CVE-2020-11022

CVE-2020-11022 affects jQuery versions >=1.2 and =3.5.0 or apply vendor guidance where applicable.

CVE-2019-11358

CVE-2019-11358 is a prototype pollution vulnerability in jQuery (before 3.4.0) where mishandling of extend(true, {}, ...) can extend Object.prototype if an unsanitized source object has an enumerable proto property. The Core issue is triggered when a polluted prototype is introduced via nested ob...

CVE-2020-2936

CVE-2020-2936 affects Oracle Financial Services Balance Sheet Planning (Oracle Financial Services Applications), component: User Interface, with affected version 8.0.8. The vulnerability is described as easily exploitable: a low-privileged attacker with network access via HTTP can compromise data...

CVE-2018-2626

CVE-2018-2626 affects Oracle Financial Services Balance Sheet Planning (UI subcomponent) in Oracle Financial Services Applications, version 8.0.x. The vulnerability is exploitable over HTTP by unauthenticated attackers and requires user interaction; it can lead to unauthorized read and modificati...

CVE-2018-2592

The CVE-2018-2592 vulnerability affects the Oracle Financial Services Balance Sheet Planning component of Oracle Financial Services Applications, specifically the User Interface subcomponent in version 8.0.x. The issue is exploitable over a network via HTTP by a low-privilege attacker, potentiall...