[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fwi7LYF_jozCYVEAsyVuW1nAWlUAh5_mK7IOeUadMFEM":3,"g5a-family:oracle\u002Ffinancial_services_behavior_detection_platform":173,"g5a-ex:oracle\u002Ffinancial_services_behavior_detection_platform@*":174},{"success":4,"data":5},true,{"product":6,"versions":60,"topVulnerabilitiesByEpss":81,"kevVulnerabilities":141,"seoMetadata":151,"meta":170},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":59},"oracle","financial_services_behavior_detection_platform",20,11,2,"2023-04-18",[14,19,21,23,25,27,29,31,33,35,37,39,41,44,46,48,51,53,55,57],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},"6.1.1",1,0,false,{"version":20,"cve_count":17,"kev_count":17,"has_kev":18},"8.0.0.0.0",{"version":22,"cve_count":17,"kev_count":17,"has_kev":18},"8.0.1.0.0",{"version":24,"cve_count":11,"kev_count":17,"has_kev":18},"8.0.11",{"version":26,"cve_count":17,"kev_count":17,"has_kev":18},"8.0.2.0.0",{"version":28,"cve_count":17,"kev_count":17,"has_kev":18},"8.0.3.0.0",{"version":30,"cve_count":17,"kev_count":17,"has_kev":18},"8.0.4.0.0",{"version":32,"cve_count":17,"kev_count":17,"has_kev":18},"8.0.5.0.0",{"version":34,"cve_count":17,"kev_count":17,"has_kev":18},"8.0.6.0.0",{"version":36,"cve_count":11,"kev_count":17,"has_kev":18},"8.0.7",{"version":38,"cve_count":11,"kev_count":17,"has_kev":18},"8.0.7.0",{"version":40,"cve_count":16,"kev_count":17,"has_kev":18},"8.0.7.0.0",{"version":42,"cve_count":43,"kev_count":17,"has_kev":18},"8.0.8",3,{"version":45,"cve_count":11,"kev_count":17,"has_kev":18},"8.0.8.0",{"version":47,"cve_count":16,"kev_count":17,"has_kev":18},"8.0.8.1",{"version":49,"cve_count":50,"kev_count":11,"has_kev":4},"8.1.1.0",4,{"version":52,"cve_count":50,"kev_count":11,"has_kev":4},"8.1.1.1",{"version":54,"cve_count":50,"kev_count":11,"has_kev":4},"8.1.2.0",{"version":56,"cve_count":17,"kev_count":17,"has_kev":18},"8.1.2.7",{"version":58,"cve_count":17,"kev_count":17,"has_kev":18},"8.1.2.8","Financial Services Behavior Detection Platform by Oracle is a technology product with 20 tracked versions and 11 known security vulnerabilities including 2 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},{"version":20,"cve_count":17,"kev_count":17,"has_kev":18},{"version":22,"cve_count":17,"kev_count":17,"has_kev":18},{"version":24,"cve_count":11,"kev_count":17,"has_kev":18},{"version":26,"cve_count":17,"kev_count":17,"has_kev":18},{"version":28,"cve_count":17,"kev_count":17,"has_kev":18},{"version":30,"cve_count":17,"kev_count":17,"has_kev":18},{"version":32,"cve_count":17,"kev_count":17,"has_kev":18},{"version":34,"cve_count":17,"kev_count":17,"has_kev":18},{"version":36,"cve_count":11,"kev_count":17,"has_kev":18},{"version":38,"cve_count":11,"kev_count":17,"has_kev":18},{"version":40,"cve_count":16,"kev_count":17,"has_kev":18},{"version":42,"cve_count":43,"kev_count":17,"has_kev":18},{"version":45,"cve_count":11,"kev_count":17,"has_kev":18},{"version":47,"cve_count":16,"kev_count":17,"has_kev":18},{"version":49,"cve_count":50,"kev_count":11,"has_kev":4},{"version":52,"cve_count":50,"kev_count":11,"has_kev":4},{"version":54,"cve_count":50,"kev_count":11,"has_kev":4},{"version":56,"cve_count":17,"kev_count":17,"has_kev":18},{"version":58,"cve_count":17,"kev_count":17,"has_kev":18},[82,90,94,99,106,112,119,124,130,136],{"cveId":83,"description":84,"publishedDate":85,"cvssScore":86,"cvssVersion":87,"severity":88,"isKev":4,"epssScore":89},"CVE-2022-22963","In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is possible for a user to provide a specially crafted SpEL as a routing-expression that may result in remote code execution and access to local