[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fplKTpQfIVXs7yzU5KkjS7UQYQdxk19j_UP2FIw4ljGk":3,"g5a-family:oracle\u002Ffinancial_services_analytical_applications_infrastructure":329,"g5a-ex:oracle\u002Ffinancial_services_analytical_applications_infrastructure@*":330},{"success":4,"data":5},true,{"product":6,"versions":162,"topVulnerabilitiesByEpss":233,"kevVulnerabilities":293,"seoMetadata":307,"meta":326},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":161},"oracle","financial_services_analytical_applications_infrastructure",70,83,3,"2025-10-21",[14,19,21,23,25,27,30,32,34,36,38,40,42,44,46,48,50,52,55,57,59,61,64,66,68,70,72,74,76,78,80,82,84,86,88,90,92,94,96,98,100,102,104,106,108,110,112,114,116,118,120,122,124,126,128,130,132,134,136,138,140,142,144,146,149,151,153,155,157,159],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},"7.3.3",1,0,false,{"version":20,"cve_count":17,"kev_count":17,"has_kev":18},"7.3.3.0.0",{"version":22,"cve_count":17,"kev_count":17,"has_kev":18},"7.3.3.0.1",{"version":24,"cve_count":17,"kev_count":17,"has_kev":18},"7.3.3.0.2",{"version":26,"cve_count":17,"kev_count":17,"has_kev":18},"7.3.5",{"version":28,"cve_count":29,"kev_count":17,"has_kev":18},"7.3.5.0.0",2,{"version":31,"cve_count":29,"kev_count":17,"has_kev":18},"7.3.5.1.0",{"version":33,"cve_count":29,"kev_count":17,"has_kev":18},"7.3.5.2.0",{"version":35,"cve_count":29,"kev_count":17,"has_kev":18},"7.3.5.3.0",{"version":37,"cve_count":17,"kev_count":17,"has_kev":18},"8.0.0",{"version":39,"cve_count":29,"kev_count":17,"has_kev":18},"8.0.0.0.0",{"version":41,"cve_count":17,"kev_count":17,"has_kev":18},"8.0.0.1.0",{"version":43,"cve_count":17,"kev_count":17,"has_kev":18},"8.0.0.2.0",{"version":45,"cve_count":17,"kev_count":17,"has_kev":18},"8.0.0.3.0",{"version":47,"cve_count":29,"kev_count":17,"has_kev":18},"8.0.1.0.0",{"version":49,"cve_count":17,"kev_count":17,"has_kev":18},"8.0.1.1.0",{"version":51,"cve_count":17,"kev_count":17,"has_kev":18},"8.0.1.2.0",{"version":53,"cve_count":54,"kev_count":17,"has_kev":18},"8.0.2",5,{"version":56,"cve_count":11,"kev_count":17,"has_kev":18},"8.0.2.0.0",{"version":58,"cve_count":17,"kev_count":17,"has_kev":18},"8.0.2.1.0",{"version":60,"cve_count":17,"kev_count":17,"has_kev":18},"8.0.2.2.0",{"version":62,"cve_count":63,"kev_count":17,"has_kev":18},"8.0.3",6,{"version":65,"cve_count":11,"kev_count":17,"has_kev":18},"8.0.3.0.0",{"version":67,"cve_count":17,"kev_count":17,"has_kev":18},"8.0.3.1.0",{"version":69,"cve_count":17,"kev_count":17,"has_kev":18},"8.0.3.2.0",{"version":71,"cve_count":17,"kev_count":17,"has_kev":18},"8.0.3.3.0",{"version":73,"cve_count":54,"kev_count":17,"has_kev":18},"8.0.4",{"version":75,"cve_count":11,"kev_count":17,"has_kev":18},"8.0.4.0.0",{"version":77,"cve_count":17,"kev_count":17,"has_kev":18},"8.0.4.1.0",{"version":79,"cve_count":17,"kev_count":17,"has_kev":18},"8.0.4.2.0",{"version":81,"cve_count":17,"kev_count":17,"has_kev":18},"8.0.4.3.0",{"version":83,"cve_count":17,"kev_count":17,"has_kev":18},"8.0.4.4.0",{"version":85,"cve_count":17,"kev_count":17,"has_kev":18},"8.0.4.5.0",{"version":87,"cve_count":54,"kev_count":17,"has_kev":18},"8.0.5",{"version":89,"cve_count":11,"kev_count":17,"has_kev":18},"8.0.5.0.0",{"version":91,"cve_count":17,"kev_count":17,"has_kev":18},"8.0.5.0.1",{"version":93,"cve_count":17,"kev_count":17,"has_kev":18},"8.0.5.1.0",{"version":95,"cve_count":17,"kev_count":17,"has_kev":18},"8.0.5.2.0",{"version":97,"cve_count":