[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fywvb9kJMdGcd8ye6kGXOIkaU6phatIjT27gGYIizKiU":3,"g5a-ex:oracle\u002Ffinancial_services_institutional_performance_analytics@*":111,"g5a-family:oracle\u002Ffinancial_services_institutional_performance_analytics":113},{"success":4,"data":5},true,{"product":6,"versions":27,"topVulnerabilitiesByEpss":32,"kevVulnerabilities":88,"seoMetadata":89,"meta":108},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":26},"oracle","financial_services_institutional_performance_analytics",4,10,0,"2020-04-29",[14,18,21,23],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"8.0.6",9,false,{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},"8.0.7",8,{"version":22,"cve_count":10,"kev_count":11,"has_kev":17},"8.1.0",{"version":24,"cve_count":25,"kev_count":11,"has_kev":17},"8.7.0",2,"Financial Services Institutional Performance Analytics by Oracle is a technology product with 4 tracked versions and 10 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[28,29,30,31],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},{"version":22,"cve_count":10,"kev_count":11,"has_kev":17},{"version":24,"cve_count":25,"kev_count":11,"has_kev":17},[33,40,45,52,59,64,71,75,80,84],{"cveId":34,"description":35,"publishedDate":12,"cvssScore":36,"cvssVersion":37,"severity":38,"isKev":17,"epssScore":39},"CVE-2020-11022","In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.",6.1,"v3.1","Medium",0.99215,{"cveId":41,"description":42,"publishedDate":43,"cvssScore":36,"cvssVersion":37,"severity":38,"isKev":17,"epssScore":44},"CVE-2019-11358","jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.","2019-04-20",0.8682,{"cveId":46,"description":47,"publishedDate":48,"cvssScore":49,"cvssVersion":37,"severity":50,"isKev":17,"epssScore":51},"CVE-2020-9488","Improper validation of certificate with host mismatch in Apache Log4j SMTP appender. This could allow an SMTPS connection to be intercepted by a man-in-the-middle attack which could leak any log messages sent through that appender. Fixed in Apache Log4j 2.12.3 and 2.13.1","2020-04-27",3.7,"Low",0.08216,{"cveId":53,"description":54,"publishedDate":55,"cvssScore":56,"cvssVersion":37,"severity":57,"isKev":17,"epssScore":58},"CVE-2020-10673","FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.caucho.config.types.ResourceRef (aka caucho-quercus).","2020-03-18",8.8,"High",0.08028,{"cveId":60,"description":61,"publishedDate":62,"cvssScore":56,"cvssVersion":37,"severity":57,"isKev":17,"epssScore":63},"CVE-2020-11113","FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.openjpa.ee.WASRegistryManagedRuntime (aka openjpa).","2020-03-31",0.06278,{"cveId":65,"description":66,"publishedDate":67,"cvssScore":68,"cvssVersion":37,"severity":69,"isKev":17,"epssScore":70},"CVE-2020-9546","FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.hadoop.shaded.com.zaxxer.hikari.HikariConfig (aka shaded hikari-config).","2020-03-02",9.8,"Critical",0.04575,{"cveId":72,"description":73,"publishedDate":62,"cvssScore":56,"cvssVersion":37,"severity":57,"isKev":17,"epssScore":74},"CVE-2020-11112","FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.proxy.provider.remoting.RmiProvider (aka apache\u002Fcommons-proxy).",0.03643,{"cveId":76,"description":77,"publishedDate":78,"cvssScore":56,"cvssVersion":37,"severity":57,"isKev":17,"epssScore":79},"CVE-2020-10968","FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.aoju.bus.proxy.provider.remoting.RmiProvider (aka bus-proxy).","2020-03-26",0.03626,{"cveId":81,"description":82,"publishedDate":78,"cvssScore":56,"cvssVersion":37,"severity":57,"isKev":17,"epssScore":83},"CVE-2020-10969","FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to javax.swing.JEditorPane.",0.0356,{"cveId":85,"description":86,"publishedDate":55,"cvssScore":56,"cvssVersion":37,"severity":57,"isKev":17,"epssScore":87},"CVE-2020-10672","FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.aries.transaction.jms.internal.XaPooledConnectionFactory (aka aries.transaction.jms).",0.03059,[],{"title":90,"metaDescription":91,"keywords":92,"structuredData":93},"Financial Services Institutional Performance Analytics by Oracle - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Financial Services Institutional Performance Analytics by Oracle covering 4 versions with 10 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Financial Services Institutional Performance Analytics vulnerabilities, Financial Services Institutional Performance Analytics security, Financial Services Institutional Performance Analytics CVE, Oracle Financial Services Institutional Performance Analytics, Financial Services Institutional Performance Analytics threat intelligence, Oracle security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":94,"@type":95,"name":96,"description":91,"url":97,"manufacturer":98,"applicationCategory":102,"softwareVersion":103,"mainEntity":104},"https:\u002F\u002Fschema.org","SoftwareApplication","Financial Services Institutional Performance Analytics","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Foracle\u002Ffinancial_services_institutional_performance_analytics",{"@type":99,"name":100,"url":101},"Organization","Oracle","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Foracle","Security Software","4 versions tracked",{"@type":105,"name":106,"description":107,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Financial Services Institutional Performance Analytics Security Vulnerabilities","Security vulnerabilities affecting Financial Services Institutional Performance Analytics by Oracle",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":109,"apiVersion":110},"2026-10-17T12:38:05.746Z","3.0",{"rows":112,"total":11,"capped":17,"failed":11},[],[]]