Approved changes feed: RSS · Atom

cpe:2.3:a:oracle:banking_digital_experience:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorOracle (3509f9eb-d8a0-57da-b153-b8021021b133)
ProductBanking Digital Experience (fa6850c5-ddeb-59fb-8932-fb0efe2f16ab)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-41165 vulnerable 2026-06-08 05:35:19.879309 HTML comments vulnerability allowing to execute JavaScript code
HIGH (8.2)
CKEditor4 is an open source WYSIWYG HTML editor. In affected version a vulnerability has been discovered in the core HTML processing module and may affect all plugins used by CKEditor 4. The vulnerability allowed to inject malformed comments HTML bypassing content sanitization, which could result in executing JavaScript code. It affects all users using the CKEditor 4 at version < 4.17.0. The problem has been recognized and patched. The fix will be available in version 4.17.0.
Published: 2021-11-17T19:15:11.000Z
Updated: 2024-08-04T02:59:31.758Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-41164 vulnerable 2026-06-08 05:35:19.868012 Advanced Content Filter (ACF) vulnerability allowing to execute JavaScript code using malformed HTML
HIGH (8.2)
CKEditor4 is an open source WYSIWYG HTML editor. In affected versions a vulnerability has been discovered in the Advanced Content Filter (ACF) module and may affect all plugins used by CKEditor 4. The vulnerability allowed to inject malformed HTML bypassing content sanitization, which could result in executing JavaScript code. It affects all users using the CKEditor 4 at version < 4.17.0. The problem has been recognized and patched. The fix will be available in version 4.17.0.
Published: 2021-11-17T00:00:00.000Z
Updated: 2024-08-04T02:59:31.641Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-36090 vulnerable 2026-06-08 05:32:49.712396 Apache Commons Compress 1.0 to 1.20 denial of service vulnerability
When reading a specially crafted ZIP archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs. This could be used to mount a denial of service attack against services that use Compress' zip package.
Published: 2021-07-13T07:15:23.000Z
Updated: 2024-08-04T00:47:43.813Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-35517 vulnerable 2026-06-08 05:32:48.958762 Apache Commons Compress 1.1 to 1.20 denial of service vulnerability
When reading a specially crafted TAR archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs. This could be used to mount a denial of service attack against services that use Compress' tar package.
Published: 2021-07-13T07:15:22.000Z
Updated: 2024-08-04T00:40:46.713Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-35516 vulnerable 2026-06-08 05:32:48.940206 Apache Commons Compress 1.6 to 1.20 denial of service vulnerability
When reading a specially crafted 7Z archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs. This could be used to mount a denial of service attack against services that use Compress' sevenz package.
Published: 2021-07-13T07:15:20.000Z
Updated: 2024-08-04T00:40:46.628Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-35515 vulnerable 2026-06-08 05:32:48.897783 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-2351 vulnerable 2026-06-08 05:31:46.430566 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-36184 vulnerable 2026-06-08 05:25:02.612000 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-36182 vulnerable 2026-06-08 05:25:02.600176 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-36181 vulnerable 2026-06-08 05:25:02.589267 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-36180 vulnerable 2026-06-08 05:25:02.567763 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-36179 vulnerable 2026-06-08 05:25:02.546497 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-11113 vulnerable 2026-06-08 05:16:36.469514 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-11112 vulnerable 2026-06-08 05:16:36.466836 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-11111 vulnerable 2026-06-08 05:16:36.464475 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-11022 vulnerable 2026-06-08 05:16:36.283237 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-10969 vulnerable 2026-06-08 05:16:36.118694 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-10968 vulnerable 2026-06-08 05:16:36.116155 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-10673 vulnerable 2026-06-08 05:16:35.541575 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-10672 vulnerable 2026-06-08 05:16:35.500401 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-17495 vulnerable 2026-06-08 05:13:10.545930 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.