17,"kev_count":17,"has_kev":18},"8.0.5.3.0",{"version":99,"cve_count":17,"kev_count":17,"has_kev":18},"8.0.5.4.0",{"version":101,"cve_count":54,"kev_count":17,"has_kev":18},"8.0.6",{"version":103,"cve_count":16,"kev_count":17,"has_kev":18},"8.0.6.0.0",{"version":105,"cve_count":17,"kev_count":17,"has_kev":18},"8.0.6.0.1",{"version":107,"cve_count":17,"kev_count":17,"has_kev":18},"8.0.6.1.0",{"version":109,"cve_count":17,"kev_count":17,"has_kev":18},"8.0.6.2.0",{"version":111,"cve_count":17,"kev_count":17,"has_kev":18},"8.0.6.3.0",{"version":113,"cve_count":17,"kev_count":17,"has_kev":18},"8.0.6.4.0",{"version":115,"cve_count":63,"kev_count":17,"has_kev":18},"8.0.7",{"version":117,"cve_count":16,"kev_count":17,"has_kev":18},"8.0.7.0.0",{"version":119,"cve_count":17,"kev_count":17,"has_kev":18},"8.0.7.1.0",{"version":121,"cve_count":17,"kev_count":17,"has_kev":18},"8.0.7.2.0",{"version":123,"cve_count":17,"kev_count":17,"has_kev":18},"8.0.7.8",{"version":125,"cve_count":63,"kev_count":17,"has_kev":18},"8.0.7.9.0",{"version":127,"cve_count":16,"kev_count":17,"has_kev":18},"8.0.8",{"version":129,"cve_count":17,"kev_count":17,"has_kev":18},"8.0.8.0.0",{"version":131,"cve_count":17,"kev_count":17,"has_kev":18},"8.0.8.5",{"version":133,"cve_count":17,"kev_count":17,"has_kev":18},"8.0.8.6",{"version":135,"cve_count":63,"kev_count":17,"has_kev":18},"8.0.8.7.0",{"version":137,"cve_count":16,"kev_count":17,"has_kev":18},"8.0.9",{"version":139,"cve_count":17,"kev_count":17,"has_kev":18},"8.0.9.0.0",{"version":141,"cve_count":54,"kev_count":17,"has_kev":18},"8.1.0",{"version":143,"cve_count":17,"kev_count":17,"has_kev":18},"8.1.0.0.0",{"version":145,"cve_count":63,"kev_count":16,"has_kev":4},"8.1.1",{"version":147,"cve_count":148,"kev_count":16,"has_kev":4},"8.1.1.0",4,{"version":150,"cve_count":17,"kev_count":17,"has_kev":18},"8.1.1.4",{"version":152,"cve_count":16,"kev_count":17,"has_kev":18},"8.1.2",{"version":154,"cve_count":54,"kev_count":29,"has_kev":4},"8.1.2.0",{"version":156,"cve_count":11,"kev_count":17,"has_kev":18},"8.1.2.1",{"version":158,"cve_count":17,"kev_count":17,"has_kev":18},"8.1.2.5",{"version":160,"cve_count":63,"kev_count":17,"has_kev":18},"8.1.2.5.0","Financial Services Analytical Applications Infrastructure by Oracle is a technology product with 70 tracked versions and 83 known security vulnerabilities including 3 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},{"version":20,"cve_count":17,"kev_count":17,"has_kev":18},{"version":22,"cve_count":17,"kev_count":17,"has_kev":18},{"version":24,"cve_count":17,"kev_count":17,"has_kev":18},{"version":26,"cve_count":17,"kev_count":17,"has_kev":18},{"version":28,"cve_count":29,"kev_count":17,"has_kev":18},{"version":31,"cve_count":29,"kev_count":17,"has_kev":18},{"version":33,"cve_count":29,"kev_count":17,"has_kev":18},{"version":35,"cve_count":29,"kev_count":17,"has_kev":18},{"version":37,"cve_count":17,"kev_count":17,"has_kev":18},{"version":39,"cve_count":29,"kev_count":17,"has_kev":18},{"version":41,"cve_count":17,"kev_count":17,"has_kev":18},{"version":43,"cve_count":17,"kev_count":17,"has_kev":18},{"version":45,"cve_count":17,"kev_count":17,"has_kev":18},{"version":47,"cve_count":29,"kev_count":17,"has_kev":18},{"version":49,"cve_count":17,"kev_count":17,"has_kev":18},{"version":51,"cve_count":17,"kev_count":17,"has_kev":18},{"version":53,"cve_count":54,"kev_count":17,"has_kev":18},{"version":56,"cve_count":11,"kev_count":17,"has_kev":18},{"version":