← Back

Banking Treasury Management

banking_treasury_management

Vendor: Oracle • 29 CVEs

CVEs (29)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2020-36186
4Debian
FasterxmlNetapp+1 more
46Agile Plm
Agile Product Lifecycle ManagementApplication Testing Suite+43 more
Aug 25, 2026
Jan 6, 2021
N/A· v4
8.1 HIGH· v3
6.8 MEDIUM· v2
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.PerUserPoolDataSource.
CVE-2020-36185
4Debian
FasterxmlNetapp+1 more
46Agile Plm
Agile Product Lifecycle ManagementApplication Testing Suite+43 more
Aug 25, 2026
Jan 6, 2021
N/A· v4
8.1 HIGH· v3
6.8 MEDIUM· v2
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.SharedPoolDataSource.
CVE-2020-36184
4Debian
FasterxmlNetapp+1 more
46Agile Plm
Agile Product Lifecycle ManagementApplication Testing Suite+43 more
Aug 25, 2026
Jan 6, 2021
N/A· v4
8.1 HIGH· v3
6.8 MEDIUM· v2
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.PerUserPoolDataSource.
CVE-2020-36181
4Debian
FasterxmlNetapp+1 more
45Agile Plm
Agile Product Lifecycle ManagementApplication Testing Suite+42 more
Aug 25, 2026
Jan 6, 2021
N/A· v4
8.1 HIGH· v3
6.8 MEDIUM· v2
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.cpdsadapter.DriverAdapterCPDS.
CVE-2020-35728
4Debian
FasterxmlNetapp+1 more
41Agile Plm
Agile Product Lifecycle ManagementApplication Testing Suite+38 more
Aug 25, 2026
Dec 27, 2020
N/A· v4
8.1 HIGH· v3
6.8 MEDIUM· v2
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.oracle.wls.shaded.org.apache.xalan.lib.sql.JNDIConnectionPool (aka embedded Xalan in org....Show more
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.oracle.wls.shaded.org.apache.xalan.lib.sql.JNDIConnectionPool (aka embedded Xalan in org.glassfish.web/javax.servlet.jsp.jstl).Show less
CVE-2020-35491
4Debian
FasterxmlNetapp+1 more
27Agile Plm
Agile Product Lifecycle ManagementApplication Testing Suite+24 more
Aug 25, 2026
Dec 17, 2020
N/A· v4
8.1 HIGH· v3
6.8 MEDIUM· v2
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.SharedPoolDataSource.
CVE-2020-35490
4Debian
FasterxmlNetapp+1 more
26Agile Plm
Agile Product Lifecycle ManagementApplication Testing Suite+23 more
Aug 25, 2026
Dec 17, 2020
N/A· v4
8.1 HIGH· v3
6.8 MEDIUM· v2
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.PerUserPoolDataSource.
CVE-2020-25649
6Apache
FasterxmlFedoraproject+3 more
40Agile Plm
Agile Product Lifecycle ManagementAgile Product Lifecycle Management Integration Pack+37 more
Aug 25, 2026
Dec 3, 2020
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
A flaw was found in FasterXML Jackson Databind, where it did not have entity expansion secured properly. This flaw allows vulnerability to XML external entity (XXE) attacks. The highest threat from this vulnerability is...Show more
A flaw was found in FasterXML Jackson Databind, where it did not have entity expansion secured properly. This flaw allows vulnerability to XML external entity (XXE) attacks. The highest threat from this vulnerability is data integrity.Show less
CVE-2020-11979
4Apache
FedoraprojectGradle+1 more
37Agile Engineering Data Management
AntApi Gateway+34 more
Jun 17, 2026
Oct 1, 2020
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
As mitigation for CVE-2020-1945 Apache Ant 1.10.8 changed the permissions of temporary files it created so that only the current user was allowed to access them. Unfortunately the fixcrlf task deleted the temporary file...Show more
As mitigation for CVE-2020-1945 Apache Ant 1.10.8 changed the permissions of temporary files it created so that only the current user was allowed to access them. Unfortunately the fixcrlf task deleted the temporary file and created a new one without said protection, effectively nullifying the effort. This would still allow an attacker to inject modified source files into the build process.Show less