Vulnerabilities fixed in Oracle Financial Services Applications

🗓️ 19 Jul 2023 00:00:00Reported by NCSCType

Fixed vulnerabilities in Oracle Financial Services Applications enabling DoS, data manipulation, security bypass, remote code execution, and data access.

Reporter	Title	Published	Views	Family All 3043
0day.today	Apache Druid JNDI Injection Remote Code Execution Exploit	27 Jun 202300:00	–	zdt
0day.today	PyTorch Model Server Registration / Deserialization Remote Code Execution Exploit	15 Oct 202300:00	–	zdt
vulnersOsv	africa.absa:inception-test (>=1.0.0 <=1.2.0), ai.apiverse:apipulse (=1.0.1) +15397 more potentially affected by CVE-2023-1370 via net.minidev:json-smart (>=1.0.6.3 <=2.4.8)	23 Mar 202320:32	–	vulnersosv
vulnersOsv	ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.2 <=4.6.0.0), ai.ylyue:yue-library-auth-client (>=j11.2.6.0 <=j11.2.6.1) +1921 more potentially affected by CVE-2022-31692 via org.springframework.security:spring-security-core (>=5.6.0 <=5.6.8)	1 Nov 202212:00	–	vulnersosv
vulnersOsv	ai.preferred:venom (>=4.0.1 <=4.2.7), ai.stainless:grails-tika (=0.1.0) +8766 more potentially affected by CVE-2022-36033 via org.jsoup:jsoup (>=0.2.2 <=1.15.2)	1 Sep 202222:14	–	vulnersosv
vulnersOsv	ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0 <=4.4.0.1), ai.dev-tools:ai-devtools (>=0.1.12 <=0.1.20) +35885 more potentially affected by CVE-2023-20863 via org.springframework:spring-expression (>=3.0.0.RELEASE <=5.2.23.RELEASE)	13 Apr 202321:30	–	vulnersosv
vulnersOsv	io.github.dimensiondev:maskwalletcore (>=0.1.0 <=0.4.1) potentially affected by CVE-2022-3171 via com.google.protobuf:protobuf-kotlin-lite (>=3.17.1 <=3.17.3)	4 Oct 202222:17	–	vulnersosv
vulnersOsv	build.buf.prototype:connect-kotlin-protoc-gen-javalite-ext (=v0.0.0-test0120), build.buf:connect-kotlin-google-javalite-ext (>=0.0.0-230221 <=0.1.9) +43 more potentially affected by CVE-2022-3171 via com.google.protobuf:protobuf-javalite (>=3.21.0-rc-1 <=3.21.6)	4 Oct 202222:17	–	vulnersosv
vulnersOsv	ai.tock:tock-nlp-dialogflow (=22.3.1), ai.tock:tock-nlp-model-stanford (=22.3.1) +1296 more potentially affected by CVE-2022-3171 via com.google.protobuf:protobuf-java (>=3.20.0-rc-1 <=3.20.2)	4 Oct 202222:17	–	vulnersosv
vulnersOsv	au.csiro.pathling:fhir-server (>=5.3.1 <=6.4.2), au.org.consumerdatastandards:data-holder (>=2.3.0 <=2.4.1) +2396 more potentially affected by CVE-2022-31692 via org.springframework.security:spring-security-core (>=5.7.0 <=5.7.4)	1 Nov 202212:00	–	vulnersosv

19 Jul 2023 00:00Current

8.1High risk

Vulners AI Score8.1

CVSS 3.19.8

CVSS 29

EPSS0.99615

SSVC