Financial Services Behavior Detection Platform vulnerabilities

3 known vulnerabilities in Financial Services Behavior Detection Platform from Oracle. 3 are rated high or critical, and 2 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Spring Framework JDK 9+ Remote Code Execution Exploited

  CVE-2022-22965Apr 1, 2022Spring FrameworkEPSS 99.6%

  A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific exploit requires the application to run on Tomcat as a WAR deployment. If the application is deployed as a Spring Boot

• 9.8 Critical severity

  VMware Tanzu Spring Cloud Function Remote Code Execution Exploited

  CVE-2022-22963Apr 1, 2022Spring Cloud FunctionEPSS 99.9%

  In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is possible for a user to provide a specially crafted SpEL as a routing-expression that may result in remote code execution and access to local r

• 7.5 High severity

  ckeditor4: Inefficient Regular Expression Complexity

  CVE-2022-24729Mar 16, 2022CkeditorEPSS 2.49%

  CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. CKEditor4 prior to version 4.18.0 contains a vulnerability in the `dialog` plugin. The vulnerability allows abuse of a dialog input validator regular expression, which can cause a significan