Oracle Customer Management And Segmentation Foundation vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Oracle Customer Management And Segmentation Foundation: 5 record(s), with affected versions and fixes.cpe:2.3:a:oracle:customer_management_and_segmentation_foundation
CVE-2019-20330
Critical · 9.8
CWE-502 Jan 3, 2020
Deserialization of Untrusted Data in Fasterxml Jackson-databind
FasterXML jackson-databind 2.x before 2.9.10.2 lacks certain net.sf.ehcache blocking.
CVE-2019-17267
Critical · 9.8
CWE-502 Oct 6, 2019
Deserialization of Untrusted Data in Fasterxml Jackson-databind
A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to net.sf.ehcache.hibernate.EhcacheJtaTransactionManagerLookup.
CVE-2019-16335
Critical · 9.8
CWE-502 Sep 15, 2019
Deserialization of Untrusted Data in Fasterxml Jackson-databind
A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to com.zaxxer.hikari.HikariDataSource. This is a different vulnerability than CVE-2019-14540.
CVE-2019-14540
Critical · 9.8
CWE-502 Sep 15, 2019
Deserialization of Untrusted Data in Fasterxml Jackson-databind
A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to com.zaxxer.hikari.HikariConfig.
CVE-2019-10086
High · 7.3
CWE-502 Aug 20, 2019
Deserialization of Untrusted Data in Apache Software Foundation Commons Beanutils
In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all Java objects. We, however were not using this by default characteristic of the PropertyUtilsBean.