58,"cve_count":17,"kev_count":17,"has_kev":18},{"version":60,"cve_count":17,"kev_count":17,"has_kev":18},{"version":62,"cve_count":63,"kev_count":17,"has_kev":18},{"version":65,"cve_count":11,"kev_count":17,"has_kev":18},{"version":67,"cve_count":17,"kev_count":17,"has_kev":18},{"version":69,"cve_count":17,"kev_count":17,"has_kev":18},{"version":71,"cve_count":17,"kev_count":17,"has_kev":18},{"version":73,"cve_count":54,"kev_count":17,"has_kev":18},{"version":75,"cve_count":11,"kev_count":17,"has_kev":18},{"version":77,"cve_count":17,"kev_count":17,"has_kev":18},{"version":79,"cve_count":17,"kev_count":17,"has_kev":18},{"version":81,"cve_count":17,"kev_count":17,"has_kev":18},{"version":83,"cve_count":17,"kev_count":17,"has_kev":18},{"version":85,"cve_count":17,"kev_count":17,"has_kev":18},{"version":87,"cve_count":54,"kev_count":17,"has_kev":18},{"version":89,"cve_count":11,"kev_count":17,"has_kev":18},{"version":91,"cve_count":17,"kev_count":17,"has_kev":18},{"version":93,"cve_count":17,"kev_count":17,"has_kev":18},{"version":95,"cve_count":17,"kev_count":17,"has_kev":18},{"version":97,"cve_count":17,"kev_count":17,"has_kev":18},{"version":99,"cve_count":17,"kev_count":17,"has_kev":18},{"version":101,"cve_count":54,"kev_count":17,"has_kev":18},{"version":103,"cve_count":16,"kev_count":17,"has_kev":18},{"version":105,"cve_count":17,"kev_count":17,"has_kev":18},{"version":107,"cve_count":17,"kev_count":17,"has_kev":18},{"version":109,"cve_count":17,"kev_count":17,"has_kev":18},{"version":111,"cve_count":17,"kev_count":17,"has_kev":18},{"version":113,"cve_count":17,"kev_count":17,"has_kev":18},{"version":115,"cve_count":63,"kev_count":17,"has_kev":18},{"version":117,"cve_count":16,"kev_count":17,"has_kev":18},{"version":119,"cve_count":17,"kev_count":17,"has_kev":18},{"version":121,"cve_count":17,"kev_count":17,"has_kev":18},{"version":123,"cve_count":17,"kev_count":17,"has_kev":18},{"version":125,"cve_count":63,"kev_count":17,"has_kev":18},{"version":127,"cve_count":16,"kev_count":17,"has_kev":18},{"version":129,"cve_count":17,"kev_count":17,"has_kev":18},{"version":131,"cve_count":17,"kev_count":17,"has_kev":18},{"version":133,"cve_count":17,"kev_count":17,"has_kev":18},{"version":135,"cve_count":63,"kev_count":17,"has_kev":18},{"version":137,"cve_count":16,"kev_count":17,"has_kev":18},{"version":139,"cve_count":17,"kev_count":17,"has_kev":18},{"version":141,"cve_count":54,"kev_count":17,"has_kev":18},{"version":143,"cve_count":17,"kev_count":17,"has_kev":18},{"version":145,"cve_count":63,"kev_count":16,"has_kev":4},{"version":147,"cve_count":148,"kev_count":16,"has_kev":4},{"version":150,"cve_count":17,"kev_count":17,"has_kev":18},{"version":152,"cve_count":16,"kev_count":17,"has_kev":18},{"version":154,"cve_count":54,"kev_count":29,"has_kev":4},{"version":156,"cve_count":11,"kev_count":17,"has_kev":18},{"version":158,"cve_count":17,"kev_count":17,"has_kev":18},{"version":160,"cve_count":63,"kev_count":17,"has_kev":18},[234,242,249,256,260,266,272,277,282,287],{"cveId":235,"description":236,"publishedDate":237,"cvssScore":238,"cvssVersion":239,"severity":240,"isKev":18,"epssScore":241},"CVE-2021-45105","Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread Context Map data to cause a denial of service when a crafted string is interpreted. This issue was fixed in Log4j 2.17.0, 2.12.3, and 