Approved changes feed: RSS · Atom

cpe:2.3:a:oracle:healthcare_foundation:7.2.1:*:*:*:*:*:*:*

part: a version: 7.2.1 update: *

VendorOracle (3509f9eb-d8a0-57da-b153-b8021021b133)
ProductHealthcare Foundation (9c86f85d-6f5a-5324-aafb-795b3be833ca)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-1953 vulnerable 2026-06-08 05:21:03.746101 Details available
Apache Commons Configuration uses a third-party library to parse YAML files which by default allows the instantiation of classes if the YAML includes special statements. Apache Commons Configuration versions 2.2, 2.3, 2.4, 2.5, 2.6 did not change the default settings of this library. So if a YAML file was loaded from an untrusted source, it could therefore load and execute code out of the control of the host application.
Published: 2020-03-13T14:58:49.000Z
Updated: 2024-08-04T06:53:59.884Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-11022 vulnerable 2026-06-08 05:16:36.259006 jQuery has a potential XSS vulnerability
MEDIUM (6.9)
In jQuery starting with 1.12.0 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
Published: 2020-04-29T00:00:00.000Z
Updated: 2026-04-13T13:53:08.239Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.