VendorsOraclebanking_platform2.10.0
Vulnerabilities

Oracle Banking Platform 2.10.0

Ranked by severity, then by exploit likelihood, unless you sort otherwise. Click a CVE ID for its full record.

4CVEs
CVE-2020-35491
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.SharedPoolDataSource.
Published 2020-12-17 · Modified
8.1EPSS 0.078
CVE-2020-35490
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.PerUserPoolDataSource.
Published 2020-12-17 · Modified
8.1EPSS 0.063
CVE-2020-36189
FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.DriverManagerConnectionSource.
Published 2021-01-06 · Modified
8.1EPSS 0.040
CVE-2020-25649
A flaw was found in FasterXML Jackson Databind, where it did not have entity expansion secured properly. This flaw allows vulnerability to XML external entity (XXE) attacks. The highest threat from this vulnerability is data integrity.
Published 2020-12-03 · Modified
7.5EPSS 0.177