BD
Product
Banking Digital Experience
31
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 19Medium 8Low 1
Watch
Add Banking Digital Experience to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-11022 | 6.1 | Apr 29 | In jQuery starting with 1.12.0 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e Affected: 18.1; 18.2; 18.3; 19.1; 19.2; 20.1; +1 more |
| CVE-2019-10219 | 6.1 | Nov 8 | A vulnerability was found in Hibernate-Validator Affected: 17.2; 18.1; 18.3; 19.1; 19.2; 20.1; +1 more |
| CVE-2019-11358 | 6.1 | Apr 20 | jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution Affected: 18.1; 18.2; 18.3; 19.1; 19.2; 20.1 |
| CVE-2021-41165 | 5.4 | Nov 17 | CKEditor4 is an open source WYSIWYG HTML editor Affected: 18.1 through 18.3; 19.1; 19.2; 20.1; 21.1 |
| CVE-2021-41164 | 5.4 | Nov 17 | CKEditor4 is an open source WYSIWYG HTML editor Affected: 18.1 through 18.3; 19.1; 19.2; 20.1; 21.1 |
| CVE-2019-3019 | 5.4 | Oct 16 | Vulnerability in the Oracle Banking Digital Experience product of Oracle Financial Services Applications (component: Loan Calculator) Affected: 18.1; 18.2; 18.3; 19.1 |
| CVE-2021-28164 | 5.3 | Apr 1 | In Eclipse Jetty 9.4.37.v20210219 to 9.4.38.v20210224, the default compliance mode allows requests with URIs that contain %2e or %2e%2e segments to access protected resources… Affected: 20.1; 21.1 |
| CVE-2021-29425 | 4.8 | Apr 13 | Possible limited path traversal vulnerabily in Apache Commons IO Affected: 17.2; 18.1; 18.3; 19.1; 19.2; 20.1; +1 more |
Showing 8