What’s Vulnerable › Products

Oracle Banking Supply Chain Finance vulnerabilities

26 known vulnerabilities, 1 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Check whether your Oracle Banking Supply Chain Finance version is affected

Exploited Oracle Banking Supply Chain Finance vulnerabilities

• CVE-2022-22963 — VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability

Latest Oracle Banking Supply Chain Finance vulnerabilities

• CVE-2022-22963 — VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability (CVSS 9.8) — exploited
• CVE-2021-31812 — A carefully crafted PDF file can trigger an infinite loop while loading the file (CVSS 5.5)
• CVE-2021-31811 — A carefully crafted PDF file can trigger an OutOfMemory-Exception while loading a tiny file (CVSS 5.5)
• CVE-2021-29505 — XStream is vulnerable to a Remote Command Execution attack (CVSS 8.8)
• CVE-2021-27906 — A carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file (CVSS 5.5)
• CVE-2021-23337 — Command Injection (CVSS 7.2)
• CVE-2020-28500 — Regular Expression Denial of Service (ReDoS) (CVSS 5.3)
• CVE-2020-36183 — Unsafe Deserialization in jackson-databind (CVSS 8.1)
• CVE-2020-36182 — Unsafe Deserialization in jackson-databind (CVSS 8.1)
• CVE-2020-36180 — Unsafe Deserialization in jackson-databind (CVSS 8.1)
• CVE-2020-36179 — Unsafe Deserialization in jackson-databind (CVSS 8.1)
• CVE-2020-36188 — Unsafe Deserialization in jackson-databind (CVSS 8.1)
• CVE-2020-36187 — Unsafe Deserialization in jackson-databind (CVSS 8.1)
• CVE-2020-36186 — Unsafe Deserialization in jackson-databind (CVSS 8.1)
• CVE-2020-36185 — Unsafe Deserialization in jackson-databind (CVSS 8.1)
• CVE-2020-36184 — Unsafe Deserialization in jackson-databind (CVSS 8.1)
• CVE-2020-36181 — Unsafe Deserialization in jackson-databind (CVSS 8.1)
• CVE-2020-35728 — Serialization gadget exploit in jackson-databind (CVSS 8.1)
• CVE-2020-28052 — (CVSS 8.1)
• CVE-2020-26217 — Remote Code Execution in XStream (CVSS 8.8)
• CVE-2020-24750 — Unsafe Deserialization in jackson-databind (CVSS 8.1)
• CVE-2020-24616 — Code Injection in jackson-databind (CVSS 8.1)
• CVE-2020-5413 — Kryo Configuration Allows Code Execution with Unknown "Serialization Gadgets" (CVSS 9.8)
• CVE-2020-8203 — Prototype Pollution in lodash (CVSS 7.4)
• CVE-2019-12399 — (CVSS 7.5)