[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fOs1K_XhAICM1evsMi77AqAlWfuA-Q_TXMVz5__UYZ60":3,"g5a-ex:oracle\u002Fbig_data_spatial_and_graph@*":102,"g5a-family:oracle\u002Fbig_data_spatial_and_graph":104},{"success":4,"data":5},true,{"product":6,"versions":21,"topVulnerabilitiesByEpss":24,"kevVulnerabilities":79,"seoMetadata":80,"meta":99},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":20},"oracle","big_data_spatial_and_graph",2,10,0,"2022-03-11",[14,17],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},"2.0",false,{"version":18,"cve_count":19,"kev_count":11,"has_kev":16},"23.1",4,"Big Data Spatial And Graph by Oracle is a technology product with 2 tracked versions and 10 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[22,23],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},{"version":18,"cve_count":19,"kev_count":11,"has_kev":16},[25,33,38,45,51,55,59,64,68,74],{"cveId":26,"description":27,"publishedDate":28,"cvssScore":29,"cvssVersion":30,"severity":31,"isKev":16,"epssScore":32},"CVE-2021-41184","jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the `of` option of the `.position()` util from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. Any string value passed to the `of` option is now treated as a CSS selector. A workaround is to not accept the value of the `of` option from untrusted sources.","2021-10-26",6.5,"v3.1","Medium",0.40768,{"cveId":34,"description":35,"publishedDate":28,"cvssScore":36,"cvssVersion":30,"severity":31,"isKev":16,"epssScore":37},"CVE-2021-41182","jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the `altField` option of the Datepicker widget from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. Any string value passed to the `altField` option is now treated as a CSS selector. A workaround is to not accept the value of the `altField` option from untrusted sources.",6.1,0.39361,{"cveId":39,"description":40,"publishedDate":41,"cvssScore":42,"cvssVersion":30,"severity":43,"isKev":16,"epssScore":44},"CVE-2019-5063","An exploitable heap buffer overflow vulnerability exists in the data structure persistence functionality of OpenCV 4.1.0. A specially crafted XML file can cause a buffer overflow, resulting in multiple heap corruptions and potential code execution. An attacker can provide a specially crafted file to trigger this vulnerability.","2020-01-03",8.8,"High",0.21108,{"cveId":46,"description":47,"publishedDate":48,"cvssScore":49,"cvssVersion":30,"severity":43,"isKev":16,"epssScore":50},"CVE-2021-42340","The fix for bug 63362 present in Apache Tomcat 10.1.0-M1 to 10.1.0-M5, 10.0.0-M1 to 10.0.11, 9.0.40 to 9.0.53 and 8.5.60 to 8.5.71 introduced a memory leak. The object introduced to collect metrics for HTTP upgrade connections was not released for WebSocket connections once the connection was closed. This created a memory leak that, over time, could lead to a denial of service via an OutOfMemoryError.","2021-10-14",7.5,0.11796,{"cveId":52,"description":53,"publishedDate":41,"cvssScore":42,"cvssVersion":30,"severity":43,"isKev":16,"epssScore":54},"CVE-2019-5064","An exploitable heap buffer overflow vulnerability exists in the data structure persistence functionality of OpenCV, before version 4.2.0. A specially crafted JSON file can cause a buffer overflow, resulting in multiple heap corruptions and potentially code execution. An attacker can provide a specially crafted file to trigger this vulnerability.",0.10704,{"cveId":56,"description":57,"publishedDate":28,"cvssScore":36,"cvssVersion":30,"severity":31,"isKev":16,"epssScore":58},"CVE-2021-41183","jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of various `*Text` options of the Datepicker widget from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. The values passed to various `*Text` options are now always treated as pure text, not HTML. A workaround is to not accept the value of the `*Text` options from untrusted sources.",0.08533,{"cveId":60,"description":61,"publishedDate":62,"cvssScore":49,"cvssVersion":30,"severity":43,"isKev":16,"epssScore":63},"CVE-2021-30639","A vulnerability in Apache Tomcat allows an attacker to remotely trigger a denial of service. An error introduced as part of a change to improve error handling during non-blocking I\u002FO meant that the error flag associated with the Request object was not reset between requests. This meant that once a non-blocking I\u002FO error occurred, all future requests handled by that request object would fail. Users were able to trigger non-blocking I\u002FO errors, e.g. by dropping a connection, thereby creating the possibility of triggering a DoS. Applications that do not use non-blocking I\u002FO are not exposed to this vulnerability. This issue affects Apache Tomcat 10.0.3 to 10.0.4; 9.0.44; 8.5.64.","2021-07-12",0.06889,{"cveId":65,"description":66,"publishedDate":12,"cvssScore":49,"cvssVersion":30,"severity":43,"isKev":16,"epssScore":67},"CVE-2020-36518","jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects.",0.0486,{"cveId":69,"description":70,"publishedDate":71,"cvssScore":72,"cvssVersion":30,"severity":43,"isKev":16,"epssScore":73},"CVE-2021-2351","Vulnerability in the Advanced Networking Option component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise Advanced Networking Option. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Advanced Networking Option, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Advanced Networking Option. Note: The July 2021 Critical Patch Update introduces a number of Native Network Encryption changes to deal with vulnerability CVE-2021-2351 and prevent the use of weaker ciphers. Customers should review: \"Changes in Native Network Encryption with the July 2021 Critical Patch Update\" (Doc ID 2791571.1). CVSS 3.1 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H).","2021-07-21",8.3,0.02432,{"cveId":75,"description":76,"publishedDate":77,"cvssScore":36,"cvssVersion":30,"severity":31,"isKev":16,"epssScore":78},"CVE-2019-10219","A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.","2019-11-08",0.02157,[],{"title":81,"metaDescription":82,"keywords":83,"structuredData":84},"Big Data Spatial And Graph by Oracle - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Big Data Spatial And Graph by Oracle covering 2 versions with 10 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Big Data Spatial And Graph vulnerabilities, Big Data Spatial And Graph security, Big Data Spatial And Graph CVE, Oracle Big Data Spatial And Graph, Big Data Spatial And Graph threat intelligence, Oracle security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":85,"@type":86,"name":87,"description":82,"url":88,"manufacturer":89,"applicationCategory":93,"softwareVersion":94,"mainEntity":95},"https:\u002F\u002Fschema.org","SoftwareApplication","Big Data Spatial And Graph","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Foracle\u002Fbig_data_spatial_and_graph",{"@type":90,"name":91,"url":92},"Organization","Oracle","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Foracle","Security Software","2 versions tracked",{"@type":96,"name":97,"description":98,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Big Data Spatial And Graph Security Vulnerabilities","Security vulnerabilities affecting Big Data Spatial And Graph by Oracle",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":100,"apiVersion":101},"2026-10-17T19:26:51.119Z","3.0",{"rows":103,"total":11,"capped":16,"failed":11},[],[]]