CVE
CVE-2019-11358
- First Reported
- Oct 21, 2026
- Latest Reported
- Oct 21, 2026
CVE Enrichment
- CVSS
- 6.1 MEDIUM
- EPSS
- 86.82%
- EPSS Percentile
- 99.75%
- CISA KEV
- Not listed
Description
jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.
Technical Details
- CVSS Version
- 3.1
- CNA / NVD Source
- [email protected]
- Published
- 20-Apr-2019 07:29
- Last Modified
- 17-Jun-2026 09:12
- EPSS Date
- 2026-10-20
- CWE
- CWE-1321
CVSS Vector
CVSS:3.1 AV:N /
AC:L /
PR:N /
UI:R /
S:C /
C:L /
I:L /
A:N
Affected Products / Versions
- jquery / jquery
Version / affected range: * · before (exclusive) 3.4.0
cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:* - debian / debian_linux
Version / affected range: 8.0
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:* - debian / debian_linux
Version / affected range: 9.0
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* - debian / debian_linux
Version / affected range: 10.0
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* - drupal / drupal
Version / affected range: * · from (inclusive) 7.0 · before (exclusive) 7.66
cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:* - drupal / drupal
Version / affected range: * · from (inclusive) 8.5.0 · before (exclusive) 8.5.15
cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:* - drupal / drupal
Version / affected range: * · from (inclusive) 8.6.0 · before (exclusive) 8.6.15
cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:* - backdropcms / backdrop
Version / affected range: * · from (inclusive) 1.11.0 · before (exclusive) 1.11.9
cpe:2.3:a:backdropcms:backdrop:*:*:*:*:*:*:*:* - backdropcms / backdrop
Version / affected range: * · from (inclusive) 1.12.0 · before (exclusive) 1.12.6
cpe:2.3:a:backdropcms:backdrop:*:*:*:*:*:*:*:* - fedoraproject / fedora
Version / affected range: 28
cpe:2.3:o:fedoraproject:fedora:28:*:*:*:*:*:*:* - fedoraproject / fedora
Version / affected range: 29
cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:* - fedoraproject / fedora
Version / affected range: 30
cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:* - opensuse / backports_sle
Version / affected range: 15.0
cpe:2.3:a:opensuse:backports_sle:15.0:sp1:*:*:*:*:*:* - opensuse / leap
Version / affected range: 15.1
cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:* - netapp / oncommand_system_manager
Version / affected range: * · from (inclusive) 3.0 · through (inclusive) 3.1.3
cpe:2.3:a:netapp:oncommand_system_manager:*:*:*:*:*:*:*:* - netapp / snapcenter
Version / affected range: -
cpe:2.3:a:netapp:snapcenter:-:*:*:*:*:*:*:* - redhat / cloudforms
Version / affected range: 4.7
cpe:2.3:a:redhat:cloudforms:4.7:*:*:*:*:*:*:* - redhat / virtualization_manager
Version / affected range: 4.3
cpe:2.3:a:redhat:virtualization_manager:4.3:*:*:*:*:*:*:* - oracle / agile_product_lifecycle_management_for_process
Version / affected range: 6.1
cpe:2.3:a:oracle:agile_product_lifecycle_management_for_process:6.1:*:*:*:*:*:*:* - oracle / agile_product_lifecycle_management_for_process
Version / affected range: 6.2.0.0
cpe:2.3:a:oracle:agile_product_lifecycle_management_for_process:6.2.0.0:*:*:*:*:*:*:* - oracle / agile_product_lifecycle_management_for_process
Version / affected range: 6.2.1.0
cpe:2.3:a:oracle:agile_product_lifecycle_management_for_process:6.2.1.0:*:*:*:*:*:*:* - oracle / agile_product_lifecycle_management_for_process
Version / affected range: 6.2.2.0
cpe:2.3:a:oracle:agile_product_lifecycle_management_for_process:6.2.2.0:*:*:*:*:*:*:* - oracle / agile_product_lifecycle_management_for_process
Version / affected range: 6.2.3.0
cpe:2.3:a:oracle:agile_product_lifecycle_management_for_process:6.2.3.0:*:*:*:*:*:*:* - oracle / application_express
Version / affected range: * · before (exclusive) 19.1
cpe:2.3:a:oracle:application_express:*:*:*:*:*:*:*:* - oracle / application_service_level_management
