Oracle Banking Platform 2.12.0
Approved changes feed: RSS · Atom
cpe:2.3:a:oracle:banking_platform:2.12.0:*:*:*:*:*:*:*
part: a version: 2.12.0 update: *
| Vendor | Oracle (3509f9eb-d8a0-57da-b153-b8021021b133) |
|---|---|
| Product | Banking Platform (00cfc655-960c-52b8-b6c8-45cd04e835e4) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-45105 |
vulnerable | 2026-06-08 05:36:47.852795 |
Apache Log4j2 does not always protect from infinite recursion in lookup evaluation
Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread Context Map data to cause a denial of service when a crafted string is interpreted. This issue was fixed in Log4j 2.17.0, 2.12.3, and 2.3.1.
Published: 2021-12-18T11:55:08.000Z
Updated: 2026-05-29T11:45:26.064Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-41184 |
vulnerable | 2026-06-08 05:35:19.956558 |
XSS in the `of` option of the `.position()` util
MEDIUM (6.5)
jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the `of` option of the `.position()` util from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. Any string value passed to the `of` option is now treated as a CSS selector. A workaround is to not accept the value of the `of` option from untrusted sources.
Published: 2021-10-26T00:00:00.000Z
Updated: 2025-11-04T16:09:17.971Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-41183 |
vulnerable | 2026-06-08 05:35:19.944953 |
XSS in `*Text` options of the Datepicker widget
MEDIUM (6.5)
jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of various `*Text` options of the Datepicker widget from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. The values passed to various `*Text` options are now always treated as pure text, not HTML. A workaround is to not accept the value of the `*Text` options from untrusted sources.
Published: 2021-10-26T00:00:00.000Z
Updated: 2025-02-13T16:28:30.803Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-41182 |
vulnerable | 2026-06-08 05:35:19.934860 |
XSS in the `altField` option of the Datepicker widget
MEDIUM (6.5)
jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the `altField` option of the Datepicker widget from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. Any string value passed to the `altField` option is now treated as a CSS selector. A workaround is to not accept the value of the `altField` option from untrusted sources.
Published: 2021-10-26T00:00:00.000Z
Updated: 2025-02-13T16:28:30.239Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-36090 |
vulnerable | 2026-06-08 05:32:49.722122 |
Apache Commons Compress 1.0 to 1.20 denial of service vulnerability
When reading a specially crafted ZIP archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs. This could be used to mount a denial of service attack against services that use Compress' zip package.
Published: 2021-07-13T07:15:23.000Z
Updated: 2024-08-04T00:47:43.813Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-2351 |
vulnerable | 2026-06-08 05:31:46.437183 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-21351 |
vulnerable | 2026-06-08 05:29:11.728927 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-21350 |
vulnerable | 2026-06-08 05:29:11.727274 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-21349 |
vulnerable | 2026-06-08 05:29:11.715391 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-21348 |
vulnerable | 2026-06-08 05:29:11.713581 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-21347 |
vulnerable | 2026-06-08 05:29:11.704078 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-21346 |
vulnerable | 2026-06-08 05:29:11.697283 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-21345 |
vulnerable | 2026-06-08 05:29:11.690449 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-21344 |
vulnerable | 2026-06-08 05:29:11.679735 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-21343 |
vulnerable | 2026-06-08 05:29:11.678047 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-21342 |
vulnerable | 2026-06-08 05:29:11.671399 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-21341 |
vulnerable | 2026-06-08 05:29:11.654962 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-6950 |
vulnerable | 2026-06-08 05:27:11.276641 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.