Approved changes feed: RSS · Atom

cpe:2.3:a:oracle:primavera_gateway:20.12.0:*:*:*:*:*:*:*

part: a version: 20.12.0 update: *

VendorOracle (3509f9eb-d8a0-57da-b153-b8021021b133)
ProductPrimavera Gateway (5a81d123-5178-506b-828f-10e19465ac38)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-41183 vulnerable 2026-06-08 05:35:19.953129 XSS in `*Text` options of the Datepicker widget
MEDIUM (6.5)
jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of various `*Text` options of the Datepicker widget from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. The values passed to various `*Text` options are now always treated as pure text, not HTML. A workaround is to not accept the value of the `*Text` options from untrusted sources.
Published: 2021-10-26T00:00:00.000Z
Updated: 2025-02-13T16:28:30.803Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-36189 vulnerable 2026-06-08 05:25:02.698923 Details available
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.DriverManagerConnectionSource.
Published: 2021-01-06T22:29:28.000Z
Updated: 2024-08-04T17:23:09.508Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-36188 vulnerable 2026-06-08 05:25:02.635653 Details available
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.JNDIConnectionSource.
Published: 2021-01-06T22:29:36.000Z
Updated: 2024-08-04T17:23:09.309Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-36187 vulnerable 2026-06-08 05:25:02.631078 Details available
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.SharedPoolDataSource.
Published: 2021-01-06T22:29:44.000Z
Updated: 2024-08-04T17:23:09.266Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-36186 vulnerable 2026-06-08 05:25:02.626228 Details available
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.PerUserPoolDataSource.
Published: 2021-01-06T22:29:51.000Z
Updated: 2024-08-04T17:23:09.443Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-36185 vulnerable 2026-06-08 05:25:02.622014 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-36184 vulnerable 2026-06-08 05:25:02.615081 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-36183 vulnerable 2026-06-08 05:25:02.609604 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-36182 vulnerable 2026-06-08 05:25:02.603626 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-36181 vulnerable 2026-06-08 05:25:02.597611 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-36180 vulnerable 2026-06-08 05:25:02.584804 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-36179 vulnerable 2026-06-08 05:25:02.565137 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-35728 vulnerable 2026-06-08 05:25:01.617899 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-25649 vulnerable 2026-06-08 05:22:37.070374 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.