Version / affected range: 13.2.0.0
cpe:2.3:a:oracle:application_service_level_management:13.2.0.0:*:*:*:*:*:*:* - oracle / application_service_level_management
Version / affected range: 13.3.0.0
cpe:2.3:a:oracle:application_service_level_management:13.3.0.0:*:*:*:*:*:*:* - oracle / application_testing_suite
Version / affected range: 12.5.0.3
cpe:2.3:a:oracle:application_testing_suite:12.5.0.3:*:*:*:*:*:*:* - oracle / application_testing_suite
Version / affected range: 13.1.0.1
cpe:2.3:a:oracle:application_testing_suite:13.1.0.1:*:*:*:*:*:*:* - oracle / application_testing_suite
Version / affected range: 13.2
cpe:2.3:a:oracle:application_testing_suite:13.2:*:*:*:*:*:*:* - oracle / application_testing_suite
Version / affected range: 13.2.0.1
cpe:2.3:a:oracle:application_testing_suite:13.2.0.1:*:*:*:*:*:*:* - oracle / application_testing_suite
Version / affected range: 13.3
cpe:2.3:a:oracle:application_testing_suite:13.3:*:*:*:*:*:*:* - oracle / application_testing_suite
Version / affected range: 13.3.0.1
cpe:2.3:a:oracle:application_testing_suite:13.3.0.1:*:*:*:*:*:*:* - oracle / banking_digital_experience
Version / affected range: 18.1
cpe:2.3:a:oracle:banking_digital_experience:18.1:*:*:*:*:*:*:* - oracle / banking_digital_experience
Version / affected range: 18.2
cpe:2.3:a:oracle:banking_digital_experience:18.2:*:*:*:*:*:*:* - oracle / banking_digital_experience
Version / affected range: 18.3
cpe:2.3:a:oracle:banking_digital_experience:18.3:*:*:*:*:*:*:* - oracle / banking_digital_experience
Version / affected range: 19.1
cpe:2.3:a:oracle:banking_digital_experience:19.1:*:*:*:*:*:*:* - oracle / banking_digital_experience
Version / affected range: 19.2
cpe:2.3:a:oracle:banking_digital_experience:19.2:*:*:*:*:*:*:* - oracle / banking_digital_experience
Version / affected range: 20.1
cpe:2.3:a:oracle:banking_digital_experience:20.1:*:*:*:*:*:*:* - oracle / banking_enterprise_collections
Version / affected range: * · from (inclusive) 2.7.0 · through (inclusive) 2.8.0
cpe:2.3:a:oracle:banking_enterprise_collections:*:*:*:*:*:*:*:* - oracle / banking_platform
Version / affected range: * · from (inclusive) 2.4.0 · through (inclusive) 2.10.0
cpe:2.3:a:oracle:banking_platform:*:*:*:*:*:*:*:* - oracle / bi_publisher
Version / affected range: 5.5.0.0.0
cpe:2.3:a:oracle:bi_publisher:5.5.0.0.0:*:*:*:*:*:*:* - oracle / bi_publisher
Version / affected range: 12.2.1.3.0
cpe:2.3:a:oracle:bi_publisher:12.2.1.3.0:*:*:*:*:*:*:* - oracle / bi_publisher
Version / affected range: 12.2.1.4.0
cpe:2.3:a:oracle:bi_publisher:12.2.1.4.0:*:*:*:*:*:*:* - oracle / big_data_discovery
Version / affected range: 1.6
cpe:2.3:a:oracle:big_data_discovery:1.6:*:*:*:*:*:*:* - oracle / business_process_management_suite
Version / affected range: 12.2.1.3.0
cpe:2.3:a:oracle:business_process_management_suite:12.2.1.3.0:*:*:*:*:*:*:* - oracle / business_process_management_suite
Version / affected range: 12.2.1.4.0
cpe:2.3:a:oracle:business_process_management_suite:12.2.1.4.0:*:*:*:*:*:*:* - oracle / communications_analytics
Version / affected range: 12.1.1
cpe:2.3:a:oracle:communications_analytics:12.1.1:*:*:*:*:*:*:* - oracle / communications_application_session_controller
Version / affected range: 3.8m0
cpe:2.3:a:oracle:communications_application_session_controller:3.8m0:*:*:*:*:*:*:* - oracle / communications_billing_and_revenue_management
Version / affected range: 7.5
cpe:2.3:a:oracle:communications_billing_and_revenue_management:7.5:*:*:*:*:*:*:* - oracle / communications_billing_and_revenue_management
Version / affected range: 7.5.0.23.0
cpe:2.3:a:oracle:communications_billing_and_revenue_management:7.5.0.23.0:*:*:*:*:*:*:* - oracle / communications_billing_and_revenue_management
Version / affected range: 12.0
