Banking Enterprise Default Management (Oracle) - vulnerabilities (CVEs)

23 CVEs, 0 in the last 30 days, 8 known versions, newest CVE from 2021-12-18. Vendor: Oracle.

CVEs of Banking Enterprise Default Management

CVE-2021-45105 - CVSS 5.9 (medium), 2021-12-18: Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups. This…
CVE-2021-2351 - CVSS 8.3 (high), 2021-07-21: Vulnerability in the Advanced Networking Option component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c.…
CVE-2021-35043 - CVSS 6.1 (medium), 2021-07-19: OWASP AntiSamy before 1.6.4 allows XSS via HTML attributes when using the HTML output serializer (XHTML is not affected). This was demonstrated by a…
CVE-2021-36090 - CVSS 7.5 (high), 2021-07-13: When reading a specially crafted ZIP archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for…
CVE-2021-35517 - CVSS 7.5 (high), 2021-07-13: When reading a specially crafted TAR archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for…
CVE-2021-35516 - CVSS 7.5 (high), 2021-07-13: When reading a specially crafted 7Z archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for…
CVE-2021-35515 - CVSS 7.5 (high), 2021-07-13: When reading a specially crafted 7Z archive, the construction of the list of codecs that decompress an entry can result in an infinite loop. This could be…
CVE-2020-6950 - CVSS 6.5 (medium), 2021-06-02: Directory traversal in Eclipse Mojarra before 2.3.14 allows attackers to read arbitrary files via the loc parameter or con parameter.
CVE-2021-29425 - CVSS 6.5 (medium), 2021-04-13: In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like "//../foo", or "\\..\foo", the result…
CVE-2021-21347 - CVSS 9.8 (critical), 2021-03-23: XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote…
CVE-2021-21350 - CVSS 9.8 (critical), 2021-03-23: XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote…
CVE-2021-21349 - CVSS 8.6 (high), 2021-03-23: XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote…
CVE-2021-21348 - CVSS 7.5 (high), 2021-03-23: XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote…
CVE-2021-21351 - CVSS 9.1 (critical), 2021-03-23: XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability may allow a remote attacker…
CVE-2021-21341 - CVSS 7.5 (high), 2021-03-23: XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is vulnerability which may allow a remote…
CVE-2021-21344 - CVSS 9.8 (critical), 2021-03-23: XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote…
CVE-2021-21343 - CVSS 7.5 (high), 2021-03-23: XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability where the processed stream at…
CVE-2021-21346 - CVSS 9.8 (critical), 2021-03-23: XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote…
CVE-2021-21342 - CVSS 9.1 (critical), 2021-03-23: XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability where the processed stream at…
CVE-2021-21345 - CVSS 9.9 (critical), 2021-03-23: XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote…
CVE-2020-13936 - CVSS 8.8 (high), 2021-03-10: An attacker that is able to modify Velocity templates may execute arbitrary Java code or run arbitrary system commands with the same privileges as the account…
CVE-2020-9281 - CVSS 6.1 (medium), 2020-03-07: A cross-site scripting (XSS) vulnerability in the HTML Data Processor for CKEditor 4.0 before 4.14 allows remote attackers to inject arbitrary web script…
CVE-2019-10219 - CVSS 6.5 (medium), 2019-11-08: A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious…