Oracle Financial Services Institutional Performance Analytics 8.0.7
Approved changes feed: RSS · Atom
cpe:2.3:a:oracle:financial_services_institutional_performance_analytics:8.0.7:*:*:*:*:*:*:*
part: a version: 8.0.7 update: *
| Vendor | Oracle (3509f9eb-d8a0-57da-b153-b8021021b133) |
|---|---|
| Product | Financial Services Institutional Performance Analytics (90fa85eb-a169-50da-bc7d-53b7998c2f73) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-9546 |
vulnerable | 2026-06-08 05:28:02.283604 |
Details available
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.hadoop.shaded.com.zaxxer.hikari.HikariConfig (aka shaded hikari-config).
Published: 2020-03-02T03:59:18.000Z
Updated: 2024-08-04T10:34:39.829Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-11113 |
vulnerable | 2026-06-08 05:16:36.470189 |
Details available
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.openjpa.ee.WASRegistryManagedRuntime (aka openjpa).
Published: 2020-03-31T04:37:27.000Z
Updated: 2025-08-27T20:32:51.363Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-11112 |
vulnerable | 2026-06-08 05:16:36.467536 |
Details available
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.proxy.provider.remoting.RmiProvider (aka apache/commons-proxy).
Published: 2020-03-31T04:37:41.000Z
Updated: 2024-08-04T11:21:14.621Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-11022 |
vulnerable | 2026-06-08 05:16:36.249301 |
jQuery has a potential XSS vulnerability
MEDIUM (6.9)
In jQuery starting with 1.12.0 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
Published: 2020-04-29T00:00:00.000Z
Updated: 2026-04-13T13:53:08.239Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-10969 |
vulnerable | 2026-06-08 05:16:36.119423 |
Details available
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to javax.swing.JEditorPane.
Published: 2020-03-26T12:43:34.000Z
Updated: 2024-08-04T11:21:13.816Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-10968 |
vulnerable | 2026-06-08 05:16:36.116921 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-10673 |
vulnerable | 2026-06-08 05:16:35.542320 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-10672 |
vulnerable | 2026-06-08 05:16:35.526078 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.