[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fCQxzpwiF71n0HCswsUToEpqV7qsOx2WhMs_Z02LcdM4":3,"g5a-ex:oracle\u002Fbanking_treasury_management@*":106,"g5a-family:oracle\u002Fbanking_treasury_management":108},{"success":4,"data":5},true,{"product":6,"versions":25,"topVulnerabilitiesByEpss":29,"kevVulnerabilities":83,"seoMetadata":84,"meta":103},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":24},"oracle","banking_treasury_management",3,29,0,"2022-04-19",[14,18,21],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"14.4",6,false,{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},"14.5",13,{"version":22,"cve_count":23,"kev_count":11,"has_kev":17},"4.4",10,"Banking Treasury Management by Oracle is a technology product with 3 tracked versions and 29 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[26,27,28],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},{"version":22,"cve_count":23,"kev_count":11,"has_kev":17},[30,38,45,51,56,61,65,69,74,78],{"cveId":31,"description":32,"publishedDate":33,"cvssScore":34,"cvssVersion":35,"severity":36,"isKev":17,"epssScore":37},"CVE-2021-45105","Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread Context Map data to cause a denial of service when a crafted string is interpreted. This issue was fixed in Log4j 2.17.0, 2.12.3, and 2.3.1.","2021-12-18",5.9,"v3.1","Medium",0.99999,{"cveId":39,"description":40,"publishedDate":41,"cvssScore":42,"cvssVersion":35,"severity":43,"isKev":17,"epssScore":44},"CVE-2020-25649","A flaw was found in FasterXML Jackson Databind, where it did not have entity expansion secured properly. This flaw allows vulnerability to XML external entity (XXE) attacks. The highest threat from this vulnerability is data integrity.","2020-12-03",7.5,"High",0.17714,{"cveId":46,"description":47,"publishedDate":48,"cvssScore":49,"cvssVersion":35,"severity":43,"isKev":17,"epssScore":50},"CVE-2020-36179","FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.commons.dbcp.cpdsadapter.DriverAdapterCPDS.","2021-01-07",8.1,0.17065,{"cveId":52,"description":53,"publishedDate":54,"cvssScore":42,"cvssVersion":35,"severity":43,"isKev":17,"epssScore":55},"CVE-2021-36090","When reading a specially crafted ZIP archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs. This could be used to mount a denial of service attack against services that use Compress' zip package.","2021-07-13",0.12945,{"cveId":57,"description":58,"publishedDate":59,"cvssScore":49,"cvssVersion":35,"severity":43,"isKev":17,"epssScore":60},"CVE-2020-35728","FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.oracle.wls.shaded.org.apache.xalan.lib.sql.JNDIConnectionPool (aka embedded Xalan in org.glassfish.web\u002Fjavax.servlet.jsp.jstl).","2020-12-27",0.12504,{"cveId":62,"description":63,"publishedDate":54,"cvssScore":42,"cvssVersion":35,"severity":43,"isKev":17,"epssScore":64},"CVE-2021-35515","When reading a specially crafted 7Z archive, the construction of the list of codecs that decompress an entry can result in an infinite loop. This could be used to mount a denial of service attack against services that use Compress' sevenz package.",0.11567,{"cveId":66,"description":67,"publishedDate":54,"cvssScore":42,"cvssVersion":35,"severity":43,"isKev":17,"epssScore":68},"CVE-2021-35517","When reading a specially crafted TAR archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs. This could be used to mount a denial of service attack against services that use Compress' tar package.",0.10614,{"cveId":70,"description":71,"publishedDate":72,"cvssScore":49,"cvssVersion":35,"severity":43,"isKev":17,"epssScore":73},"CVE-2020-36188","FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.JNDIConnectionSource.","2021-01-06",0.08787,{"cveId":75,"description":76,"publishedDate":72,"cvssScore":49,"cvssVersion":35,"severity":43,"isKev":17,"epssScore":77},"CVE-2020-36184","FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.PerUserPoolDataSource.",0.08356,{"cveId":79,"description":80,"publishedDate":81,"cvssScore":42,"cvssVersion":35,"severity":43,"isKev":17,"epssScore":82},"CVE-2020-11979","As mitigation for CVE-2020-1945 Apache Ant 1.10.8 changed the permissions of temporary files it created so that only the current user was allowed to access them. Unfortunately the fixcrlf task deleted the temporary file and created a new one without said protection, effectively nullifying the effort. This would still allow an attacker to inject modified source files into the build process.","2020-10-01",0.08016,[],{"title":85,"metaDescription":86,"keywords":87,"structuredData":88},"Banking Treasury Management by Oracle - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Banking Treasury Management by Oracle covering 3 versions with 29 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Banking Treasury Management vulnerabilities, Banking Treasury Management security, Banking Treasury Management CVE, Oracle Banking Treasury Management, Banking Treasury Management threat intelligence, Oracle security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":89,"@type":90,"name":91,"description":86,"url":92,"manufacturer":93,"applicationCategory":97,"softwareVersion":98,"mainEntity":99},"https:\u002F\u002Fschema.org","SoftwareApplication","Banking Treasury Management","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Foracle\u002Fbanking_treasury_management",{"@type":94,"name":95,"url":96},"Organization","Oracle","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Foracle","Security Software","3 versions tracked",{"@type":100,"name":101,"description":102,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Banking Treasury Management Security Vulnerabilities","Security vulnerabilities affecting Banking Treasury Management by Oracle",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":104,"apiVersion":105},"2026-10-17T19:17:30.838Z","3.0",{"rows":107,"total":11,"capped":17,"failed":11},[],[]]