cpe:2.3:a:oracle:communications_billing_and_revenue_management:12.0:*:*:*:*:*:*:* - oracle / communications_billing_and_revenue_management
Version / affected range: 12.0.0.3.0
cpe:2.3:a:oracle:communications_billing_and_revenue_management:12.0.0.3.0:*:*:*:*:*:*:* - oracle / communications_diameter_signaling_router
Version / affected range: 8.0.0
cpe:2.3:a:oracle:communications_diameter_signaling_router:8.0.0:*:*:*:*:*:*:* - oracle / communications_diameter_signaling_router
Version / affected range: 8.1
cpe:2.3:a:oracle:communications_diameter_signaling_router:8.1:*:*:*:*:*:*:* - oracle / communications_diameter_signaling_router
Version / affected range: 8.2
cpe:2.3:a:oracle:communications_diameter_signaling_router:8.2:*:*:*:*:*:*:* - oracle / communications_diameter_signaling_router
Version / affected range: 8.2.1
cpe:2.3:a:oracle:communications_diameter_signaling_router:8.2.1:*:*:*:*:*:*:* - oracle / communications_eagle_application_processor
Version / affected range: * · from (inclusive) 16.1.0 · through (inclusive) 16.4.0
cpe:2.3:a:oracle:communications_eagle_application_processor:*:*:*:*:*:*:*:* - oracle / communications_element_manager
Version / affected range: 8.1.1
cpe:2.3:a:oracle:communications_element_manager:8.1.1:*:*:*:*:*:*:* - oracle / communications_element_manager
Version / affected range: 8.2.0
cpe:2.3:a:oracle:communications_element_manager:8.2.0:*:*:*:*:*:*:* - oracle / communications_element_manager
Version / affected range: 8.2.1
cpe:2.3:a:oracle:communications_element_manager:8.2.1:*:*:*:*:*:*:* - oracle / communications_interactive_session_recorder
Version / affected range: * · from (inclusive) 6.0 · through (inclusive) 6.4
cpe:2.3:a:oracle:communications_interactive_session_recorder:*:*:*:*:*:*:*:* - oracle / communications_operations_monitor
Version / affected range: * · from (inclusive) 4.1 · through (inclusive) 4.3
cpe:2.3:a:oracle:communications_operations_monitor:*:*:*:*:*:*:*:* - oracle / communications_operations_monitor
Version / affected range: 3.4
cpe:2.3:a:oracle:communications_operations_monitor:3.4:*:*:*:*:*:*:* - oracle / communications_operations_monitor
Version / affected range: 4.0
cpe:2.3:a:oracle:communications_operations_monitor:4.0:*:*:*:*:*:*:* - oracle / communications_operations_monitor
Version / affected range: 4.1.0
cpe:2.3:a:oracle:communications_operations_monitor:4.1.0:*:*:*:*:*:*:* - oracle / communications_services_gatekeeper
Version / affected range: 7.0
cpe:2.3:a:oracle:communications_services_gatekeeper:7.0:*:*:*:*:*:*:* - oracle / communications_session_report_manager
Version / affected range: 8.1.1
cpe:2.3:a:oracle:communications_session_report_manager:8.1.1:*:*:*:*:*:*:* - oracle / communications_session_report_manager
Version / affected range: 8.2.0
cpe:2.3:a:oracle:communications_session_report_manager:8.2.0:*:*:*:*:*:*:* - oracle / communications_session_report_manager
Version / affected range: 8.2.1
cpe:2.3:a:oracle:communications_session_report_manager:8.2.1:*:*:*:*:*:*:* - oracle / communications_session_route_manager
Version / affected range: 8.1.1
cpe:2.3:a:oracle:communications_session_route_manager:8.1.1:*:*:*:*:*:*:* - oracle / communications_session_route_manager
Version / affected range: 8.2.0
cpe:2.3:a:oracle:communications_session_route_manager:8.2.0:*:*:*:*:*:*:* - oracle / communications_session_route_manager
Version / affected range: 8.2.1
cpe:2.3:a:oracle:communications_session_route_manager:8.2.1:*:*:*:*:*:*:* - oracle / communications_unified_inventory_management
Version / affected range: 7.3
cpe:2.3:a:oracle:communications_unified_inventory_management:7.3:*:*:*:*:*:*:* - oracle / communications_unified_inventory_management
Version / affected range: 7.4.0
cpe:2.3:a:oracle:communications_unified_inventory_management:7.4.0:*:*:*:*:*:*:* - oracle / communications_webrtc_session_controller
Version / affected range: 7.2
