Vulnerabilidades do Oracle Financial Services Revenue Management And Billing Analytics

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Oracle Financial Services Revenue Management And Billing Analytics: 2 registro(s), com versões afetadas e correções.
cpe:2.3:a:oracle:financial_services_revenue_management_and_billing_analytics

CVE-2020-11023 Média · 6.1 KEV Alta · 67 Exploit público CWE-79 29/04/2020

JQuery Cross-Site Scripting (XSS) Vulnerability

In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.

CVE-2019-10086 Alta · 7.3 CWE-502 20/08/2019

Deserialization of Untrusted Data em Apache Software Foundation Commons Beanutils

In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all Java objects. We, however were not using this by default characteristic of the PropertyUtilsBean.