[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$frvPWcTAbVxuGpeGmVteTVDHMQkNLBF3IKFOd8McFU7M":3,"g5a-family:oracle\u002Fbanking_enterprise_collections":82,"g5a-ex:oracle\u002Fbanking_enterprise_collections@*":83},{"success":4,"data":5},true,{"product":6,"versions":23,"topVulnerabilitiesByEpss":27,"kevVulnerabilities":54,"seoMetadata":60,"meta":79},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":22},"oracle","banking_enterprise_collections",3,4,1,"2020-05-14",[14,18,20],{"version":15,"cve_count":11,"kev_count":16,"has_kev":17},"2.7.0",0,false,{"version":19,"cve_count":11,"kev_count":16,"has_kev":17},"2.8.0",{"version":21,"cve_count":16,"kev_count":16,"has_kev":17},"2.9.0","Banking Enterprise Collections by Oracle is a technology product with 3 tracked versions and 4 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[24,25,26],{"version":15,"cve_count":11,"kev_count":16,"has_kev":17},{"version":19,"cve_count":11,"kev_count":16,"has_kev":17},{"version":21,"cve_count":16,"kev_count":16,"has_kev":17},[28,36,42,49],{"cveId":29,"description":30,"publishedDate":31,"cvssScore":32,"cvssVersion":33,"severity":34,"isKev":17,"epssScore":35},"CVE-2019-11358","jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.","2019-04-20",6.1,"v3.1","Medium",0.8682,{"cveId":37,"description":38,"publishedDate":39,"cvssScore":40,"cvssVersion":33,"severity":34,"isKev":4,"epssScore":41},"CVE-2020-11023","In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing \u003Coption> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.","2020-04-29",6.9,0.84887,{"cveId":43,"description":44,"publishedDate":45,"cvssScore":46,"cvssVersion":33,"severity":47,"isKev":17,"epssScore":48},"CVE-2019-2904","Vulnerability in the Oracle JDeveloper and ADF product of Oracle Fusion Middleware (component: ADF Faces). Supported versions that are affected are 11.1.1.9.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle JDeveloper and ADF. Successful attacks of this vulnerability can result in takeover of Oracle JDeveloper and ADF. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H).","2019-10-16",9.8,"Critical",0.14264,{"cveId":50,"description":51,"publishedDate":12,"cvssScore":52,"cvssVersion":33,"severity":34,"isKev":17,"epssScore":53},"CVE-2020-1945","Apache Ant 1.1 to 1.9.14 and 1.10.0 to 1.10.7 uses the default temporary directory identified by the Java system property java.io.tmpdir for several tasks and may thus leak sensitive information. The fixcrlf and replaceregexp tasks also copy files from the temporary directory back into the build tree allowing an attacker to inject modified source files into the build process.",6.3,0.01769,[55],{"cveId":37,"description":38,"publishedDate":39,"cvssScore":40,"severity":34,"isKev":4,"epssScore":41,"cisaVulnName":56,"cisaDateAdded":57,"cisaShortDescription":58,"cisaRequiredAction":59},"JQuery Cross-Site Scripting (XSS) Vulnerability","2025-01-23","JQuery contains a persistent cross-site scripting (XSS) vulnerability. When passing maliciously formed, untrusted input enclosed in HTML tags, JQuery's DOM manipulators can execute untrusted code in the context of the user's browser.","Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",{"title":61,"metaDescription":62,"keywords":63,"structuredData":64},"Banking Enterprise Collections by Oracle - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Banking Enterprise Collections by Oracle covering 3 versions with 4 tracked vulnerabilities and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Banking Enterprise Collections vulnerabilities, Banking Enterprise Collections security, Banking Enterprise Collections CVE, Oracle Banking Enterprise Collections, Banking Enterprise Collections threat intelligence, Oracle security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Banking Enterprise Collections KEV, Banking Enterprise Collections exploited vulnerabilities",{"@context":65,"@type":66,"name":67,"description":62,"url":68,"manufacturer":69,"applicationCategory":73,"softwareVersion":74,"mainEntity":75},"https:\u002F\u002Fschema.org","SoftwareApplication","Banking Enterprise Collections","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Foracle\u002Fbanking_enterprise_collections",{"@type":70,"name":71,"url":72},"Organization","Oracle","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Foracle","Security Software","3 versions tracked",{"@type":76,"name":77,"description":78,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Banking Enterprise Collections Security Vulnerabilities","Security vulnerabilities affecting Banking Enterprise Collections by Oracle",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":80,"apiVersion":81},"2026-10-19T01:14:18.241Z","3.0",[],{"rows":84,"total":11,"capped":17,"failed":16},[85],{"cveId":37,"name":56,"severity":34,"cvss":40,"added":57,"epss":41,"published":86,"ranges":87,"checked":4,"hits":89,"covers":17},"2020-04-29T21:15:11.743",[88],"2.7.0 to 2.8.0",[]]