cpe:2.3:a:oracle:communications_webrtc_session_controller:7.2:*:*:*:*:*:*:* - oracle / diagnostic_assistant
Version / affected range: 2.12.36
cpe:2.3:a:oracle:diagnostic_assistant:2.12.36:*:*:*:*:*:*:* - oracle / enterprise_manager_ops_center
Version / affected range: 12.3.3
cpe:2.3:a:oracle:enterprise_manager_ops_center:12.3.3:*:*:*:*:*:*:* - oracle / enterprise_manager_ops_center
Version / affected range: 12.4.0
cpe:2.3:a:oracle:enterprise_manager_ops_center:12.4.0:*:*:*:*:*:*:* - oracle / enterprise_manager_ops_center
Version / affected range: 12.4.0.0
cpe:2.3:a:oracle:enterprise_manager_ops_center:12.4.0.0:*:*:*:*:*:*:* - oracle / enterprise_session_border_controller
Version / affected range: 8.4
cpe:2.3:a:oracle:enterprise_session_border_controller:8.4:*:*:*:*:*:*:* - oracle / financial_services_analytical_applications_infrastructure
Version / affected range: * · from (inclusive) 7.3.3 · through (inclusive) 7.3.5
cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:*:*:*:*:*:*:*:* - oracle / financial_services_analytical_applications_infrastructure
Version / affected range: * · from (inclusive) 8.0.2 · through (inclusive) 8.1.0
cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:*:*:*:*:*:*:*:* - oracle / financial_services_analytical_applications_reconciliation_framework
Version / affected range: * · from (inclusive) 8.0.4 · through (inclusive) 8.0.7
cpe:2.3:a:oracle:financial_services_analytical_applications_reconciliation_framework:*:*:*:*:*:*:*:* - oracle / financial_services_analytical_applications_reconciliation_framework
Version / affected range: 8.1.0
cpe:2.3:a:oracle:financial_services_analytical_applications_reconciliation_framework:8.1.0:*:*:*:*:*:*:* - oracle / financial_services_asset_liability_management
Version / affected range: * · from (inclusive) 8.0.4 · through (inclusive) 8.0.7
cpe:2.3:a:oracle:financial_services_asset_liability_management:*:*:*:*:*:*:*:* - oracle / financial_services_asset_liability_management
Version / affected range: 8.1.0
cpe:2.3:a:oracle:financial_services_asset_liability_management:8.1.0:*:*:*:*:*:*:* - oracle / financial_services_balance_sheet_planning
Version / affected range: 8.0.8
cpe:2.3:a:oracle:financial_services_balance_sheet_planning:8.0.8:*:*:*:*:*:*:* - oracle / financial_services_basel_regulatory_capital_basic
Version / affected range: * · from (inclusive) 8.0.4 · through (inclusive) 8.0.7
cpe:2.3:a:oracle:financial_services_basel_regulatory_capital_basic:*:*:*:*:*:*:*:* - oracle / financial_services_basel_regulatory_capital_basic
Version / affected range: 8.1.0
cpe:2.3:a:oracle:financial_services_basel_regulatory_capital_basic:8.1.0:*:*:*:*:*:*:* - oracle / financial_services_basel_regulatory_capital_internal_ratings_based_approach
Version / affected range: * · from (inclusive) 8.0.4 · through (inclusive) 8.0.7
cpe:2.3:a:oracle:financial_services_basel_regulatory_capital_internal_ratings_based_approach:*:*:*:*:*:*:*:* - oracle / financial_services_basel_regulatory_capital_internal_ratings_based_approach
Version / affected range: 8.1.0
cpe:2.3:a:oracle:financial_services_basel_regulatory_capital_internal_ratings_based_approach:8.1.0:*:*:*:*:*:*:* - oracle / financial_services_data_foundation
Version / affected range: * · from (inclusive) 8.0.4 · through (inclusive) 8.0.8
cpe:2.3:a:oracle:financial_services_data_foundation:*:*:*:*:*:*:*:* - oracle / financial_services_data_governance_for_us_regulatory_reporting
Version / affected range: * · from (inclusive) 8.0.6 · through (inclusive) 8.0.9
cpe:2.3:a:oracle:financial_services_data_governance_for_us_regulatory_reporting:*:*:*:*:*:*:*:* - oracle / financial_services_data_integration_hub
Version / affected range: * · from (inclusive) 8.0.5 · through (inclusive) 8.0.7
cpe:2.3:a:oracle:financial_services_data_integration_hub:*:*:*:*:*:*:*:* - oracle / financial_services_data_integration_hub
