Oracle Financial Services Revenue Management and Billing Analytics 2.8
Approved changes feed: RSS · Atom
cpe:2.3:a:oracle:financial_services_revenue_management_and_billing_analytics:2.8:*:*:*:*:*:*:*
part: a version: 2.8 update: *
| Vendor | Oracle (3509f9eb-d8a0-57da-b153-b8021021b133) |
|---|---|
| Product | Financial Services Revenue Management And Billing Analytics (344a35bd-58e2-5962-9756-7749155ee9ed) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-11023 |
vulnerable | 2026-06-08 05:16:36.303270 |
Potential XSS vulnerability in jQuery
MEDIUM (6.9)
In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
Published: 2020-04-29T00:00:00.000Z
Updated: 2025-10-21T23:35:45.230Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-2904 |
vulnerable | 2026-06-08 05:13:54.583734 |
Details available
CRITICAL (9.8)
Vulnerability in the Oracle JDeveloper and ADF product of Oracle Fusion Middleware (component: ADF Faces). Supported versions that are affected are 11.1.1.9.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle JDeveloper and ADF. Successful attacks of this vulnerability can result in takeover of Oracle JDeveloper and ADF. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
Published: 2019-10-16T17:40:53.000Z
Updated: 2024-10-15T18:50:07.530Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-10086 |
vulnerable | 2026-06-08 05:12:22.164686 |
Details available
In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all Java objects. We, however were not using this by default characteristic of the PropertyUtilsBean.
Published: 2019-08-20T20:10:15.000Z
Updated: 2024-08-04T22:10:09.585Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.