2.3.1.","2021-12-18",5.9,"v3.1","Medium",0.99999,{"cveId":243,"description":244,"publishedDate":245,"cvssScore":246,"cvssVersion":239,"severity":247,"isKev":4,"epssScore":248},"CVE-2017-12617","When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default servlet to false) it was possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.","2017-10-04",8.1,"High",0.99968,{"cveId":250,"description":251,"publishedDate":252,"cvssScore":253,"cvssVersion":239,"severity":254,"isKev":4,"epssScore":255},"CVE-2022-22963","In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is possible for a user to provide a specially crafted SpEL as a routing-expression that may result in remote code execution and access to local resources.","2022-04-01",9.8,"Critical",0.99938,{"cveId":257,"description":258,"publishedDate":252,"cvssScore":253,"cvssVersion":239,"severity":254,"isKev":4,"epssScore":259},"CVE-2022-22965","A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific exploit requires the application to run on Tomcat as a WAR deployment. If the application is deployed as a Spring Boot executable jar, i.e. the default, it is not vulnerable to the exploit. However, the nature of the vulnerability is more general, and there may be other ways to exploit it.",0.99638,{"cveId":261,"description":262,"publishedDate":263,"cvssScore":264,"cvssVersion":239,"severity":240,"isKev":18,"epssScore":265},"CVE-2020-11022","In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.","2020-04-29",6.1,0.99215,{"cveId":267,"description":268,"publishedDate":269,"cvssScore":270,"cvssVersion":239,"severity":247,"isKev":18,"epssScore":271},"CVE-2019-0227","A Server Side Request Forgery (SSRF) vulnerability affected the Apache Axis 1.4 distribution that was last released in 2006. Security and bug commits commits continue in the projects Axis 1.x Subversion repository, legacy users are encouraged to build from source. The successor to Axis 1.x is Axis2, the latest version is 1.7.9 and is not vulnerable to this issue.","2019-05-01",7.5,0.9194,{"cveId":273,"description":274,"publishedDate":275,"cvssScore":253,"cvssVersion":239,"severity":254,"isKev":18,"epssScore":276},"CVE-2017-5645","In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that, when deserialized, can execute arbitrary code.","2017-04-17",0.89792,{"cveId":278,"description":279,"publishedDate":280,"cvssScore":264,"cvssVersion":239,"severity":240,"isKev":18,"epssScore":281},"CVE-2019-11358","jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.","2019-04-20",0.8682,{"cveId":283,"description":284,"publishedDate":285,"cvssScore":253,"cvssVersion":239,"severity":254,"isKev":18,"epssScore":286},"CVE-2017-7525","A deserialization flaw was discovered in the jackson-databind, versions before 2.6.7.1, 2.7.9.1 and 2.8.9, which could allow an unauthenticated user to perform code execution by sending the maliciously crafted input to the readValue method of the ObjectMapper.","2018-02-06",0.37721,{"cveId":288,"description":289,"publishedDate":290,"cvssScore":264,"cvssVersion":291,"severity":240,"isKev":18,"epssScore":292},"CVE-2015-9251","jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text\u002Fjavascript responses to be executed.","2018-01-18","v3.0",0.29726,[294,299,303],{"cveId":250,"description":251,"publishedDate":252,"cvssScore":253,"severity":254,"isKev":4,"epssScore":255,"cisaVulnName":295,"cisaDateAdded":296,"cisaShortDescription":297,"cisaRequiredAction":298},"VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability","2022-08-25","When using routing functionality in VMware Tanzu's Spring Cloud Function, it