[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fKmSmvLnPPg8v6Zc5qucULqjjE81qJV0uVOcsZ0cQpPk":3,"g5a-family:oracle\u002Fjd_edwards_enterpriseone_orchestrator":133,"g5a-ex:oracle\u002Fjd_edwards_enterpriseone_orchestrator@*":134},{"success":4,"data":5},true,{"product":6,"versions":36,"topVulnerabilitiesByEpss":46,"kevVulnerabilities":105,"seoMetadata":111,"meta":130},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":35},"oracle","jd_edwards_enterpriseone_orchestrator",9,43,1,"2024-07-16",[14,19,21,23,25,27,29,31,33],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},"9.2",6,0,false,{"version":20,"cve_count":17,"kev_count":17,"has_kev":18},"9.2.4.2",{"version":22,"cve_count":17,"kev_count":17,"has_kev":18},"9.2.5.0",{"version":24,"cve_count":17,"kev_count":17,"has_kev":18},"9.2.5.1",{"version":26,"cve_count":11,"kev_count":17,"has_kev":18},"9.2.5.3",{"version":28,"cve_count":11,"kev_count":17,"has_kev":18},"9.2.6.0",{"version":30,"cve_count":17,"kev_count":17,"has_kev":18},"9.2.6.3",{"version":32,"cve_count":17,"kev_count":17,"has_kev":18},"9.2.8.3",{"version":34,"cve_count":17,"kev_count":17,"has_kev":18},"9.2.9.2","Jd Edwards Enterpriseone Orchestrator by Oracle is a technology product with 9 tracked versions and 43 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[37,38,39,40,41,42,43,44,45],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},{"version":20,"cve_count":17,"kev_count":17,"has_kev":18},{"version":22,"cve_count":17,"kev_count":17,"has_kev":18},{"version":24,"cve_count":17,"kev_count":17,"has_kev":18},{"version":26,"cve_count":11,"kev_count":17,"has_kev":18},{"version":28,"cve_count":11,"kev_count":17,"has_kev":18},{"version":30,"cve_count":17,"kev_count":17,"has_kev":18},{"version":32,"cve_count":17,"kev_count":17,"has_kev":18},{"version":34,"cve_count":17,"kev_count":17,"has_kev":18},[47,55,62,69,73,79,85,90,95,100],{"cveId":48,"description":49,"publishedDate":50,"cvssScore":51,"cvssVersion":52,"severity":53,"isKev":4,"epssScore":54},"CVE-2020-11023","In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing \u003Coption> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.","2020-04-29",6.9,"v3.1","Medium",0.84887,{"cveId":56,"description":57,"publishedDate":58,"cvssScore":59,"cvssVersion":52,"severity":60,"isKev":18,"epssScore":61},"CVE-2019-10086","In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all Java objects. We, however were not using this by default characteristic of the PropertyUtilsBean.","2019-08-20",7.3,"High",0.28384,{"cveId":63,"description":64,"publishedDate":65,"cvssScore":66,"cvssVersion":52,"severity":67,"isKev":18,"epssScore":68},"CVE-2020-9548","FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPConfig (aka anteros-core).","2020-03-02",9.8,"Critical",0.18921,{"cveId":70,"description":71,"publishedDate":65,"cvssScore":66,"cvssVersion":52,"severity":67,"isKev":18,"epssScore":72},"CVE-2020-9547","FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.ibatis.sqlmap.engine.transaction.jta.JtaTransactionConfig (aka ibatis-sqlmap).",0.18383,{"cveId":74,"description":75,"publishedDate":76,"cvssScore":77,"cvssVersion":52,"severity":60,"isKev":18,"epssScore":78},"CVE-2020-25649","A flaw was found in FasterXML Jackson Databind, where it did not have entity expansion secured properly. This flaw allows vulnerability to XML external entity (XXE) attacks. The highest threat from this vulnerability is data integrity.","2020-12-03",7.5,0.17714,{"cveId":80,"description":81,"publishedDate":82,"cvssScore":83,"cvssVersion":52,"severity":60,"isKev":18,"epssScore":84},"CVE-2020-36179","FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.commons.dbcp.cpdsadapter.DriverAdapterCPDS.","2021-01-07",8.1,0.17065,{"cveId":86,"description":87,"publishedDate":88,"cvssScore":66,"cvssVersion":52,"severity":67,"isKev":18,"epssScore":89},"CVE-2019-13990","initDocumentParser