Approved changes feed: RSS · Atom

cpe:2.3:a:oracle:goldengate_stream_analytics:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorOracle (3509f9eb-d8a0-57da-b153-b8021021b133)
ProductGoldengate Stream Analytics (f17fc0d8-9cb2-5e18-a300-412529a09fba)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-20330 vulnerable 2026-06-08 05:13:40.433763 Details available
FasterXML jackson-databind 2.x before 2.9.10.2 lacks certain net.sf.ehcache blocking.
Published: 2020-01-03T03:35:52.000Z
Updated: 2024-08-05T02:39:09.617Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-16335 vulnerable 2026-06-08 05:13:08.343488 Details available
A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to com.zaxxer.hikari.HikariDataSource. This is a different vulnerability than CVE-2019-14540.
Published: 2019-09-15T21:45:50.000Z
Updated: 2024-08-05T01:10:41.788Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-14893 vulnerable 2026-06-08 05:12:56.367695 Details available
HIGH (7.5)
A flaw was discovered in FasterXML jackson-databind in all versions before 2.9.10 and 2.10.0, where it would permit polymorphic deserialization of malicious objects using the xalan JNDI gadget when used in conjunction with polymorphic type handling methods such as `enableDefaultTyping()` or when @JsonTypeInfo is using `Id.CLASS` or `Id.MINIMAL_CLASS` or in any other way which ObjectMapper.readValue might instantiate objects from unsafe sources. An attacker could use this flaw to execute arbitrary code.
Published: 2020-03-02T20:11:32.000Z
Updated: 2024-08-05T00:26:39.152Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-14540 vulnerable 2026-06-08 05:12:54.960263 Details available
A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to com.zaxxer.hikari.HikariConfig.
Published: 2019-09-15T21:45:22.000Z
Updated: 2024-08-05T00:19:41.379Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-14439 vulnerable 2026-06-08 05:12:54.852452 Details available
A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x before 2.9.9.2. This occurs when Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the logback jar in the classpath.
Published: 2019-07-30T10:49:43.000Z
Updated: 2024-08-05T00:19:41.289Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-14379 vulnerable 2026-06-08 05:12:54.782807 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-0222 vulnerable 2026-06-08 05:12:19.374116 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-0201 vulnerable 2026-06-08 05:12:19.273969 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-8088 vulnerable 2026-06-08 05:12:05.187225 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-8012 vulnerable 2026-06-08 05:12:04.952923 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.