[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fdvC6LK81IGZrk3UMUTMvtZAdc7kgidacGmtwxdBrz8o":3,"g5a-ex:oracle\u002Fblockchain_platform@*":106,"g5a-family:oracle\u002Fblockchain_platform":114},{"success":4,"data":5},true,{"product":6,"versions":17,"topVulnerabilitiesByEpss":19,"kevVulnerabilities":78,"seoMetadata":84,"meta":103},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":9,"lastCveUpdate":11,"versions":12,"description":16},"oracle","blockchain_platform",1,40,"2021-07-21",[13],{"version":14,"cve_count":15,"kev_count":9,"has_kev":4},"21.1.2",2,"Blockchain Platform by Oracle is a technology product with 1 tracked version and 40 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[18],{"version":14,"cve_count":15,"kev_count":9,"has_kev":4},[20,29,36,41,46,52,58,63,67,73],{"cveId":21,"description":22,"publishedDate":23,"cvssScore":24,"cvssVersion":25,"severity":26,"isKev":27,"epssScore":28},"CVE-2020-11022","In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.","2020-04-29",6.1,"v3.1","Medium",false,0.99215,{"cveId":30,"description":31,"publishedDate":32,"cvssScore":33,"cvssVersion":25,"severity":34,"isKev":27,"epssScore":35},"CVE-2020-13935","The payload length in a WebSocket frame was not correctly validated in Apache Tomcat 10.0.0-M1 to 10.0.0-M6, 9.0.0.M1 to 9.0.36, 8.5.0 to 8.5.56 and 7.0.27 to 7.0.104. Invalid payload lengths could trigger an infinite loop. Multiple requests with invalid payload lengths could lead to a denial of service.","2020-07-14",7.5,"High",0.86608,{"cveId":37,"description":38,"publishedDate":23,"cvssScore":39,"cvssVersion":25,"severity":26,"isKev":4,"epssScore":40},"CVE-2020-11023","In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing \u003Coption> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.",6.9,0.84887,{"cveId":42,"description":43,"publishedDate":44,"cvssScore":33,"cvssVersion":25,"severity":34,"isKev":27,"epssScore":45},"CVE-2020-8277","A Node.js application that allows an attacker to trigger a DNS request for a host of their choice could trigger a Denial of Service in versions \u003C 15.2.1, \u003C 14.15.1, and \u003C 12.19.1 by getting the application to resolve a DNS record with a larger number of responses. This is fixed in 15.2.1, 14.15.1, and 12.19.1.","2020-11-19",0.54164,{"cveId":47,"description":48,"publishedDate":49,"cvssScore":50,"cvssVersion":25,"severity":34,"isKev":27,"epssScore":51},"CVE-2021-23017","A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.","2021-06-01",7.7,0.53461,{"cveId":53,"description":54,"publishedDate":55,"cvssScore":56,"cvssVersion":25,"severity":34,"isKev":27,"epssScore":57},"CVE-2019-10086","In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all Java objects. We, however were not using this by default characteristic of the PropertyUtilsBean.","2019-08-20",7.3,0.28384,{"cveId":59,"description":60,"publishedDate":61,"cvssScore":33,"cvssVersion":25,"severity":34,"isKev":27,"epssScore":62},"CVE-2020-17527","While investigating bug 64830 it was discovered that Apache Tomcat 10.0.0-M1 to 10.0.0-M9, 9.0.0-M1 to 9.0.39 and 8.5.0 to 8.5.59 could re-use an HTTP request header value from the previous stream received on an HTTP\u002F2 connection for the request associated with the subsequent stream. While this would most likely lead to an error and the closure of the HTTP\u002F2 connection, it is possible that information could leak between requests.","2020-12-03",0.24622,{"cveId":64,"description":65,"publishedDate":61,"cvssScore":33,"cvssVersion":25,"severity":34,"isKev":27,"epssScore":66},"CVE-2020-25649","A flaw was found in FasterXML Jackson Databind, where it did not have entity expansion secured properly. This flaw allows vulnerability to XML external entity (XXE) attacks. The highest threat from this vulnerability is data integrity.",0.17714,{"cveId":68,"description":69,"publishedDate":70,"cvssScore":71,"cvssVersion":25,"severity":34,"isKev":27,"epssScore":72},"CVE-2020-36179","FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.commons.dbcp.cpdsadapter.DriverAdapterCPDS.","2021-01-07",8.1,0.17065,{"cveId":74,"description":75,"publishedDate":76,"cvssScore":71,"cvssVersion":25,"severity":34,"isKev":27,"epssScore":77},"CVE-2020-35728","FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.oracle.wls.shaded.org.apache.xalan.lib.sql.JNDIConnectionPool (aka embedded Xalan in org.glassfish.web\u002Fjavax.servlet.jsp.jstl).","2020-12-27",0.12504,[79],{"cveId":37,"description":38,"publishedDate":23,"cvssScore":39,"severity":26,"isKev":4,"epssScore":40,"cisaVulnName":80,"cisaDateAdded":81,"cisaShortDescription":82,"cisaRequiredAction":83},"JQuery Cross-Site Scripting (XSS) Vulnerability","2025-01-23","JQuery contains a persistent cross-site scripting (XSS) vulnerability. When passing maliciously formed, untrusted input enclosed in HTML tags, JQuery's DOM manipulators can execute untrusted code in the context of the user's browser.","Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",{"title":85,"metaDescription":86,"keywords":87,"structuredData":88},"Blockchain Platform by Oracle - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Blockchain Platform by Oracle covering 1 version with 40 tracked vulnerabilities and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Blockchain Platform vulnerabilities, Blockchain Platform security, Blockchain Platform CVE, Oracle Blockchain Platform, Blockchain Platform threat intelligence, Oracle security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Blockchain Platform KEV, Blockchain Platform exploited vulnerabilities",{"@context":89,"@type":90,"name":91,"description":86,"url":92,"manufacturer":93,"applicationCategory":97,"softwareVersion":98,"mainEntity":99},"https:\u002F\u002Fschema.org","SoftwareApplication","Blockchain Platform","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Foracle\u002Fblockchain_platform",{"@type":94,"name":95,"url":96},"Organization","Oracle","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Foracle","Security Software","1 versions tracked",{"@type":100,"name":101,"description":102,"vulnerabilityCount":10,"dateModified":11},"SecurityVulnerability","Blockchain Platform Security Vulnerabilities","Security vulnerabilities affecting Blockchain Platform by Oracle",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":9,"lastUpdated":11,"generatedAt":104,"apiVersion":105},"2026-10-17T20:15:09.329Z","3.0",{"rows":107,"total":9,"capped":27,"failed":113},[108],{"cveId":37,"name":80,"severity":26,"cvss":39,"added":81,"epss":40,"published":109,"ranges":110,"checked":4,"hits":112,"covers":27},"2020-04-29T21:15:11.743",[111,14],"before 21.1.2",[],0,[]]