Version / affected range: 8.1.0
cpe:2.3:a:oracle:financial_services_data_integration_hub:8.1.0:*:*:*:*:*:*:* - oracle / financial_services_enterprise_financial_performance_analytics
Version / affected range: 8.0.6
cpe:2.3:a:oracle:financial_services_enterprise_financial_performance_analytics:8.0.6:*:*:*:*:*:*:* - oracle / financial_services_enterprise_financial_performance_analytics
Version / affected range: 8.0.7
cpe:2.3:a:oracle:financial_services_enterprise_financial_performance_analytics:8.0.7:*:*:*:*:*:*:* - oracle / financial_services_funds_transfer_pricing
Version / affected range: * · from (inclusive) 8.0.4 · through (inclusive) 8.0.7
cpe:2.3:a:oracle:financial_services_funds_transfer_pricing:*:*:*:*:*:*:*:* - oracle / financial_services_funds_transfer_pricing
Version / affected range: 8.1.0
cpe:2.3:a:oracle:financial_services_funds_transfer_pricing:8.1.0:*:*:*:*:*:*:* - oracle / financial_services_hedge_management_and_ifrs_valuations
Version / affected range: * · from (inclusive) 8.0.4 · through (inclusive) 8.0.7
cpe:2.3:a:oracle:financial_services_hedge_management_and_ifrs_valuations:*:*:*:*:*:*:*:* - oracle / financial_services_hedge_management_and_ifrs_valuations
Version / affected range: 8.1.0
cpe:2.3:a:oracle:financial_services_hedge_management_and_ifrs_valuations:8.1.0:*:*:*:*:*:*:* - oracle / financial_services_institutional_performance_analytics
Version / affected range: * · from (inclusive) 8.0.4 · through (inclusive) 8.0.7
cpe:2.3:a:oracle:financial_services_institutional_performance_analytics:*:*:*:*:*:*:*:* - oracle / financial_services_institutional_performance_analytics
Version / affected range: 8.1.0
cpe:2.3:a:oracle:financial_services_institutional_performance_analytics:8.1.0:*:*:*:*:*:*:* - oracle / financial_services_liquidity_risk_management
Version / affected range: 8.0.0.1.0
cpe:2.3:a:oracle:financial_services_liquidity_risk_management:8.0.0.1.0:*:*:*:*:*:*:* - oracle / financial_services_liquidity_risk_management
Version / affected range: 8.0.2
cpe:2.3:a:oracle:financial_services_liquidity_risk_management:8.0.2:*:*:*:*:*:*:* - oracle / financial_services_liquidity_risk_management
Version / affected range: 8.0.4.0.0
cpe:2.3:a:oracle:financial_services_liquidity_risk_management:8.0.4.0.0:*:*:*:*:*:*:* - oracle / financial_services_liquidity_risk_management
Version / affected range: 8.0.5.0.0
cpe:2.3:a:oracle:financial_services_liquidity_risk_management:8.0.5.0.0:*:*:*:*:*:*:* - oracle / financial_services_liquidity_risk_management
Version / affected range: 8.0.6
cpe:2.3:a:oracle:financial_services_liquidity_risk_management:8.0.6:*:*:*:*:*:*:* - oracle / financial_services_liquidity_risk_measurement_and_management
Version / affected range: 8.0.7
cpe:2.3:a:oracle:financial_services_liquidity_risk_measurement_and_management:8.0.7:*:*:*:*:*:*:* - oracle / financial_services_liquidity_risk_measurement_and_management
Version / affected range: 8.0.8
cpe:2.3:a:oracle:financial_services_liquidity_risk_measurement_and_management:8.0.8:*:*:*:*:*:*:* - oracle / financial_services_liquidity_risk_measurement_and_management
Version / affected range: 8.1.0
cpe:2.3:a:oracle:financial_services_liquidity_risk_measurement_and_management:8.1.0:*:*:*:*:*:*:* - oracle / financial_services_loan_loss_forecasting_and_provisioning
Version / affected range: * · from (inclusive) 8.0.2 · through (inclusive) 8.0.7
cpe:2.3:a:oracle:financial_services_loan_loss_forecasting_and_provisioning:*:*:*:*:*:*:*:* - oracle / financial_services_loan_loss_forecasting_and_provisioning
Version / affected range: 8.1.0
cpe:2.3:a:oracle:financial_services_loan_loss_forecasting_and_provisioning:8.1.0:*:*:*:*:*:*:* - oracle / financial_services_market_risk_measurement_and_management
Version / affected range: 8.0.5
cpe:2.3:a:oracle:financial_services_market_risk_measurement_and_management:8.0.5:*:*:*:*:*:*:* - oracle / financial_services_market_risk_measurement_and_management
