CVE-2020-11022

CVE-2020-11022 affects jQuery versions >=1.2 and =3.5.0 or apply vendor guidance where applicable.

CVE-2015-9251

CVE-2015-9251 affects jQuery before 3.0.0, enabling XSS when a cross-domain Ajax request omits the dataType option and text/javascript responses are executed. Connected advisories confirm the issue and indicate an upgrade resolves it; remediation is to upgrade jQuery to a fixed version as provide...

CVE-2019-11358

CVE-2019-11358 is a prototype pollution vulnerability in jQuery (before 3.4.0) where mishandling of extend(true, {}, ...) can extend Object.prototype if an unsanitized source object has an enumerable proto property. The Core issue is triggered when a polluted prototype is introduced via nested ob...

CVE-2017-5645

CVE-2017-5645 affects Apache Log4j 2.x prior to 2.8.2. The vulnerability arises when using a TCP/UDP socket server to receive serialized log events from another application; a crafted binary payload can be deserialized to execute arbitrary code. The documented impact is remote code execution via ...

CVE-2020-2940

CVE-2020-2940 affects Oracle Financial Services Profitability Management (UI) in Oracle Financial Services Applications, for versions 8.0.6 and 8.0.7. A low-privilege attacker with network access via HTTP can compromise the product, potentially enabling unauthorized creation, deletion, or modific...

CVE-2018-2679

The CVE-2018-2679 entry concerns Oracle Financial Services Profitability Management’s User Interface in Oracle Financial Services Applications. Affected are versions 6.1.x and 8.0.x. The vulnerability is exploitable by a network-based, low-privilege attacker over HTTP, enabling unauthorized creat...

CVE-2018-2670

CVE-2018-2670 affects Oracle Financial Services Profitability Management (UI subcomponent) in Oracle Financial Services Applications, versions 6.1.x and 8.0.x. The vulnerability allows network-accessible, unauthenticated attackers to access data via HTTP; exploitation rate depends on details in s...