Vulnerabilities fixed in Oracle Financial Services Applications

🗓️ 20 Oct 2021 00:00:00Reported by NCSCType

ncsc🔗 advisories.ncsc.nl👁 54 Views

Oracle Financial Services Applications fix high severity flaws enabling DoS or privilege escalation.

Reporter	Title	Published	Views	Family All 2007
zdt	Apache Axis 1.4 - Remote Code Execution Exploit	9 Apr 201900:00	–	zdt
vulnersOsv	@0pecm/token-test (>=1.2.14, <=1.2.21), @actionpower/i18n-spreadsheet-to-json (>=0.0.29, <=0.0.35) +193 more potentially affected by CVE-2020-8203 via lodash.setwith (4.3.2)	15 Jul 202019:15	–	vulnersosv
vulnersOsv	09-nodejs (1.0.0), 11.17r (1.0.0) +561 more potentially affected by CVE-2021-23337 +1 more via lodash.template (>=4.0.0, <=4.5.0)	1 Apr 202623:51	–	vulnersosv
vulnersOsv	09-nodejs (1.0.0), 11.17r (1.0.0) +561 more potentially affected by CVE-2021-23337 +1 more via lodash.template (>=4.0.0, <=4.5.0)	31 Mar 202623:02	–	vulnersosv
vulnersOsv	-fides-amor-et-lux (1.0.0), -graphql-codegen-client-preset-swc-test (>=2.0.1, <=2.0.2) +50531 more potentially affected by CVE-2021-23337 +1 more via lodash (>=4.0.0, <=4.18.0)	31 Mar 202623:02	–	vulnersosv
vulnersOsv	4game-support-ckeditor5-custom-build (>=0.0.1, <=0.0.5), 87-midnight-ckeditor5 (>=0.0.3, <=0.0.5) +5665 more potentially affected by CVE-2021-23337 +1 more via lodash-es (>=4.0.0, <=4.17.23)	1 Apr 202623:51	–	vulnersosv
vulnersOsv	@across-ui/example (>=0.0.1-alpha.4, <=0.0.4-alpha.5), @admui/grid (>=0.1.10, <=0.3.1) +806 more potentially affected by CVE-2021-23337 via lodash-es (>=4.0.0, <=4.17.20)	17 Nov 202013:02	–	vulnersosv
vulnersOsv	@across-ui/example (>=0.0.1-alpha.4, <=0.0.4-alpha.5), @admui/grid (>=0.1.10, <=0.3.1) +809 more potentially affected by CVE-2020-8203 via lodash-es (>=3.10.1, <=4.17.15)	15 Jul 202019:15	–	vulnersosv
vulnersOsv	10by10-react-app (1.2.1), 1508-cli (>=1.0.0, <=1.0.6) +19158 more potentially affected by CVE-2021-23337 +1 more via lodash (>=4.0.0, <=4.17.20)	6 May 202116:05	–	vulnersosv
vulnersOsv	-fides-amor-et-lux (1.0.0), -graphql-codegen-client-preset-swc-test (>=2.0.1, <=2.0.2) +50514 more potentially affected by CVE-2021-23337 +1 more via lodash (>=4.0.0, <=4.17.23)	1 Apr 202623:51	–	vulnersosv

20 Oct 2021 00:00Current

7.5High risk

Vulners AI Score7.5

CVSS 27.5

CVSS 3.17.5 - 9.9

EPSS0.9194

Oracle Financial Services high severity flaws denial of service privilege escalation arbitrary code remote attacker