FS
Product
Financial Services Market Risk Measurement And Management
11
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 2Medium 6Low 1
Watch
Add Financial Services Market Risk Measurement And Management to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-0230 | 9.8 | Sep 14 | Apache Struts 2.0.0 to 2.5.20 forced double OGNL evaluation, when evaluated on raw user input in tag attributes, may lead to remote code execution Affected: 8.0.6 |
| CVE-2017-15708 | 9.8 | Dec 11 | In Apache Synapse, by default no authentication is required for Java Remote Method Invocation (RMI) Affected: 8.0.6; 8.0.8 |
| CVE-2018-2727 | 8.1 | Jan 18 | Vulnerability in the Oracle Financial Services Market Risk Measurement and Management component of Oracle Financial Services Applications (subcomponent: User Interface) Affected: 8.0.5 |
| CVE-2019-0233 | 7.5 | Sep 14 | An access permission override in Apache Struts 2.0.0 to 2.5.20 may cause a Denial of Service when performing a file upload Affected: 8.0.6 |
| CVE-2017-15707 | 6.2 | Dec 1 | In Apache Struts 2.5 to 2.5.14, the REST Plugin is using an outdated JSON-lib library which is vulnerable and allow perform a DoS attack using malicious request with specially… Affected: 8.0.5 |
| CVE-2020-11022 | 6.1 | Apr 29 | In jQuery starting with 1.12.0 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e Affected: 8.0.6; 8.0.8; 8.0.6; 8.0.8 |
| CVE-2019-11358 | 6.1 | Apr 20 | jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution Affected: 8.0.5; 8.0.6; 8.0.8 |
| CVE-2015-9251 | 6.1 | Jan 18 | jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript… Affected: 8.0.5; 8.0.6 |
| CVE-2018-2716 | 6.1 | Jan 18 | Vulnerability in the Oracle Financial Services Market Risk Measurement and Management component of Oracle Financial Services Applications (subcomponent: User Interface) Affected: 8.0.5 |
| CVE-2019-12415 | 5.5 | Oct 23 | In Apache POI up to 4.1.0, when using the tool XSSFExportToXml to convert user-provided Microsoft Excel documents, a specially crafted document can allow an attacker to read files… Affected: 8.0.6; 8.0.8 |
| CVE-2020-9488 | 3.7 | Apr 27 | Improper validation of certificate with host mismatch in Apache Log4j SMTP appender Affected: 8.0.6; 8.0.8; 8.1.0 |
Showing 11