraproject Fedora 36Netapp H500s Firmware -Netapp H700s Firmware -Netapp H300e Firmware -Netapp H500e Firmware -Netapp H700e Firmware -Netapp H410s Firmware -Netapp H410c Firmware -
5.5
CVSSv3

CVE-2021-31811

In Apache PDFBox, a carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file. This issue affects Apache PDFBox version 2.0.23 and prior 2.0.x versions.
Apache PdfboxFedoraproject Fedora 33Fedoraproject Fedora 34Oracle Banking Corporate Lending Process Management 14.2.0Oracle Banking Corporate Lending Process Management 14.3.0Oracle Banking Corporate Lending Process Management 14.5.0Oracle Banking Credit Facilities Process Management 14.2.0Oracle Banking Credit Facilities Process Management 14.3.0Oracle Banking Credit Facilities Process Management 14.5.0Oracle Banking Supply Chain Finance 14.2.0Oracle Banking Supply Chain Finance 14.3.0Oracle Banking Supply Chain Finance 14.5.0
5.9
CVSSv3

CVE-2021-38153

Some components in Apache Kafka use `Arrays.equals` to validate a password or key, which is vulnerable to timing attacks that make brute force attacks for such credentials more likely to be successful. Users should upgrade to 2.8.1 or higher, or 3.0.0 or higher where this vulnera...
Apache KafkaApache Kafka 2.8.0Quarkus QuarkusOracle Communications Brm - Elastic Charging EngineOracle Communications Brm - Elastic Charging Engine 12.0.0.5.0Oracle Communications Cloud Native Core Policy 1.15.0Oracle Financial Services Analytical Applications InfrastructureOracle Financial Services Behavior Detection PlatformOracle Financial Services Behavior Detection Platform 8.1.1.0Oracle Financial Services Behavior Detection Platform 8.1.1.1Oracle Financial Services Behavior Detection Platform 8.1.2.0Oracle Financial Services Enterprise Case Management 8.0.7.1
Preferred Score:
CVSSv3
CVSSv2
CVSSv3
CVSSv4
EPSS
VMScore
Recommendations:
CVE-2025-23629CVE-2024-52331CVE-2025-0693precious metals charts and widgets for wordpressneofixsimple downloads listCVE-2025-23544CVE-2025-21298client sidememory leakCVE-2019-5418XSSdeebot x5 pro plus
Home
/
Search Results
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook