[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fbvPs7szYlBL1_jVaROnpkLR1Xj56_If6SiyeAipkUn8":3,"g5a-ex:oracle\u002Fclusterware@*":75,"g5a-family:oracle\u002Fclusterware":77},{"success":4,"data":5},true,{"product":6,"versions":18,"topVulnerabilitiesByEpss":20,"kevVulnerabilities":52,"seoMetadata":53,"meta":72},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":17},"oracle","clusterware",1,5,0,"2019-07-23",[14],{"version":15,"cve_count":10,"kev_count":11,"has_kev":16},"12.1.0.2.0",false,"Clusterware by Oracle is a technology product with 1 tracked version and 5 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[19],{"version":15,"cve_count":10,"kev_count":11,"has_kev":16},[21,29,34,39,46],{"cveId":22,"description":23,"publishedDate":24,"cvssScore":25,"cvssVersion":26,"severity":27,"isKev":16,"epssScore":28},"CVE-2018-14719","FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to execute arbitrary code by leveraging failure to block the blaze-ds-opt and blaze-ds-core classes from polymorphic deserialization.","2019-01-02",9.8,"v3.1","Critical",0.09682,{"cveId":30,"description":31,"publishedDate":32,"cvssScore":25,"cvssVersion":26,"severity":27,"isKev":16,"epssScore":33},"CVE-2017-15095","A deserialization flaw was discovered in the jackson-databind in versions before 2.8.10 and 2.9.1, which could allow an unauthenticated user to perform code execution by sending the maliciously crafted input to the readValue method of the ObjectMapper. This issue extends the previous flaw CVE-2017-7525 by blacklisting more classes that could be used maliciously.","2018-02-06",0.08357,{"cveId":35,"description":36,"publishedDate":37,"cvssScore":25,"cvssVersion":26,"severity":27,"isKev":16,"epssScore":38},"CVE-2018-11307","An issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.5. Use of Jackson default typing along with a gadget class from iBatis allows exfiltration of content. Fixed in 2.7.9.4, 2.8.11.2, and 2.9.6.","2019-07-09",0.0573,{"cveId":40,"description":41,"publishedDate":42,"cvssScore":43,"cvssVersion":26,"severity":44,"isKev":16,"epssScore":45},"CVE-2018-1000873","Fasterxml Jackson version Before 2.9.8 contains a CWE-20: Improper Input Validation vulnerability in Jackson-Modules-Java8 that can result in Causes a denial-of-service (DoS). This attack appear to be exploitable via The victim deserializes malicious input, specifically very large values in the nanoseconds field of a time value. This vulnerability appears to have been fixed in 2.9.8.","2018-12-20",6.5,"Medium",0.04758,{"cveId":47,"description":48,"publishedDate":12,"cvssScore":49,"cvssVersion":50,"severity":44,"isKev":16,"epssScore":51},"CVE-2019-2860","Vulnerability in the Oracle Clusterware component of Oracle Support Tools (subcomponent: Trace File Analyzer (TFA) Collector). The supported version that is affected is 12.1.0.2.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Clusterware. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Clusterware accessible data as well as unauthorized read access to a subset of Oracle Clusterware accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Clusterware. CVSS 3.0 Base Score 5.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:L).",5.6,"v3.0",0.01008,[],{"title":54,"metaDescription":55,"keywords":56,"structuredData":57},"Clusterware by Oracle - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Clusterware by Oracle covering 1 version with 5 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Clusterware vulnerabilities, Clusterware security, Clusterware CVE, Oracle Clusterware, Clusterware threat intelligence, Oracle security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":58,"@type":59,"name":60,"description":55,"url":61,"manufacturer":62,"applicationCategory":66,"softwareVersion":67,"mainEntity":68},"https:\u002F\u002Fschema.org","SoftwareApplication","Clusterware","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Foracle\u002Fclusterware",{"@type":63,"name":64,"url":65},"Organization","Oracle","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Foracle","Security Software","1 versions tracked",{"@type":69,"name":70,"description":71,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Clusterware Security Vulnerabilities","Security vulnerabilities affecting Clusterware by Oracle",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":73,"apiVersion":74},"2026-10-19T00:53:27.301Z","3.0",{"rows":76,"total":11,"capped":16,"failed":11},[],[]]