← Back

Banking Treasury Management

banking_treasury_management

Vendor: Oracle • 29 CVEs

CVEs (29)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2020-36186
4Debian
FasterxmlNetapp+1 more
45Agile Plm
Application Testing SuiteAutovue For Agile Product Lifecycle Management+42 more
Nov 21, 2024
Jan 6, 2021
N/A· v4
8.1 HIGH· v3
6.8 MEDIUM· v2
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.PerUserPoolDataSource.
CVE-2020-36185
4Debian
FasterxmlNetapp+1 more
45Agile Plm
Application Testing SuiteAutovue For Agile Product Lifecycle Management+42 more
Nov 21, 2024
Jan 6, 2021
N/A· v4
8.1 HIGH· v3
6.8 MEDIUM· v2
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.SharedPoolDataSource.
CVE-2020-36184
4Debian
FasterxmlNetapp+1 more
45Agile Plm
Application Testing SuiteAutovue For Agile Product Lifecycle Management+42 more
Nov 21, 2024
Jan 6, 2021
N/A· v4
8.1 HIGH· v3
6.8 MEDIUM· v2
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.PerUserPoolDataSource.
CVE-2020-36181
4Debian
FasterxmlNetapp+1 more
44Agile Plm
Application Testing SuiteAutovue For Agile Product Lifecycle Management+41 more
Nov 21, 2024
Jan 6, 2021
N/A· v4
8.1 HIGH· v3
6.8 MEDIUM· v2
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.cpdsadapter.DriverAdapterCPDS.
CVE-2020-35728
4Debian
FasterxmlNetapp+1 more
40Agile Plm
Application Testing SuiteAutovue+37 more
Apr 29, 2026
Dec 27, 2020
N/A· v4
8.1 HIGH· v3
6.8 MEDIUM· v2
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.oracle.wls.shaded.org.apache.xalan.lib.sql.JNDIConnectionPool (aka embedded Xalan in org....Show more
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.oracle.wls.shaded.org.apache.xalan.lib.sql.JNDIConnectionPool (aka embedded Xalan in org.glassfish.web/javax.servlet.jsp.jstl).Show less
CVE-2020-35491
4Debian
FasterxmlNetapp+1 more
26Agile Plm
Application Testing SuiteAutovue For Agile Product Lifecycle Management+23 more
Nov 21, 2024
Dec 17, 2020
N/A· v4
8.1 HIGH· v3
6.8 MEDIUM· v2
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.SharedPoolDataSource.
CVE-2020-35490
4Debian
FasterxmlNetapp+1 more
25Agile Plm
Application Testing SuiteAutovue For Agile Product Lifecycle Management+22 more
Nov 21, 2024
Dec 17, 2020
N/A· v4
8.1 HIGH· v3
6.8 MEDIUM· v2
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.PerUserPoolDataSource.
CVE-2020-25649
6Apache
FasterxmlFedoraproject+3 more
39Agile Plm
Agile Product Lifecycle Management Integration PackBanking Apis+36 more
Nov 21, 2024
Dec 3, 2020
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
A flaw was found in FasterXML Jackson Databind, where it did not have entity expansion secured properly. This flaw allows vulnerability to XML external entity (XXE) attacks. The highest threat from this vulnerability is...Show more
A flaw was found in FasterXML Jackson Databind, where it did not have entity expansion secured properly. This flaw allows vulnerability to XML external entity (XXE) attacks. The highest threat from this vulnerability is data integrity.Show less
CVE-2020-11979
4Apache
FedoraprojectGradle+1 more
37Agile Engineering Data Management
AntApi Gateway+34 more
Nov 21, 2024
Oct 1, 2020
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
As mitigation for CVE-2020-1945 Apache Ant 1.10.8 changed the permissions of temporary files it created so that only the current user was allowed to access them. Unfortunately the fixcrlf task deleted the temporary file...Show more
As mitigation for CVE-2020-1945 Apache Ant 1.10.8 changed the permissions of temporary files it created so that only the current user was allowed to access them. Unfortunately the fixcrlf task deleted the temporary file and created a new one without said protection, effectively nullifying the effort. This would still allow an attacker to inject modified source files into the build process.Show less