[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fvF2PSvgwbvqUnrHTqVPShrF_2n1Fuuo-yRrZQPxpnZQ":3,"g5a-ex:oracle\u002Fbanking_extensibility_workbench@*":121,"g5a-family:oracle\u002Fbanking_extensibility_workbench":123},{"success":4,"data":5},true,{"product":6,"versions":34,"topVulnerabilitiesByEpss":42,"kevVulnerabilities":98,"seoMetadata":99,"meta":118},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":33},"oracle","banking_extensibility_workbench",7,20,0,"2021-02-15",[14,18,21,23,26,29,31],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"14.2",11,false,{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},"14.2.0",4,{"version":22,"cve_count":16,"kev_count":11,"has_kev":17},"14.3",{"version":24,"cve_count":25,"kev_count":11,"has_kev":17},"14.3.0",9,{"version":27,"cve_count":28,"kev_count":11,"has_kev":17},"14.4.0",5,{"version":30,"cve_count":16,"kev_count":11,"has_kev":17},"14.5",{"version":32,"cve_count":20,"kev_count":11,"has_kev":17},"14.5.0","Banking Extensibility Workbench by Oracle is a technology product with 7 tracked versions and 20 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[35,36,37,38,39,40,41],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},{"version":22,"cve_count":16,"kev_count":11,"has_kev":17},{"version":24,"cve_count":25,"kev_count":11,"has_kev":17},{"version":27,"cve_count":28,"kev_count":11,"has_kev":17},{"version":30,"cve_count":16,"kev_count":11,"has_kev":17},{"version":32,"cve_count":20,"kev_count":11,"has_kev":17},[43,50,56,61,65,70,76,81,87,93],{"cveId":44,"description":45,"publishedDate":12,"cvssScore":46,"cvssVersion":47,"severity":48,"isKev":17,"epssScore":49},"CVE-2021-23337","Lodash versions prior to 4.17.21 are vulnerable to Command Injection via the template function.",7.2,"v3.1","High",0.21333,{"cveId":51,"description":52,"publishedDate":53,"cvssScore":54,"cvssVersion":47,"severity":48,"isKev":17,"epssScore":55},"CVE-2020-35728","FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.oracle.wls.shaded.org.apache.xalan.lib.sql.JNDIConnectionPool (aka embedded Xalan in org.glassfish.web\u002Fjavax.servlet.jsp.jstl).","2020-12-27",8.1,0.12504,{"cveId":57,"description":58,"publishedDate":59,"cvssScore":54,"cvssVersion":47,"severity":48,"isKev":17,"epssScore":60},"CVE-2020-36188","FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.JNDIConnectionSource.","2021-01-06",0.08787,{"cveId":62,"description":63,"publishedDate":59,"cvssScore":54,"cvssVersion":47,"severity":48,"isKev":17,"epssScore":64},"CVE-2020-36184","FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.PerUserPoolDataSource.",0.08356,{"cveId":66,"description":67,"publishedDate":68,"cvssScore":54,"cvssVersion":47,"severity":48,"isKev":17,"epssScore":69},"CVE-2020-8174","napi_get_value_string_*() allows various kinds of memory corruption in node \u003C 10.21.0, 12.18.0, and \u003C 14.4.0.","2020-07-24",0.07646,{"cveId":71,"description":72,"publishedDate":12,"cvssScore":73,"cvssVersion":47,"severity":74,"isKev":17,"epssScore":75},"CVE-2020-28500","Lodash versions prior to 4.17.21 are vulnerable to Regular Expression Denial of Service (ReDoS) via the toNumber, trim and trimEnd functions.",5.3,"Medium",0.07336,{"cveId":77,"description":78,"publishedDate":79,"cvssScore":54,"cvssVersion":47,"severity":48,"isKev":17,"epssScore":80},"CVE-2020-28052","An issue was discovered in Legion of the Bouncy Castle BC Java 1.65 and 1.66. The OpenBSDBCrypt.checkPassword utility method compared incorrect data when checking the password, allowing incorrect passwords to indicate they were matching with previously hashed ones that were different.","2020-12-18",0.07225,{"cveId":82,"description":83,"publishedDate":84,"cvssScore":85,"cvssVersion":47,"severity":48,"isKev":17,"epssScore":86},"CVE-2020-8172","TLS session reuse can lead to host certificate verification bypass in node version \u003C 12.18.0 and \u003C 14.4.0.","2020-06-08",7.4,0.06065,{"cveId":88,"description":89,"publishedDate":90,"cvssScore":91,"cvssVersion":47,"severity":48,"isKev":17,"epssScore":92},"CVE-2020-11080","In nghttp2 before version 1.41.0, the overly large HTTP\u002F2 SETTINGS frame payload causes denial of service. The proof of concept attack involves a malicious client constructing a SETTINGS frame with a length of 14,400 bytes (2400 individual settings entries) over and over again. The attack causes the CPU to spike at 100%. nghttp2 v1.41.0 fixes this vulnerability. There is a workaround to this vulnerability. Implement nghttp2_on_frame_recv_callback callback, and if received frame is SETTINGS frame and the number of settings entries are large (e.g., > 32), then drop the connection.","2020-06-03",7.5,0.05316,{"cveId":94,"description":95,"publishedDate":96,"cvssScore":85,"cvssVersion":47,"severity":48,"isKev":17,"epssScore":97},"CVE-2020-8203","Prototype pollution attack when using _.zipObjectDeep in lodash before 4.17.20.","2020-07-15",0.05213,[],{"title":100,"metaDescription":101,"keywords":102,"structuredData":103},"Banking Extensibility Workbench by Oracle - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Banking Extensibility Workbench by Oracle covering 7 versions with 20 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Banking Extensibility Workbench vulnerabilities, Banking Extensibility Workbench security, Banking Extensibility Workbench CVE, Oracle Banking Extensibility Workbench, Banking Extensibility Workbench threat intelligence, Oracle security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":104,"@type":105,"name":106,"description":101,"url":107,"manufacturer":108,"applicationCategory":112,"softwareVersion":113,"mainEntity":114},"https:\u002F\u002Fschema.org","SoftwareApplication","Banking Extensibility Workbench","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Foracle\u002Fbanking_extensibility_workbench",{"@type":109,"name":110,"url":111},"Organization","Oracle","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Foracle","Security Software","7 versions tracked",{"@type":115,"name":116,"description":117,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Banking Extensibility Workbench Security Vulnerabilities","Security vulnerabilities affecting Banking Extensibility Workbench by Oracle",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":119,"apiVersion":120},"2026-10-17T13:19:42.232Z","3.0",{"rows":122,"total":11,"capped":17,"failed":11},[],[]]