Oracle Financial Services Profitability Management — known CVE vulnerabilities

Every CVE whose affected-product data names Oracle Financial Services Profitability Management, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (7)

• CVE-2017-5645 — CVSS 9.8 (critical): In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another…
• CVE-2018-2679 — CVSS 8.1 (high): Vulnerability in the Oracle Financial Services Profitability Management component of Oracle Financial Services Applications (subcomponent…
• CVE-2020-2940 — CVSS 7.1 (high): Vulnerability in the Oracle Financial Services Profitability Management product of Oracle Financial Services Applications (component: User…
• CVE-2020-11022 — CVSS 6.9 (medium): In jQuery starting with 1.12.0 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM…
• CVE-2018-2670 — CVSS 6.1 (medium): Vulnerability in the Oracle Financial Services Profitability Management component of Oracle Financial Services Applications (subcomponent…
• CVE-2015-9251 — CVSS 6.1 (medium): jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType…
• CVE-2019-11358 — CVSS 6.1 (medium): jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of…