Version / affected range: 8.0.6
cpe:2.3:a:oracle:financial_services_market_risk_measurement_and_management:8.0.6:*:*:*:*:*:*:* - oracle / financial_services_market_risk_measurement_and_management
Version / affected range: 8.0.8
cpe:2.3:a:oracle:financial_services_market_risk_measurement_and_management:8.0.8:*:*:*:*:*:*:* - oracle / financial_services_price_creation_and_discovery
Version / affected range: * · from (inclusive) 8.0.4 · through (inclusive) 8.0.7
cpe:2.3:a:oracle:financial_services_price_creation_and_discovery:*:*:*:*:*:*:*:* - oracle / financial_services_profitability_management
Version / affected range: * · from (inclusive) 8.0.4 · through (inclusive) 8.0.7
cpe:2.3:a:oracle:financial_services_profitability_management:*:*:*:*:*:*:*:* - oracle / financial_services_profitability_management
Version / affected range: 8.1.0
cpe:2.3:a:oracle:financial_services_profitability_management:8.1.0:*:*:*:*:*:*:* - oracle / financial_services_regulatory_reporting_for_de_nederlandsche_bank
Version / affected range: 8.0.4
cpe:2.3:a:oracle:financial_services_regulatory_reporting_for_de_nederlandsche_bank:8.0.4:*:*:*:*:*:*:* - oracle / financial_services_regulatory_reporting_for_european_banking_authority
Version / affected range: 8.0.6
cpe:2.3:a:oracle:financial_services_regulatory_reporting_for_european_banking_authority:8.0.6:*:*:*:*:*:*:* - oracle / financial_services_regulatory_reporting_for_european_banking_authority
Version / affected range: 8.0.7
cpe:2.3:a:oracle:financial_services_regulatory_reporting_for_european_banking_authority:8.0.7:*:*:*:*:*:*:* - oracle / financial_services_regulatory_reporting_for_us_federal_reserve
Version / affected range: * · from (inclusive) 8.0.4 · through (inclusive) 8.0.7
cpe:2.3:a:oracle:financial_services_regulatory_reporting_for_us_federal_reserve:*:*:*:*:*:*:*:* - oracle / financial_services_retail_customer_analytics
Version / affected range: * · from (inclusive) 8.0.4 · through (inclusive) 8.0.6
cpe:2.3:a:oracle:financial_services_retail_customer_analytics:*:*:*:*:*:*:*:* - oracle / financial_services_retail_performance_analytics
Version / affected range: 8.0.6
cpe:2.3:a:oracle:financial_services_retail_performance_analytics:8.0.6:*:*:*:*:*:*:* - oracle / financial_services_retail_performance_analytics
Version / affected range: 8.0.7
cpe:2.3:a:oracle:financial_services_retail_performance_analytics:8.0.7:*:*:*:*:*:*:* - oracle / financial_services_revenue_management_and_billing
Version / affected range: 2.4.0.0
cpe:2.3:a:oracle:financial_services_revenue_management_and_billing:2.4.0.0:*:*:*:*:*:*:* - oracle / financial_services_revenue_management_and_billing
Version / affected range: 2.4.0.1
cpe:2.3:a:oracle:financial_services_revenue_management_and_billing:2.4.0.1:*:*:*:*:*:*:* - oracle / fusion_middleware_mapviewer
Version / affected range: 12.2.1.3.0
cpe:2.3:a:oracle:fusion_middleware_mapviewer:12.2.1.3.0:*:*:*:*:*:*:* - oracle / healthcare_foundation
Version / affected range: 7.1.1
cpe:2.3:a:oracle:healthcare_foundation:7.1.1:*:*:*:*:*:*:* - oracle / healthcare_foundation
Version / affected range: 7.2.0
cpe:2.3:a:oracle:healthcare_foundation:7.2.0:*:*:*:*:*:*:* - oracle / healthcare_foundation
Version / affected range: 7.2.2
cpe:2.3:a:oracle:healthcare_foundation:7.2.2:*:*:*:*:*:*:* - oracle / healthcare_foundation
Version / affected range: 7.3.0
cpe:2.3:a:oracle:healthcare_foundation:7.3.0:*:*:*:*:*:*:* - oracle / healthcare_translational_research
Version / affected range: 3.1.0
cpe:2.3:a:oracle:healthcare_translational_research:3.1.0:*:*:*:*:*:*:* - oracle / healthcare_translational_research
Version / affected range: 3.2.1
cpe:2.3:a:oracle:healthcare_translational_research:3.2.1:*:*:*:*:*:*:* - oracle / healthcare_translational_research
