Oracle Financial Services Balance Sheet Planning vulnerabilities

5 CVEs affecting Oracle Financial Services Balance Sheet Planning, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-11022, published 2020-04-29.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-11022, published 2020-04-29. Medium severity, CVSS 6.1. EPSS: 99.2% chance of exploitation in the next 30 days. In jQuery starting with 1.12.0 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may…
CVE-2019-11358, published 2019-04-20. Medium severity, CVSS 6.1. EPSS: 86.8% chance of exploitation in the next 30 days. jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an…
CVE-2018-2592, published 2018-01-18. High severity, CVSS 8.1. EPSS: 1.5% chance of exploitation in the next 30 days. Vulnerability in the Oracle Financial Services Balance Sheet Planning component of Oracle Financial Services Applications (subcomponent: User Interface). The supported version that is affected is…
CVE-2018-2626, published 2018-01-18. Medium severity, CVSS 6.1. EPSS: 1.1% chance of exploitation in the next 30 days. Vulnerability in the Oracle Financial Services Balance Sheet Planning component of Oracle Financial Services Applications (subcomponent: User Interface). The supported version that is affected is…
CVE-2020-2936, published 2020-04-15. High severity, CVSS 7.1. EPSS: 1.1% chance of exploitation in the next 30 days. Vulnerability in the Oracle Financial Services Balance Sheet Planning product of Oracle Financial Services Applications (component: User Interface). The supported version that is affected is 8.0.8.…