What’s Vulnerable › Products
Oracle Corporation Banking Digital Experience vulnerabilities
31 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.
Check whether your Oracle Corporation Banking Digital Experience version is affected
Latest Oracle Corporation Banking Digital Experience vulnerabilities
- CVE-2021-41165 — HTML comments vulnerability allowing to execute JavaScript code (CVSS 5.4)
- CVE-2021-41164 — Advanced Content Filter (ACF) vulnerability allowing to execute JavaScript code using malformed HTML (CVSS 5.4)
- CVE-2021-37137 — (CVSS 7.5)
- CVE-2021-37136 — (CVSS 7.5)
- CVE-2021-2351 — (CVSS 5.1)
- CVE-2021-36090 — Apache Commons Compress 1.0 to 1.20 denial of service vulnerability (CVSS 7.5)
- CVE-2021-35517 — Apache Commons Compress 1.1 to 1.20 denial of service vulnerability (CVSS 7.5)
- CVE-2021-35516 — Apache Commons Compress 1.6 to 1.20 denial of service vulnerability (CVSS 7.5)
- CVE-2021-35515 — Apache Commons Compress 1.6 to 1.20 denial of service vulnerability (CVSS 7.5)
- CVE-2021-29425 — Possible limited path traversal vulnerabily in Apache Commons IO (CVSS 4.8)
- CVE-2021-28164 — (CVSS 5.3)
- CVE-2021-28163 — (CVSS 2.7)
- CVE-2020-11987 — (CVSS 8.2)
- CVE-2020-14195 — Deserialization of untrusted data in Jackson Databind (CVSS 8.1)
- CVE-2020-14060 — Deserialization of untrusted data in Jackson Databind (CVSS 8.1)
- CVE-2020-14062 — Deserialization of untrusted data in Jackson Databind (CVSS 8.1)
- CVE-2020-14061 — Deserialization of untrusted data in Jackson Databind (CVSS 8.1)
- CVE-2020-11022 — jQuery has a potential XSS vulnerability (CVSS 6.1)
- CVE-2020-11113 — jackson-databind mishandles the interaction between serialization gadgets and typing (CVSS 8.8)
- CVE-2020-11112 — jackson-databind mishandles the interaction between serialization gadgets and typing (CVSS 8.8)
- CVE-2020-11111 — jackson-databind mishandles the interaction between serialization gadgets and typing (CVSS 8.8)
- CVE-2020-10969 — jackson-databind mishandles the interaction between serialization gadgets and typing (CVSS 8.8)
- CVE-2020-10968 — jackson-databind mishandles the interaction between serialization gadgets and typing (CVSS 8.8)
- CVE-2020-10673 — jackson-databind mishandles the interaction between serialization gadgets and typing (CVSS 8.8)
- CVE-2020-10672 — jackson-databind mishandles the interaction between serialization gadgets and typing (CVSS 8.8)