Banking Payments Security Vulnerabilities and Issues — Banking Payments CVE List

Lucene search

OracleBanking Payments

7 matches found

CVE•added 2019/07/26 7:15 p.m.•529 views

CVE-2019-13990

initDocumentParser in xml/XMLSchedulingDataProcessor.java in Terracotta Quartz Scheduler through 2.3.0 allows XXE attacks via a job description.

9.8CVSS9AI score0.10416EPSS

CVE•added 2019/10/23 8:15 p.m.•260 views

CVE-2019-12415

In Apache POI up to 4.1.0, when using the tool XSSFExportToXml to convert user-provided Microsoft Excel documents, a specially crafted document can allow an attacker to read files from the local filesystem or from internal network resources via XML External Entity (XXE) Processing.

5.5CVSS6.7AI score0.00022EPSS

CVE•added 2019/08/30 9:15 a.m.•191 views

CVE-2019-12402

The file name encoding algorithm used internally in Apache Commons Compress 1.15 to 1.18 can get into an infinite loop when faced with specially crafted inputs. This can lead to a denial of service attack if an attacker can choose the file names inside of an archive created by Compress.

7.5CVSS7.1AI score0.00163EPSS

CVE•added 2019/07/23 11:15 p.m.•86 views

CVE-2019-2782

Vulnerability in the Oracle Payments component of Oracle E-Business Suite (subcomponent: File Transmission). Supported versions that are affected are 12.1.1 - 12.1.3 and 12.2.3 - 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Orac...

7.5CVSS7.3AI score0.01684EPSS

CVE•added 2019/07/23 11:15 p.m.•81 views

CVE-2019-2775

9.1CVSS8.2AI score0.01277EPSS

CVE•added 2019/07/23 11:15 p.m.•38 views

CVE-2019-2773

5.8CVSS5.3AI score0.00568EPSS

CVE•added 2019/07/23 11:15 p.m.•36 views

CVE-2019-2783

5.8CVSS5.3AI score0.00568EPSS