[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fu1y9O1d2GBYrFa_GHqKBPumIPklpnG7Y51oYCBkV0Ic":3,"g5a-family:oracle\u002Ffinancial_services_crime_and_compliance_management_studio":108,"g5a-ex:oracle\u002Ffinancial_services_crime_and_compliance_management_studio@*":109},{"success":4,"data":5},true,{"product":6,"versions":19,"topVulnerabilitiesByEpss":22,"kevVulnerabilities":80,"seoMetadata":86,"meta":105},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":18},"oracle","financial_services_crime_and_compliance_management_studio",2,22,1,"2022-05-19",[14,16],{"version":15,"cve_count":10,"kev_count":11,"has_kev":4},"8.0.8.2.0",{"version":17,"cve_count":10,"kev_count":11,"has_kev":4},"8.0.8.3.0","Financial Services Crime And Compliance Management Studio by Oracle is a technology product with 2 tracked versions and 22 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[20,21],{"version":15,"cve_count":10,"kev_count":11,"has_kev":4},{"version":17,"cve_count":10,"kev_count":11,"has_kev":4},[23,32,39,44,51,57,61,65,70,76],{"cveId":24,"description":25,"publishedDate":26,"cvssScore":27,"cvssVersion":28,"severity":29,"isKev":30,"epssScore":31},"CVE-2021-34429","For Eclipse Jetty versions 9.4.37-9.4.42, 10.0.1-10.0.5 & 11.0.1-11.0.5, URIs can be crafted using some encoded characters to access the content of the WEB-INF directory and\u002For bypass some security constraints. This is a variation of the vulnerability reported in CVE-2021-28164\u002FGHSA-v7ff-8wcx-gmc5.","2021-07-15",5.3,"v3.1","Medium",false,0.99298,{"cveId":33,"description":34,"publishedDate":35,"cvssScore":36,"cvssVersion":28,"severity":37,"isKev":4,"epssScore":38},"CVE-2018-1273","Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a property binder vulnerability caused by improper neutralization of special elements. An unauthenticated remote malicious user (or attacker) can supply specially crafted request parameters against Spring Data REST backed HTTP resources or using Spring Data's projection-based request payload binding hat can lead to a remote code execution attack.","2018-04-11",9.8,"Critical",0.96956,{"cveId":40,"description":41,"publishedDate":42,"cvssScore":36,"cvssVersion":28,"severity":37,"isKev":30,"epssScore":43},"CVE-2021-41303","Apache Shiro before 1.8.0, when using Apache Shiro with Spring Boot, a specially crafted HTTP request may cause an authentication bypass. Users should update to Apache Shiro 1.8.0.","2021-09-17",0.7613,{"cveId":45,"description":46,"publishedDate":47,"cvssScore":48,"cvssVersion":28,"severity":49,"isKev":30,"epssScore":50},"CVE-2021-23337","Lodash versions prior to 4.17.21 are vulnerable to Command Injection via the template function.","2021-02-15",7.2,"High",0.21333,{"cveId":52,"description":53,"publishedDate":54,"cvssScore":55,"cvssVersion":28,"severity":49,"isKev":30,"epssScore":56},"CVE-2021-36090","When reading a specially crafted ZIP archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs. This could be used to mount a denial of service attack against services that use Compress' zip package.","2021-07-13",7.5,0.12945,{"cveId":58,"description":59,"publishedDate":54,"cvssScore":55,"cvssVersion":28,"severity":49,"isKev":30,"epssScore":60},"CVE-2021-35516","When reading a specially crafted 7Z archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs. This could be used to mount a denial of service attack against services that use Compress' sevenz package.",0.12365,{"cveId":62,"description":63,"publishedDate":12,"cvssScore":36,"cvssVersion":28,"severity":37,"isKev":30,"epssScore":64},"CVE-2022-22978","In spring security versions prior to 5.4.11+, 5.5.7+ , 5.6.4+ and older unsupported versions, RegexRequestMatcher can easily be misconfigured to be bypassed on some servlet containers. Applications using RegexRequestMatcher with `.` in the regular expression are possibly vulnerable to an authorization bypass.",0.12351,{"cveId":66,"description":67,"publishedDate":68,"cvssScore":55,"cvssVersion":28,"severity":49,"isKev":30,"epssScore":69},"CVE-2022-25647","The package com.google.code.gson:gson before 2.8.9 are vulnerable to Deserialization of Untrusted Data via the writeReplace() method in internal classes, which may lead to DoS attacks.","2022-05-01",0.1223,{"cveId":71,"description":72,"publishedDate":73,"cvssScore":74,"cvssVersion":28,"severity":29,"isKev":30,"epssScore":75},"CVE-2022-23437","There's a vulnerability within the Apache Xerces Java (XercesJ) XML parser when handling specially crafted XML document payloads. This causes, the XercesJ XML parser to wait in an infinite loop, which may sometimes consume system resources for prolonged duration. This vulnerability is present within XercesJ version 2.12.1 and the previous versions.","2022-01-24",6.5,0.11615,{"cveId":77,"description":78,"publishedDate":54,"cvssScore":55,"cvssVersion":28,"severity":49,"isKev":30,"epssScore":79},"CVE-2021-35515","When reading a specially crafted 7Z archive, the construction of the list of codecs that decompress an entry can result in an infinite loop. This could be used to mount a denial of service attack against services that use Compress' sevenz package.",0.11567,[81],{"cveId":33,"description":34,"publishedDate":35,"cvssScore":36,"severity":37,"isKev":4,"epssScore":38,"cisaVulnName":82,"cisaDateAdded":83,"cisaShortDescription":84,"cisaRequiredAction":85},"VMware Tanzu Spring Data Commons Property Binder Vulnerability","2022-03-25","Spring Data Commons contains a property binder vulnerability which can allow an attacker to perform remote code execution.","Apply updates per vendor instructions.",{"title":87,"metaDescription":88,"keywords":89,"structuredData":90},"Financial Services Crime And Compliance Management Studio by Oracle - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Financial Services Crime And Compliance Management Studio by Oracle covering 2 versions with 22 tracked vulnerabilities including 1 critical and 0 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Financial Services Crime And Compliance Management Studio vulnerabilities, Financial Services Crime And Compliance Management Studio security, Financial Services Crime And Compliance Management Studio CVE, Oracle Financial Services Crime And Compliance Management Studio, Financial Services Crime And Compliance Management Studio threat intelligence, Oracle security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Financial Services Crime And Compliance Management Studio KEV, Financial Services Crime And Compliance Management Studio exploited vulnerabilities",{"@context":91,"@type":92,"name":93,"description":88,"url":94,"manufacturer":95,"applicationCategory":99,"softwareVersion":100,"mainEntity":101},"https:\u002F\u002Fschema.org","SoftwareApplication","Financial Services Crime And Compliance Management Studio","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Foracle\u002Ffinancial_services_crime_and_compliance_management_studio",{"@type":96,"name":97,"url":98},"Organization","Oracle","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Foracle","Security Software","2 versions tracked",{"@type":102,"name":103,"description":104,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Financial Services Crime And Compliance Management Studio Security Vulnerabilities","Security vulnerabilities affecting Financial Services Crime And Compliance Management Studio by Oracle",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":106,"apiVersion":107},"2026-10-17T19:32:57.249Z","3.0",[],{"rows":110,"total":11,"capped":30,"failed":115},[111],{"cveId":33,"name":82,"severity":37,"cvss":36,"added":83,"epss":38,"published":112,"ranges":113,"checked":4,"hits":114,"covers":30},"2018-04-11T13:29:00.29",[15,17],[],0]