[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fCQxzpwiF71n0HCswsUToEpqV7qsOx2WhMs_Z02LcdM4":3,"g5a-ex:oracle\u002Fbanking_treasury_management@*":106,"g5a-family:oracle\u002Fbanking_treasury_management":108},{"success":4,"data":5},true,{"product":6,"versions":25,"topVulnerabilitiesByEpss":29,"kevVulnerabilities":83,"seoMetadata":84,"meta":103},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":24},"oracle","banking_treasury_management",3,29,0,"2022-04-19",[14,18,21],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"14.4",6,false,{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},"14.5",13,{"version":22,"cve_count":23,"kev_count":11,"has_kev":17},"4.4",10,"Banking Treasury Management by Oracle is a technology product with 3 tracked versions and 29 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[26,27,28],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},{"version":22,"cve_count":23,"kev_count":11,"has_kev":17},[30,38,45,51,56,61,65,70,74,78],{"cveId":31,"description":32,"publishedDate":33,"cvssScore":34,"cvssVersion":35,"severity":36,"isKev":17,"epssScore":37},"CVE-2021-45105","Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread Context Map data to cause a denial of service when a crafted string is interpreted. This issue was fixed in Log4j 2.17.0, 2.12.3, and 2.3.1.","2021-12-18",5.9,"v3.1","Medium",0.99999,{"cveId":39,"description":40,"publishedDate":41,"cvssScore":42,"cvssVersion":35,"severity":43,"isKev":17,"epssScore":44},"CVE-2020-36179","FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.commons.dbcp.cpdsadapter.DriverAdapterCPDS.","2021-01-07",8.1,"High",0.20929,{"cveId":46,"description":47,"publishedDate":48,"cvssScore":49,"cvssVersion":35,"severity":43,"isKev":17,"epssScore":50},"CVE-2020-25649","A flaw was found in FasterXML Jackson Databind, where it did not have entity expansion secured properly. This flaw allows vulnerability to XML external entity (XXE) attacks. The highest threat from this vulnerability is data integrity.","2020-12-03",7.5,0.17611,{"cveId":52,"description":53,"publishedDate":54,"cvssScore":49,"cvssVersion":35,"severity":43,"isKev":17,"epssScore":55},"CVE-2021-36090","When reading a specially crafted ZIP archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs. This could be used to mount a denial of service attack against services that use Compress' zip package.","2021-07-13",0.13292,{"cveId":57,"description":58,"publishedDate":59,"cvssScore":42,"cvssVersion":35,"severity":43,"isKev":17,"epssScore":60},"CVE-2020-35728","FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.oracle.wls.shaded.org.apache.xalan.lib.sql.JNDIConnectionPool (aka embedded Xalan in org.glassfish.web\u002Fjavax.servlet.jsp.jstl).","2020-12-27",0.12504,{"cveId":62,"description":63,"publishedDate":54,"cvssScore":49,"cvssVersion":35,"severity":43,"isKev":17,"epssScore":64},"CVE-2021-35515","When reading a specially crafted 7Z archive, the construction of the list of codecs that decompress an entry can result in an infinite loop. This could be used to mount a denial of service attack against services that use Compress' sevenz package.",0.11879,{"cveId":66,"description":67,"publishedDate":68,"cvssScore":42,"cvssVersion":35,"severity":43,"isKev":17,"epssScore":69},"CVE-2020-36188","FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.JNDIConnectionSource.","2021-01-06",0.10911,{"cveId":71,"description":72,"publishedDate":54,"cvssScore":49,"cvssVersion":35,"severity":43,"isKev":17,"epssScore":73},"CVE-2021-35517","When reading a specially crafted TAR archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs. This could be used to mount a denial of service attack against services that use Compress' tar package.",0.10901,{"cveId":75,"description":76,"publishedDate":68,"cvssScore":42,"cvssVersion":35,"severity":43,"isKev":17,"epssScore":77},"CVE-2020-36184","FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.PerUserPoolDataSource.",0.10379,{"cveId":79,"description":80,"publishedDate":81,"cvssScore":42,"cvssVersion":35,"severity":43,"isKev":17,"epssScore":82},"CVE-2020-35491","FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.SharedPoolDataSource.","2020-12-17",0.09477,[],{"title":85,"metaDescription":86,"keywords":87,"structuredData":88},"Banking Treasury Management by Oracle - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Banking Treasury Management by Oracle covering 3 versions with 29 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Banking Treasury Management vulnerabilities, Banking Treasury Management security, Banking Treasury Management CVE, Oracle Banking Treasury Management, Banking Treasury Management threat intelligence, Oracle security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":89,"@type":90,"name":91,"description":86,"url":92,"manufacturer":93,"applicationCategory":97,"softwareVersion":98,"mainEntity":99},"https:\u002F\u002Fschema.org","SoftwareApplication","Banking Treasury Management","https:\u002F\u002Fedgeprotect.io\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Foracle\u002Fbanking_treasury_management",{"@type":94,"name":95,"url":96},"Organization","Oracle","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Foracle","Security Software","3 versions tracked",{"@type":100,"name":101,"description":102,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Banking Treasury Management Security Vulnerabilities","Security vulnerabilities affecting Banking Treasury Management by Oracle",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":104,"apiVersion":105},"2026-10-28T15:18:34.057Z","3.0",{"rows":107,"total":11,"capped":17,"failed":11},[],[]]