resources.","2022-04-01",9.8,"v3.1","Critical",0.99938,{"cveId":91,"description":92,"publishedDate":85,"cvssScore":86,"cvssVersion":87,"severity":88,"isKev":4,"epssScore":93},"CVE-2022-22965","A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific exploit requires the application to run on Tomcat as a WAR deployment. If the application is deployed as a Spring Boot executable jar, i.e. the default, it is not vulnerable to the exploit. However, the nature of the vulnerability is more general, and there may be other ways to exploit it.",0.99638,{"cveId":95,"description":96,"publishedDate":97,"cvssScore":86,"cvssVersion":87,"severity":88,"isKev":18,"epssScore":98},"CVE-2017-5645","In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that, when deserialized, can execute arbitrary code.","2017-04-17",0.89792,{"cveId":100,"description":101,"publishedDate":102,"cvssScore":103,"cvssVersion":87,"severity":104,"isKev":18,"epssScore":105},"CVE-2022-23437","There's a vulnerability within the Apache Xerces Java (XercesJ) XML parser when handling specially crafted XML document payloads. This causes, the XercesJ XML parser to wait in an infinite loop, which may sometimes consume system resources for prolonged duration. This vulnerability is present within XercesJ version 2.12.1 and the previous versions.","2022-01-24",6.5,"Medium",0.11615,{"cveId":107,"description":108,"publishedDate":109,"cvssScore":110,"cvssVersion":87,"severity":104,"isKev":18,"epssScore":111},"CVE-2021-38153","Some components in Apache Kafka use `Arrays.equals` to validate a password or key, which is vulnerable to timing attacks that make brute force attacks for such credentials more likely to be successful. Users should upgrade to 2.8.1 or higher, or 3.0.0 or higher where this vulnerability has been fixed. The affected versions include Apache Kafka 2.0.0, 2.0.1, 2.1.0, 2.1.1, 2.2.0, 2.2.1, 2.2.2, 2.3.0, 2.3.1, 2.4.0, 2.4.1, 2.5.0, 2.5.1, 2.6.0, 2.6.1, 2.6.2, 2.7.0, 2.7.1, and 2.8.0.","2021-09-22",5.9,0.06201,{"cveId":113,"description":114,"publishedDate":115,"cvssScore":116,"cvssVersion":87,"severity":117,"isKev":18,"epssScore":118},"CVE-2020-36518","jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects.","2022-03-11",7.5,"High",0.0486,{"cveId":120,"description":121,"publishedDate":122,"cvssScore":116,"cvssVersion":87,"severity":117,"isKev":18,"epssScore":123},"CVE-2022-24729","CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. CKEditor4 prior to version 4.18.0 contains a vulnerability in the `dialog` plugin. The vulnerability allows abuse of a dialog input validator regular expression, which can cause a significant performance drop resulting in a browser tab freeze. A patch is available in version 4.18.0. There are currently no known workarounds.","2022-03-16",0.02487,{"cveId":125,"description":126,"publishedDate":127,"cvssScore":128,"cvssVersion":87,"severity":117,"isKev":18,"epssScore":129},"CVE-2021-2351","Vulnerability in the Advanced Networking Option component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise Advanced Networking Option. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Advanced Networking Option, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Advanced Networking Option. Note: The July 2021 Critical Patch Update introduces a number of Native Network Encryption changes to deal with vulnerability CVE-2021-2351 and prevent the use of weaker ciphers. Customers should review: \"Changes in Native Network Encryption with the July 2021 Critical Patch Update\" (Doc ID 2791571.1). CVSS 3.1 