[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$ft6sZnYIOp0OsfqSXzMqBVGEO32gyaxtGdcrscooMzcw":3,"g5a-ex:oracle\u002Fdata_integrator@*":129,"g5a-family:oracle\u002Fdata_integrator":131},{"success":4,"data":5},true,{"product":6,"versions":37,"topVulnerabilitiesByEpss":46,"kevVulnerabilities":106,"seoMetadata":107,"meta":126},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":36},"oracle","data_integrator",8,36,0,"2021-12-18",[14,18,21,24,26,28,30,33],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"11.1.1.7.0",2,false,{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},"11.1.1.9.0",7,{"version":22,"cve_count":23,"kev_count":11,"has_kev":17},"12.1.2.0.0",1,{"version":25,"cve_count":16,"kev_count":11,"has_kev":17},"12.1.3.0.0",{"version":27,"cve_count":16,"kev_count":11,"has_kev":17},"12.2.1.0.0",{"version":29,"cve_count":16,"kev_count":11,"has_kev":17},"12.2.1.1.0",{"version":31,"cve_count":32,"kev_count":11,"has_kev":17},"12.2.1.3.0",21,{"version":34,"cve_count":35,"kev_count":11,"has_kev":17},"12.2.1.4.0",30,"Data Integrator by Oracle is a technology product with 8 tracked versions and 36 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[38,39,40,41,42,43,44,45],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},{"version":22,"cve_count":23,"kev_count":11,"has_kev":17},{"version":25,"cve_count":16,"kev_count":11,"has_kev":17},{"version":27,"cve_count":16,"kev_count":11,"has_kev":17},{"version":29,"cve_count":16,"kev_count":11,"has_kev":17},{"version":31,"cve_count":32,"kev_count":11,"has_kev":17},{"version":34,"cve_count":35,"kev_count":11,"has_kev":17},[47,54,62,69,74,79,84,90,96,101],{"cveId":48,"description":49,"publishedDate":12,"cvssScore":50,"cvssVersion":51,"severity":52,"isKev":17,"epssScore":53},"CVE-2021-45105","Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread Context Map data to cause a denial of service when a crafted string is interpreted. This issue was fixed in Log4j 2.17.0, 2.12.3, and 2.3.1.",5.9,"v3.1","Medium",0.99999,{"cveId":55,"description":56,"publishedDate":57,"cvssScore":58,"cvssVersion":59,"severity":60,"isKev":17,"epssScore":61},"CVE-2018-8013","In Apache Batik 1.x before 1.10, when deserializing subclass of `AbstractDocument`, the class takes a string from the inputStream as the class name which then use it to call the no-arg constructor of the class. Fix was to check the class type before calling newInstance in deserialization.","2018-05-24",9.8,"v3.0","Critical",0.18925,{"cveId":63,"description":64,"publishedDate":65,"cvssScore":66,"cvssVersion":51,"severity":67,"isKev":17,"epssScore":68},"CVE-2020-36179","FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.commons.dbcp.cpdsadapter.DriverAdapterCPDS.","2021-01-07",8.1,"High",0.17065,{"cveId":70,"description":71,"publishedDate":72,"cvssScore":66,"cvssVersion":51,"severity":67,"isKev":17,"epssScore":73},"CVE-2020-35728","FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.oracle.wls.shaded.org.apache.xalan.lib.sql.JNDIConnectionPool (aka embedded Xalan in org.glassfish.web\u002Fjavax.servlet.jsp.jstl).","2020-12-27",0.12504,{"cveId":75,"description":76,"publishedDate":77,"cvssScore":58,"cvssVersion":51,"severity":60,"isKev":17,"epssScore":78},"CVE-2019-17195","Connect2id Nimbus JOSE+JWT before v7.9 can throw various uncaught exceptions while parsing a JWT, which could result in an application crash (potential information disclosure) or a potential authentication bypass.","2019-10-15",0.11121,{"cveId":80,"description":81,"publishedDate":82,"cvssScore":58,"cvssVersion":51,"severity":60,"isKev":17,"epssScore":83},"CVE-2017-5611","SQL injection vulnerability in wp-includes\u002Fclass-wp-query.php in WP_Query in WordPress before 4.7.2 allows remote attackers to execute arbitrary SQL commands by leveraging the presence of an affected plugin or theme that mishandles a crafted post type name.","2017-01-30",0.10202,{"cveId":85,"description":86,"publishedDate":87,"cvssScore":88,"cvssVersion":51,"severity":67,"isKev":17,"epssScore":89},"CVE-2019-17359","The ASN.1 parser in Bouncy Castle Crypto (aka BC Java) 1.63 can trigger a large attempted memory allocation, and resultant OutOfMemoryError error, via crafted ASN.1 data. This is fixed in 1.64.","2019-10-08",7.5,0.0912,{"cveId":91,"description":92,"publishedDate":93,"cvssScore":94,"cvssVersion":51,"severity":52,"isKev":17,"epssScore":95},"CVE-2020-13956","Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in request URIs passed to the library as java.net.URI object and pick the wrong target host for request execution.","2020-12-02",5.3,0.09032,{"cveId":97,"description":98,"publishedDate":99,"cvssScore":66,"cvssVersion":51,"severity":67,"isKev":17,"epssScore":100},"CVE-2020-36188","FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.JNDIConnectionSource.","2021-01-06",0.08787,{"cveId":102,"description":103,"publishedDate":104,"cvssScore":58,"cvssVersion":51,"severity":60,"isKev":17,"epssScore":105},"CVE-2018-7318","SQL Injection exists in the CheckList 1.1.1 component for Joomla! via the title_search, tag_search, name_search, description_search, or filter_order parameter.","2018-02-22",0.08651,[],{"title":108,"metaDescription":109,"keywords":110,"structuredData":111},"Data Integrator by Oracle - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Data Integrator by Oracle covering 8 versions with 36 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Data Integrator vulnerabilities, Data Integrator security, Data Integrator CVE, Oracle Data Integrator, Data Integrator threat intelligence, Oracle security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":112,"@type":113,"name":114,"description":109,"url":115,"manufacturer":116,"applicationCategory":120,"softwareVersion":121,"mainEntity":122},"https:\u002F\u002Fschema.org","SoftwareApplication","Data Integrator","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Foracle\u002Fdata_integrator",{"@type":117,"name":118,"url":119},"Organization","Oracle","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Foracle","Security Software","8 versions tracked",{"@type":123,"name":124,"description":125,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Data Integrator Security Vulnerabilities","Security vulnerabilities affecting Data Integrator by Oracle",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":127,"apiVersion":128},"2026-10-17T12:43:14.779Z","3.0",{"rows":130,"total":11,"capped":17,"failed":11},[],[]]