Vulnerabilidades do Oracle Customer Management And Segmentation Foundation
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Oracle Customer Management And Segmentation Foundation: 5 registro(s), com versões afetadas e correções.cpe:2.3:a:oracle:customer_management_and_segmentation_foundation
CVE-2019-20330
Crítica · 9.8
CWE-502 03/01/2020
Deserialization of Untrusted Data em Fasterxml Jackson-databind
FasterXML jackson-databind 2.x before 2.9.10.2 lacks certain net.sf.ehcache blocking.
CVE-2019-17267
Crítica · 9.8
CWE-502 06/10/2019
Deserialization of Untrusted Data em Fasterxml Jackson-databind
A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to net.sf.ehcache.hibernate.EhcacheJtaTransactionManagerLookup.
CVE-2019-16335
Crítica · 9.8
CWE-502 15/09/2019
Deserialization of Untrusted Data em Fasterxml Jackson-databind
A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to com.zaxxer.hikari.HikariDataSource. This is a different vulnerability than CVE-2019-14540.
CVE-2019-14540
Crítica · 9.8
CWE-502 15/09/2019
Deserialization of Untrusted Data em Fasterxml Jackson-databind
A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10. It is related to com.zaxxer.hikari.HikariConfig.
CVE-2019-10086
Alta · 7.3
CWE-502 20/08/2019
Deserialization of Untrusted Data em Apache Software Foundation Commons Beanutils
In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all Java objects. We, however were not using this by default characteristic of the PropertyUtilsBean.