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H).","2021-07-21",8.3,0.02432,{"cveId":131,"description":132,"publishedDate":133,"cvssScore":134,"cvssVersion":87,"severity":104,"isKev":18,"epssScore":135},"CVE-2019-10219","A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.","2019-11-08",6.1,0.02157,{"cveId":137,"description":138,"publishedDate":122,"cvssScore":139,"cvssVersion":87,"severity":104,"isKev":18,"epssScore":140},"CVE-2022-24728","CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. A vulnerability has been discovered in the core HTML processing module and may affect all plugins used by CKEditor 4 prior to version 4.18.0. The vulnerability allows someone to inject malformed HTML bypassing content sanitization, which could result in executing JavaScript code. This problem has been patched in version 4.18.0. There are currently no known workarounds.",5.4,0.01203,[142,147],{"cveId":83,"description":84,"publishedDate":85,"cvssScore":86,"severity":88,"isKev":4,"epssScore":89,"cisaVulnName":143,"cisaDateAdded":144,"cisaShortDescription":145,"cisaRequiredAction":146},"VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability","2022-08-25","When using routing functionality in VMware Tanzu's Spring Cloud Function, it is possible for a user to provide a specially crafted SpEL as a routing-expression that may result in remote code execution and access to local resources.","Apply updates per vendor instructions.",{"cveId":91,"description":92,"publishedDate":85,"cvssScore":86,"severity":88,"isKev":4,"epssScore":93,"cisaVulnName":148,"cisaDateAdded":149,"cisaShortDescription":150,"cisaRequiredAction":146},"Spring Framework JDK 9+ Remote Code Execution Vulnerability","2022-04-04","Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding.",{"title":152,"metaDescription":153,"keywords":154,"structuredData":155},"Financial Services Behavior Detection Platform by Oracle - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Financial Services Behavior Detection Platform by Oracle covering 20 versions with 11 tracked vulnerabilities including 2 critical and 0 high-severity issues and 2 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Financial Services Behavior Detection Platform vulnerabilities, Financial Services Behavior Detection Platform security, Financial Services Behavior Detection Platform CVE, Oracle Financial Services Behavior Detection Platform, Financial Services Behavior Detection Platform threat intelligence, Oracle security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Financial Services Behavior Detection Platform KEV, Financial Services Behavior Detection Platform exploited vulnerabilities",{"@context":156,"@type":157,"name":158,"description":153,"url":159,"manufacturer":160,"applicationCategory":164,"softwareVersion":165,"mainEntity":166},"https:\u002F\u002Fschema.org","SoftwareApplication","Financial Services Behavior Detection Platform","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Foracle\u002Ffinancial_services_behavior_detection_platform",{"@type":161,"name":162,"url":163},"Organization","Oracle","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Foracle","Security Software","20 versions tracked",{"@type":167,"name":168,"description":169,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Financial Services Behavior Detection Platform Security Vulnerabilities","Security vulnerabilities affecting Financial Services Behavior Detection Platform by Oracle",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":171,"apiVersion":172},"2026-10-17T13:25:21.338Z","3.0",[],{"rows":175,"total":11,"capped":18,"failed":17},[176,180],{"cveId":83,"name":143,"severity":88,"cvss":86,"added":144,"epss":89,"published":177,"ranges":178,"checked":4,"hits":179,"covers":18},"2022-04-01T23:15:13.663",[49,52,54],[],{"cveId":91,"name":148,"severity":88,"cvss":86,"added":149,"epss":93,"published":181,"ranges":182,"checked":4,"hits":183,"covers":18},"2022-04-01T23:15:13.87",[49,52,54],[]]