[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fM2AZr5r63WcbrBvS0o8ZZA_BGIJFN3UoPU7VWhOcZtQ":3,"g5a-ex:oracle\u002Fbanking_digital_experience@*":130,"g5a-family:oracle\u002Fbanking_digital_experience":132},{"success":4,"data":5},true,{"product":6,"versions":40,"topVulnerabilitiesByEpss":49,"kevVulnerabilities":107,"seoMetadata":108,"meta":127},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":39},"oracle","banking_digital_experience",8,31,0,"2021-11-17",[14,18,21,24,27,30,33,36],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"17.2",3,false,{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},"18.1",20,{"version":22,"cve_count":23,"kev_count":11,"has_kev":17},"18.2",18,{"version":25,"cve_count":26,"kev_count":11,"has_kev":17},"18.3",21,{"version":28,"cve_count":29,"kev_count":11,"has_kev":17},"19.1",29,{"version":31,"cve_count":32,"kev_count":11,"has_kev":17},"19.2",27,{"version":34,"cve_count":35,"kev_count":11,"has_kev":17},"20.1",30,{"version":37,"cve_count":38,"kev_count":11,"has_kev":17},"21.1",15,"Banking Digital Experience by Oracle is a technology product with 8 tracked versions and 31 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[41,42,43,44,45,46,47,48],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},{"version":22,"cve_count":23,"kev_count":11,"has_kev":17},{"version":25,"cve_count":26,"kev_count":11,"has_kev":17},{"version":28,"cve_count":29,"kev_count":11,"has_kev":17},{"version":31,"cve_count":32,"kev_count":11,"has_kev":17},{"version":34,"cve_count":35,"kev_count":11,"has_kev":17},{"version":37,"cve_count":38,"kev_count":11,"has_kev":17},[50,58,63,69,76,83,89,93,97,101],{"cveId":51,"description":52,"publishedDate":53,"cvssScore":54,"cvssVersion":55,"severity":56,"isKev":17,"epssScore":57},"CVE-2020-11022","In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.","2020-04-29",6.1,"v3.1","Medium",0.99215,{"cveId":59,"description":60,"publishedDate":61,"cvssScore":54,"cvssVersion":55,"severity":56,"isKev":17,"epssScore":62},"CVE-2019-11358","jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.","2019-04-20",0.8682,{"cveId":64,"description":65,"publishedDate":66,"cvssScore":67,"cvssVersion":55,"severity":56,"isKev":17,"epssScore":68},"CVE-2021-28164","In Eclipse Jetty 9.4.37.v20210219 to 9.4.38.v20210224, the default compliance mode allows requests with URIs that contain %2e or %2e%2e segments to access protected resources within the WEB-INF directory. For example a request to \u002Fcontext\u002F%2e\u002FWEB-INF\u002Fweb.xml can retrieve the web.xml file. This can reveal sensitive information regarding the implementation of a web application.","2021-04-01",5.3,0.82371,{"cveId":70,"description":71,"publishedDate":72,"cvssScore":73,"cvssVersion":55,"severity":74,"isKev":17,"epssScore":75},"CVE-2020-9548","FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPConfig (aka anteros-core).","2020-03-02",9.8,"Critical",0.18921,{"cveId":77,"description":78,"publishedDate":79,"cvssScore":80,"cvssVersion":55,"severity":81,"isKev":17,"epssScore":82},"CVE-2020-11987","Apache Batik 1.13 is vulnerable to server-side request forgery, caused by improper input validation by the NodePickerPanel. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server to make arbitrary GET requests.","2021-02-24",8.2,"High",0.1328,{"cveId":84,"description":85,"publishedDate":86,"cvssScore":87,"cvssVersion":55,"severity":81,"isKev":17,"epssScore":88},"CVE-2021-36090","When reading a specially crafted ZIP archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs. This could be used to mount a denial of service attack against services that use Compress' zip package.","2021-07-13",7.5,0.12945,{"cveId":90,"description":91,"publishedDate":86,"cvssScore":87,"cvssVersion":55,"severity":81,"isKev":17,"epssScore":92},"CVE-2021-35516","When reading a specially crafted 7Z archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs. This could be used to mount a denial of service attack against services that use Compress' sevenz package.",0.12365,{"cveId":94,"description":95,"publishedDate":86,"cvssScore":87,"cvssVersion":55,"severity":81,"isKev":17,"epssScore":96},"CVE-2021-35515","When reading a specially crafted 7Z archive, the construction of the list of codecs that decompress an entry can result in an infinite loop. This could be used to mount a denial of service attack against services that use Compress' sevenz package.",0.11567,{"cveId":98,"description":99,"publishedDate":86,"cvssScore":87,"cvssVersion":55,"severity":81,"isKev":17,"epssScore":100},"CVE-2021-35517","When reading a specially crafted TAR archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs. This could be used to mount a denial of service attack against services that use Compress' tar package.",0.10614,{"cveId":102,"description":103,"publishedDate":104,"cvssScore":105,"cvssVersion":55,"severity":56,"isKev":17,"epssScore":106},"CVE-2021-29425","In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like \"\u002F\u002F..\u002Ffoo\", or \"\\\\..\\foo\", the result would be the same value, thus possibly providing access to files in the parent directory, but not further above (thus \"limited\" path traversal), if the calling code would use the result to construct a path value.","2021-04-13",4.8,0.10549,[],{"title":109,"metaDescription":110,"keywords":111,"structuredData":112},"Banking Digital Experience by Oracle - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Banking Digital Experience by Oracle covering 8 versions with 31 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Banking Digital Experience vulnerabilities, Banking Digital Experience security, Banking Digital Experience CVE, Oracle Banking Digital Experience, Banking Digital Experience threat intelligence, Oracle security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":113,"@type":114,"name":115,"description":110,"url":116,"manufacturer":117,"applicationCategory":121,"softwareVersion":122,"mainEntity":123},"https:\u002F\u002Fschema.org","SoftwareApplication","Banking Digital Experience","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Foracle\u002Fbanking_digital_experience",{"@type":118,"name":119,"url":120},"Organization","Oracle","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Foracle","Security Software","8 versions tracked",{"@type":124,"name":125,"description":126,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Banking Digital Experience Security Vulnerabilities","Security vulnerabilities affecting Banking Digital Experience by Oracle",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":128,"apiVersion":129},"2026-10-17T12:37:28.795Z","3.0",{"rows":131,"total":11,"capped":17,"failed":11},[],[]]