[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fdtzOS6MpdU3Ap9mvkEU9Z2bhhxINTwLaLDvINpHzTtU":3,"g5a-ex:oracle\u002Fenterprise_manager_for_virtualization@*":100,"g5a-family:oracle\u002Fenterprise_manager_for_virtualization":102},{"success":4,"data":5},true,{"product":6,"versions":27,"topVulnerabilitiesByEpss":32,"kevVulnerabilities":77,"seoMetadata":78,"meta":97},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":26},"oracle","enterprise_manager_for_virtualization",4,8,0,"2019-08-20",[14,18,20,23],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"13.2.2",7,false,{"version":19,"cve_count":16,"kev_count":11,"has_kev":17},"13.2.3",{"version":21,"cve_count":22,"kev_count":11,"has_kev":17},"13.3.1",6,{"version":24,"cve_count":25,"kev_count":11,"has_kev":17},"13.4.0.0",1,"Enterprise Manager For Virtualization by Oracle is a technology product with 4 tracked versions and 8 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[28,29,30,31],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":16,"kev_count":11,"has_kev":17},{"version":21,"cve_count":22,"kev_count":11,"has_kev":17},{"version":24,"cve_count":25,"kev_count":11,"has_kev":17},[33,41,47,52,58,62,66,70],{"cveId":34,"description":35,"publishedDate":36,"cvssScore":37,"cvssVersion":38,"severity":39,"isKev":17,"epssScore":40},"CVE-2017-7525","A deserialization flaw was discovered in the jackson-databind, versions before 2.6.7.1, 2.7.9.1 and 2.8.9, which could allow an unauthenticated user to perform code execution by sending the maliciously crafted input to the readValue method of the ObjectMapper.","2018-02-06",9.8,"v3.1","Critical",0.37721,{"cveId":42,"description":43,"publishedDate":12,"cvssScore":44,"cvssVersion":38,"severity":45,"isKev":17,"epssScore":46},"CVE-2019-10086","In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all Java objects. We, however were not using this by default characteristic of the PropertyUtilsBean.",7.3,"High",0.28384,{"cveId":48,"description":49,"publishedDate":50,"cvssScore":37,"cvssVersion":38,"severity":39,"isKev":17,"epssScore":51},"CVE-2018-14718","FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to execute arbitrary code by leveraging failure to block the slf4j-ext class from polymorphic deserialization.","2019-01-02",0.12679,{"cveId":53,"description":54,"publishedDate":50,"cvssScore":55,"cvssVersion":56,"severity":39,"isKev":17,"epssScore":57},"CVE-2018-14721","FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to conduct server-side request forgery (SSRF) attacks by leveraging failure to block the axis2-jaxws class from polymorphic deserialization.",10,"v3.0",0.10458,{"cveId":59,"description":60,"publishedDate":50,"cvssScore":37,"cvssVersion":38,"severity":39,"isKev":17,"epssScore":61},"CVE-2018-14719","FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to execute arbitrary code by leveraging failure to block the blaze-ds-opt and blaze-ds-core classes from polymorphic deserialization.",0.09682,{"cveId":63,"description":64,"publishedDate":36,"cvssScore":37,"cvssVersion":38,"severity":39,"isKev":17,"epssScore":65},"CVE-2017-15095","A deserialization flaw was discovered in the jackson-databind in versions before 2.8.10 and 2.9.1, which could allow an unauthenticated user to perform code execution by sending the maliciously crafted input to the readValue method of the ObjectMapper. This issue extends the previous flaw CVE-2017-7525 by blacklisting more classes that could be used maliciously.",0.08357,{"cveId":67,"description":68,"publishedDate":50,"cvssScore":37,"cvssVersion":56,"severity":39,"isKev":17,"epssScore":69},"CVE-2018-14720","FasterXML jackson-databind 2.x before 2.9.7 might allow attackers to conduct external XML entity (XXE) attacks by leveraging failure to block unspecified JDK classes from polymorphic deserialization.",0.07524,{"cveId":71,"description":72,"publishedDate":73,"cvssScore":74,"cvssVersion":56,"severity":75,"isKev":17,"epssScore":76},"CVE-2017-15707","In Apache Struts 2.5 to 2.5.14, the REST Plugin is using an outdated JSON-lib library which is vulnerable and allow perform a DoS attack using malicious request with specially crafted JSON payload.","2017-12-01",6.2,"Medium",0.04889,[],{"title":79,"metaDescription":80,"keywords":81,"structuredData":82},"Enterprise Manager For Virtualization by Oracle - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Enterprise Manager For Virtualization by Oracle covering 4 versions with 8 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Enterprise Manager For Virtualization vulnerabilities, Enterprise Manager For Virtualization security, Enterprise Manager For Virtualization CVE, Oracle Enterprise Manager For Virtualization, Enterprise Manager For Virtualization threat intelligence, Oracle security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":83,"@type":84,"name":85,"description":80,"url":86,"manufacturer":87,"applicationCategory":91,"softwareVersion":92,"mainEntity":93},"https:\u002F\u002Fschema.org","SoftwareApplication","Enterprise Manager For Virtualization","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Foracle\u002Fenterprise_manager_for_virtualization",{"@type":88,"name":89,"url":90},"Organization","Oracle","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Foracle","Security Software","4 versions tracked",{"@type":94,"name":95,"description":96,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Enterprise Manager For Virtualization Security Vulnerabilities","Security vulnerabilities affecting Enterprise Manager For Virtualization by Oracle",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":98,"apiVersion":99},"2026-10-17T14:43:23.867Z","3.0",{"rows":101,"total":11,"capped":17,"failed":11},[],[]]