Oracle Financial Services Analytical Applications Infrastructure 8.0.2
Approved changes feed: RSS · Atom
cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:8.0.2:*:*:*:*:*:*:*
part: a version: 8.0.2 update: *
| Vendor | Oracle (3509f9eb-d8a0-57da-b153-b8021021b133) |
|---|---|
| Product | Financial Services Analytical Applications Infrastructure (83b73fff-9cd8-5db9-b601-78ae9bfe3845) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-14721 |
vulnerable | 2026-06-08 05:10:53.380436 |
Details available
FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to conduct server-side request forgery (SSRF) attacks by leveraging failure to block the axis2-jaxws class from polymorphic deserialization.
Published: 2019-01-02T18:00:00.000Z
Updated: 2024-08-05T09:38:13.150Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-14720 |
vulnerable | 2026-06-08 05:10:53.375415 |
Details available
FasterXML jackson-databind 2.x before 2.9.7 might allow attackers to conduct external XML entity (XXE) attacks by leveraging failure to block unspecified JDK classes from polymorphic deserialization.
Published: 2019-01-02T18:00:00.000Z
Updated: 2024-08-05T09:38:13.593Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-14719 |
vulnerable | 2026-06-08 05:10:53.363111 |
Details available
FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to execute arbitrary code by leveraging failure to block the blaze-ds-opt and blaze-ds-core classes from polymorphic deserialization.
Published: 2019-01-02T18:00:00.000Z
Updated: 2024-08-05T09:38:13.192Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-14718 |
vulnerable | 2026-06-08 05:10:53.333306 |
Details available
FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to execute arbitrary code by leveraging failure to block the slf4j-ext class from polymorphic deserialization.
Published: 2019-01-02T18:00:00.000Z
Updated: 2024-08-05T09:38:13.347Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-15095 |
vulnerable | 2026-06-08 05:08:57.857708 |
Details available
A deserialization flaw was discovered in the jackson-databind in versions before 2.8.10 and 2.9.1, which could allow an unauthenticated user to perform code execution by sending the maliciously crafted input to the readValue method of the ObjectMapper. This issue extends the previous flaw CVE-2017-7525 by blacklisting more classes that could be used maliciously.
Published: 2018-02-06T15:00:00.000Z
Updated: 2024-09-16T22:57:07.488Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.