Approved changes feed: RSS · Atom

cpe:2.3:a:oracle:business_process_management_suite:12.1.3.0.0:*:*:*:*:*:*:*

part: a version: 12.1.3.0.0 update: *

VendorOracle (3509f9eb-d8a0-57da-b153-b8021021b133)
ProductBusiness Process Management Suite (2c803dfa-a8f7-5a42-a8f5-3376a944027f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-3246 vulnerable 2026-06-08 05:11:38.886628 Details available
Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: WLS - Web Services). Supported versions that are affected are 12.1.3.0 and 12.2.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data. CVSS 3.0 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N).
Published: 2018-10-17T01:00:00.000Z
Updated: 2024-10-02T19:31:41.418Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-3100 vulnerable 2026-06-08 05:11:38.643161 Details available
Vulnerability in the Oracle Business Process Management Suite component of Oracle Fusion Middleware (subcomponent: Process Analysis & Discovery). Supported versions that are affected are 11.1.1.7.0, 11.1.1.9.0, 12.1.3.0.0, 12.2.1.2.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Business Process Management Suite. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Business Process Management Suite accessible data as well as unauthorized access to critical data or complete access to all Oracle Business Process Management Suite accessible data. CVSS 3.0 Base Score 9.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N).
Published: 2018-07-18T13:00:00.000Z
Updated: 2024-10-02T19:48:56.681Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-19362 vulnerable 2026-06-08 05:11:15.679156 Details available
FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the jboss-common-core class from polymorphic deserialization.
Published: 2019-01-02T18:00:00.000Z
Updated: 2024-08-05T11:37:09.987Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-19361 vulnerable 2026-06-08 05:11:15.677361 Details available
FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the openjpa class from polymorphic deserialization.
Published: 2019-01-02T18:00:00.000Z
Updated: 2024-08-05T11:37:11.520Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-19360 vulnerable 2026-06-08 05:11:15.665194 Details available
FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the axis2-transport-jms class from polymorphic deserialization.
Published: 2019-01-02T18:00:00.000Z
Updated: 2024-08-05T11:37:10.574Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-14719 vulnerable 2026-06-08 05:10:53.357047 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-14718 vulnerable 2026-06-08 05:10:53.327975 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-11761 vulnerable 2026-06-08 05:10:38.917211 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1000613 vulnerable 2026-06-08 05:10:25.817848 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1000180 vulnerable 2026-06-08 05:10:25.592632 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-9251 vulnerable 2026-06-08 05:07:13.389817 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.