Financial Services Retail Customer Analytics vulnerabilities

Product

Financial Services Retail Customer Analytics

by Oracle · last CVE Apr 27, 2020

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities9 In the news0 Timeline

Severity mix

Critical 1High 6Medium 1Low 1

Severity

All severities9 Critical1 High6 Medium1 Low1

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Financial Services Retail Customer Analytics to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2020-9546	9.8	5%	Mar 2	FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to… Affected: 8.0.6
CVE-2020-11113	8.8	6%	Mar 31	FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.openjpa.ee.WASRegistryManagedRuntime (aka… Affected: 8.0.6
CVE-2020-11112	8.8	4%	Mar 31	FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to… Affected: 8.0.6
CVE-2020-10969	8.8	4%	Mar 26	FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to javax.swing.JEditorPane Affected: 8.0.6
CVE-2020-10968	8.8	4%	Mar 26	FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.aoju.bus.proxy.provider.remoting.RmiProvider… Affected: 8.0.6
CVE-2020-10673	8.8	8%	Mar 18	FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.caucho.config.types.ResourceRef (aka… Affected: 8.0.6
CVE-2020-10672	8.8	3%	Mar 18	FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to… Affected: 8.0.6
CVE-2019-11358	6.1	87%	Apr 20	jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution Affected: 8.0.4 through 8.0.6
CVE-2020-9488	3.7	8%	Apr 27	Improper validation of certificate with host mismatch in Apache Log4j SMTP appender Affected: 8.0.6