Oracle Financial Services Analytical Applications Infrastructure 8.0.7

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.7:*:*:*:*:*:*:*

part: a version: 8.0.7 update: *

VendorOracle (3509f9eb-d8a0-57da-b153-b8021021b133)
ProductFinancial Services Analytical Applications Infrastructure (83b73fff-9cd8-5db9-b601-78ae9bfe3845)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-21901 vulnerable 2026-06-08 05:54:22.800397 Details available
HIGH (7.4)
Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are affected are 8.0.7, 8.0.8, 8.0.9, 8.1.0, 8.1.1 and 8.1.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Financial Services Analytical Applications Infrastructure. While the vulnerability is in Oracle Financial Services Analytical Applications Infrastructure, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Financial Services Analytical Applications Infrastructure accessible data as well as unauthorized read access to a subset of Oracle Financial Services Analytical Applications Infrastructure accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Financial Services Analytical Applications Infrastructure. CVSS 3.1 Base Score 7.4 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L).
Published: 2024-01-16T21:39:38.605Z
Updated: 2025-06-11T16:32:23.938Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-14721 vulnerable 2026-06-08 05:10:53.380516 Details available
FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to conduct server-side request forgery (SSRF) attacks by leveraging failure to block the axis2-jaxws class from polymorphic deserialization.
Published: 2019-01-02T18:00:00.000Z
Updated: 2024-08-05T09:38:13.150Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-14720 vulnerable 2026-06-08 05:10:53.375500 Details available
FasterXML jackson-databind 2.x before 2.9.7 might allow attackers to conduct external XML entity (XXE) attacks by leveraging failure to block unspecified JDK classes from polymorphic deserialization.
Published: 2019-01-02T18:00:00.000Z
Updated: 2024-08-05T09:38:13.593Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-14719 vulnerable 2026-06-08 05:10:53.363202 Details available
FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to execute arbitrary code by leveraging failure to block the blaze-ds-opt and blaze-ds-core classes from polymorphic deserialization.
Published: 2019-01-02T18:00:00.000Z
Updated: 2024-08-05T09:38:13.192Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-14718 vulnerable 2026-06-08 05:10:53.336396 Details available
FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to execute arbitrary code by leveraging failure to block the slf4j-ext class from polymorphic deserialization.
Published: 2019-01-02T18:00:00.000Z
Updated: 2024-08-05T09:38:13.347Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-15095 vulnerable 2026-06-08 05:08:57.861071 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.