in xml\u002FXMLSchedulingDataProcessor.java in Terracotta Quartz Scheduler through 2.3.0 allows XXE attacks via a job description.","2019-07-26",0.16628,{"cveId":91,"description":92,"publishedDate":93,"cvssScore":66,"cvssVersion":52,"severity":67,"isKev":18,"epssScore":94},"CVE-2018-14718","FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to execute arbitrary code by leveraging failure to block the slf4j-ext class from polymorphic deserialization.","2019-01-02",0.12679,{"cveId":96,"description":97,"publishedDate":98,"cvssScore":83,"cvssVersion":52,"severity":60,"isKev":18,"epssScore":99},"CVE-2020-35728","FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.oracle.wls.shaded.org.apache.xalan.lib.sql.JNDIConnectionPool (aka embedded Xalan in org.glassfish.web\u002Fjavax.servlet.jsp.jstl).","2020-12-27",0.12504,{"cveId":101,"description":102,"publishedDate":103,"cvssScore":66,"cvssVersion":52,"severity":67,"isKev":18,"epssScore":104},"CVE-2019-17195","Connect2id Nimbus JOSE+JWT before v7.9 can throw various uncaught exceptions while parsing a JWT, which could result in an application crash (potential information disclosure) or a potential authentication bypass.","2019-10-15",0.11121,[106],{"cveId":48,"description":49,"publishedDate":50,"cvssScore":51,"severity":53,"isKev":4,"epssScore":54,"cisaVulnName":107,"cisaDateAdded":108,"cisaShortDescription":109,"cisaRequiredAction":110},"JQuery Cross-Site Scripting (XSS) Vulnerability","2025-01-23","JQuery contains a persistent cross-site scripting (XSS) vulnerability. When passing maliciously formed, untrusted input enclosed in HTML tags, JQuery's DOM manipulators can execute untrusted code in the context of the user's browser.","Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",{"title":112,"metaDescription":113,"keywords":114,"structuredData":115},"Jd Edwards Enterpriseone Orchestrator by Oracle - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Jd Edwards Enterpriseone Orchestrator by Oracle covering 9 versions with 43 tracked vulnerabilities and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Jd Edwards Enterpriseone Orchestrator vulnerabilities, Jd Edwards Enterpriseone Orchestrator security, Jd Edwards Enterpriseone Orchestrator CVE, Oracle Jd Edwards Enterpriseone Orchestrator, Jd Edwards Enterpriseone Orchestrator threat intelligence, Oracle security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Jd Edwards Enterpriseone Orchestrator KEV, Jd Edwards Enterpriseone Orchestrator exploited vulnerabilities",{"@context":116,"@type":117,"name":118,"description":113,"url":119,"manufacturer":120,"applicationCategory":124,"softwareVersion":125,"mainEntity":126},"https:\u002F\u002Fschema.org","SoftwareApplication","Jd Edwards Enterpriseone Orchestrator","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Foracle\u002Fjd_edwards_enterpriseone_orchestrator",{"@type":121,"name":122,"url":123},"Organization","Oracle","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Foracle","Security Software","9 versions tracked",{"@type":127,"name":128,"description":129,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Jd Edwards Enterpriseone Orchestrator Security Vulnerabilities","Security vulnerabilities affecting Jd Edwards Enterpriseone Orchestrator by Oracle",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":131,"apiVersion":132},"2026-10-18T16:31:49.325Z","3.0",[],{"rows":135,"total":11,"capped":18,"failed":17},[136],{"cveId":48,"name":107,"severity":53,"cvss":51,"added":108,"epss":54,"published":137,"ranges":138,"checked":4,"hits":140,"covers":18},"2020-04-29T21:15:11.743",[139],"before 9.2.5.0",[]]