Oracle Banking Cash Management 14.2
Approved changes feed: RSS · Atom
cpe:2.3:a:oracle:banking_cash_management:14.2:*:*:*:*:*:*:*
part: a version: 14.2 update: *
| Vendor | Oracle (3509f9eb-d8a0-57da-b153-b8021021b133) |
|---|---|
| Product | Banking Cash Management (73cb4ed1-d0fa-5dcf-b07a-4ad7c518140b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-29505 |
vulnerable | 2026-06-08 05:31:26.487278 |
XStream is vulnerable to a Remote Command Execution attack
HIGH (7.5)
XStream is software for serializing Java objects to XML and back again. A vulnerability in XStream versions prior to 1.4.17 may allow a remote attacker has sufficient rights to execute commands of the host only by manipulating the processed input stream. No user who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types is affected. The vulnerability is patched in version 1.4.17.
Published: 2021-05-28T21:00:19.000Z
Updated: 2025-05-29T23:30:31.977Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-26217 |
vulnerable | 2026-06-08 05:23:50.861889 |
Remote Code Execution in XStream
HIGH (8)
XStream before version 1.4.14 is vulnerable to Remote Code Execution.The vulnerability may allow a remote attacker to run arbitrary shell commands only by manipulating the processed input stream. Only users who rely on blocklists are affected. Anyone using XStream's Security Framework allowlist is not affected. The linked advisory provides code workarounds for users who cannot upgrade. The issue is fixed in version 1.4.14.
Published: 2020-11-16T21:00:18.000Z
Updated: 2024-08-04T15:49:07.258Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.