is possible for a user to provide a specially crafted SpEL as a routing-expression that may result in remote code execution and access to local resources.","Apply updates per vendor instructions.",{"cveId":257,"description":258,"publishedDate":252,"cvssScore":253,"severity":254,"isKev":4,"epssScore":259,"cisaVulnName":300,"cisaDateAdded":301,"cisaShortDescription":302,"cisaRequiredAction":298},"Spring Framework JDK 9+ Remote Code Execution Vulnerability","2022-04-04","Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding.",{"cveId":243,"description":244,"publishedDate":245,"cvssScore":246,"severity":247,"isKev":4,"epssScore":248,"cisaVulnName":304,"cisaDateAdded":305,"cisaShortDescription":306,"cisaRequiredAction":298},"Apache Tomcat Remote Code Execution Vulnerability","2022-03-25","When running Apache Tomcat, it is possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.",{"title":308,"metaDescription":309,"keywords":310,"structuredData":311},"Financial Services Analytical Applications Infrastructure by Oracle - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Financial Services Analytical Applications Infrastructure by Oracle covering 70 versions with 83 tracked vulnerabilities including 2 critical and 1 high-severity issues and 3 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Financial Services Analytical Applications Infrastructure vulnerabilities, Financial Services Analytical Applications Infrastructure security, Financial Services Analytical Applications Infrastructure CVE, Oracle Financial Services Analytical Applications Infrastructure, Financial Services Analytical Applications Infrastructure threat intelligence, Oracle security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Financial Services Analytical Applications Infrastructure KEV, Financial Services Analytical Applications Infrastructure exploited vulnerabilities",{"@context":312,"@type":313,"name":314,"description":309,"url":315,"manufacturer":316,"applicationCategory":320,"softwareVersion":321,"mainEntity":322},"https:\u002F\u002Fschema.org","SoftwareApplication","Financial Services Analytical Applications Infrastructure","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Foracle\u002Ffinancial_services_analytical_applications_infrastructure",{"@type":317,"name":318,"url":319},"Organization","Oracle","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Foracle","Security Software","70 versions tracked",{"@type":323,"name":324,"description":325,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Financial Services Analytical Applications Infrastructure Security Vulnerabilities","Security vulnerabilities affecting Financial Services Analytical Applications Infrastructure by Oracle",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":327,"apiVersion":328},"2026-10-17T13:25:24.236Z","3.0",[],{"rows":331,"total":11,"capped":18,"failed":17},[332,336,340],{"cveId":250,"name":295,"severity":254,"cvss":253,"added":296,"epss":255,"published":333,"ranges":334,"checked":4,"hits":335,"covers":18},"2022-04-01T23:15:13.663",[147,154],[],{"cveId":257,"name":300,"severity":254,"cvss":253,"added":301,"epss":259,"published":337,"ranges":338,"checked":4,"hits":339,"covers":18},"2022-04-01T23:15:13.87",[145,154],[],{"cveId":243,"name":304,"severity":247,"cvss":246,"added":305,"epss":248,"published":341,"ranges":342,"checked":4,"hits":345,"covers":18},"2017-10-04T01:29:02.12",[343,344],"7.3.3.0.0 to 7.3.5.3.0","8.0.0.0.0 to 8.0.9.0.0",[]]