Version / affected range: 3.3.1
cpe:2.3:a:oracle:healthcare_translational_research:3.3.1:*:*:*:*:*:*:* - oracle / healthcare_translational_research
Version / affected range: 3.3.2
cpe:2.3:a:oracle:healthcare_translational_research:3.3.2:*:*:*:*:*:*:* - oracle / healthcare_translational_research
Version / affected range: 3.4.0
cpe:2.3:a:oracle:healthcare_translational_research:3.4.0:*:*:*:*:*:*:* - oracle / hospitality_guest_access
Version / affected range: 4.2.0
cpe:2.3:a:oracle:hospitality_guest_access:4.2.0:*:*:*:*:*:*:* - oracle / hospitality_guest_access
Version / affected range: 4.2.1
cpe:2.3:a:oracle:hospitality_guest_access:4.2.1:*:*:*:*:*:*:* - oracle / hospitality_materials_control
Version / affected range: 18.1
cpe:2.3:a:oracle:hospitality_materials_control:18.1:*:*:*:*:*:*:* - oracle / hospitality_simphony
Version / affected range: * · from (inclusive) 19.1.0 · through (inclusive) 19.1.2
cpe:2.3:a:oracle:hospitality_simphony:*:*:*:*:*:*:*:* - oracle / hospitality_simphony
Version / affected range: 18.1
cpe:2.3:a:oracle:hospitality_simphony:18.1:*:*:*:*:*:*:* - oracle / hospitality_simphony
Version / affected range: 18.2
cpe:2.3:a:oracle:hospitality_simphony:18.2:*:*:*:*:*:*:* - oracle / identity_manager
Version / affected range: 12.2.1.3.0
cpe:2.3:a:oracle:identity_manager:12.2.1.3.0:*:*:*:*:*:*:* - oracle / insurance_accounting_analyzer
Version / affected range: 8.0.9
cpe:2.3:a:oracle:insurance_accounting_analyzer:8.0.9:*:*:*:*:*:*:* - oracle / insurance_allocation_manager_for_enterprise_profitability
Version / affected range: 8.0.8
cpe:2.3:a:oracle:insurance_allocation_manager_for_enterprise_profitability:8.0.8:*:*:*:*:*:*:* - oracle / insurance_allocation_manager_for_enterprise_profitability
Version / affected range: 8.1.0
cpe:2.3:a:oracle:insurance_allocation_manager_for_enterprise_profitability:8.1.0:*:*:*:*:*:*:* - oracle / insurance_data_foundation
Version / affected range: * · from (inclusive) 8.0.4 · through (inclusive) 8.0.7
cpe:2.3:a:oracle:insurance_data_foundation:*:*:*:*:*:*:*:* - oracle / insurance_ifrs_17_analyzer
Version / affected range: 8.0.6
cpe:2.3:a:oracle:insurance_ifrs_17_analyzer:8.0.6:*:*:*:*:*:*:* - oracle / insurance_ifrs_17_analyzer
Version / affected range: 8.0.7
cpe:2.3:a:oracle:insurance_ifrs_17_analyzer:8.0.7:*:*:*:*:*:*:* - oracle / insurance_insbridge_rating_and_underwriting
Version / affected range: * · from (inclusive) 5.0.0.0 · through (inclusive) 5.6.0.0
cpe:2.3:a:oracle:insurance_insbridge_rating_and_underwriting:*:*:*:*:*:*:*:* - oracle / insurance_insbridge_rating_and_underwriting
Version / affected range: 5.6.1.0
cpe:2.3:a:oracle:insurance_insbridge_rating_and_underwriting:5.6.1.0:*:*:*:*:*:*:* - oracle / insurance_performance_insight
Version / affected range: 8.0.7
cpe:2.3:a:oracle:insurance_performance_insight:8.0.7:*:*:*:*:*:*:* - oracle / jd_edwards_enterpriseone_tools
Version / affected range: 9.2
cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:9.2:*:*:*:*:*:*:* - oracle / jdeveloper
Version / affected range: 11.1.1.9.0
cpe:2.3:a:oracle:jdeveloper:11.1.1.9.0:*:*:*:*:*:*:* - oracle / jdeveloper
Version / affected range: 12.2.1.3.0
cpe:2.3:a:oracle:jdeveloper:12.2.1.3.0:*:*:*:*:*:*:* - oracle / jdeveloper
Version / affected range: 12.2.1.4.0
cpe:2.3:a:oracle:jdeveloper:12.2.1.4.0:*:*:*:*:*:*:* - oracle / jdeveloper_and_adf
Version / affected range: 11.1.1.9.0
cpe:2.3:a:oracle:jdeveloper_and_adf:11.1.1.9.0:*:*:*:*:*:*:* - oracle / jdeveloper_and_adf
Version / affected range: 12.1.3.0.0
cpe:2.3:a:oracle:jdeveloper_and_adf:12.1.3.0.0:*:*:*:*:*:*:* - oracle / jdeveloper_and_adf
Version / affected range: 12.2.1.3.0
cpe:2.3:a:oracle:jdeveloper_and_adf:12.2.1.3.0:*:*:*:*:*:*:* - oracle / knowledge
Version / affected range: * · from (inclusive) 8.6.0 · through (inclusive) 8.6.3
cpe:2.3:a:oracle:knowledge:*:*:*:*:*:*:*:* - oracle / peoplesoft_enterprise_peopletools
Version / affected range: 8.55
cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.55:*:*:*:*:*:*:* - oracle / peoplesoft_enterprise_peopletools
Version / affected range: 8.56
cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.56:*:*:*:*:*:*:* - oracle / peoplesoft_enterprise_peopletools
Version / affected range: 8.57
cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.57:*:*:*:*:*:*:* - oracle / peoplesoft_enterprise_peopletools
Version / affected range: 8.58
cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58:*:*:*:*:*:*:* - oracle / policy_automation
Version / affected range: * · from (inclusive) 12.2.0 · through (inclusive) 12.2.15
cpe:2.3:a:oracle:policy_automation:*:*:*:*:*:*:*:* - oracle / policy_automation
Version / affected range: 10.4.7
cpe:2.3:a:oracle:policy_automation:10.4.7:*:*:*:*:*:*:* - oracle / policy_automation
Version / affected range: 12.1.0
cpe:2.3:a:oracle:policy_automation:12.1.0:*:*:*:*:*:*:* - oracle / policy_automation
Version / affected range: 12.1.1
cpe:2.3:a:oracle:policy_automation:12.1.1:*:*:*:*:*:*:* - oracle / policy_automation_connector_for_siebel
Version / affected range: 10.4.6
cpe:2.3:a:oracle:policy_automation_connector_for_siebel:10.4.6:*:*:*:*:*:*:* - oracle / policy_automation_for_mobile_devices
Version / affected range: * · from (inclusive) 12.2.0 · through (inclusive) 12.2.15
cpe:2.3:a:oracle:policy_automation_for_mobile_devices:*:*:*:*:*:*:*:* - oracle / primavera_gateway
Version / affected range: * · from (inclusive) 16.2.0 · through (inclusive) 16.2.11
cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:* - oracle / primavera_gateway
Version / affected range: * · from (inclusive) 17.12.0 · through (inclusive) 17.12.7
cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:* - oracle / primavera_gateway
Version / affected range: * · from (inclusive) 18.8.0 · through (inclusive) 18.8.9
cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:* - oracle / primavera_gateway
Version / affected range: * · from (inclusive) 19.12.0 · through (inclusive) 19.12.4
cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:* - oracle / primavera_gateway
Version / affected range: 15.2.18
cpe:2.3:a:oracle:primavera_gateway:15.2.18:*:*:*:*:*:*:* - oracle / primavera_unifier
Version / affected range: * · from (inclusive) 17.7 · through (inclusive) 17.12
cpe:2.3:a:oracle:primavera_unifier:*:*:*:*:*:*:*:* - oracle / primavera_unifier
Version / affected range: 16.1
cpe:2.3:a:oracle:primavera_unifier:16.1:*:*:*:*:*:*:* - oracle / primavera_unifier
Version / affected range: 16.2
cpe:2.3:a:oracle:primavera_unifier:16.2:*:*:*:*:*:*:* - oracle / primavera_unifier
Version / affected range: 18.8
cpe:2.3:a:oracle:primavera_unifier:18.8:*:*:*:*:*:*:* - oracle / real-time_scheduler
Version / affected range: * · from (inclusive) 2.3.0.1 · through (inclusive) 2.3.0.3
cpe:2.3:a:oracle:real-time_scheduler:*:*:*:*:*:*:*:* - oracle / rest_data_services
Version / affected range: 11.2.0.4
cpe:2.3:a:oracle:rest_data_services:11.2.0.4:*:*:*:-:*:*:* - oracle / rest_data_services
Version / affected range: 12.1.0.2
cpe:2.3:a:oracle:rest_data_services:12.1.0.2:*:*:*:-:*:*:* - oracle / rest_data_services
Version / affected range: 12.2.0.1
cpe:2.3:a:oracle:rest_data_services:12.2.0.1:*:*:*:-:*:*:* - oracle / rest_data_services
Version / affected range: 18c
cpe:2.3:a:oracle:rest_data_services:18c:*:*:*:-:*:*:* - oracle / rest_data_services
Version / affected range: 19c
cpe:2.3:a:oracle:rest_data_services:19c:*:*:*:-:*:*:* - oracle / retail_back_office
Version / affected range: 14.0
cpe:2.3:a:oracle:retail_back_office:14.0:*:*:*:*:*:*:* - oracle / retail_back_office
Version / affected range: 14.1
cpe:2.3:a:oracle:retail_back_office:14.1:*:*:*:*:*:*:* - oracle / retail_central_office
Version / affected range: 14.0
cpe:2.3:a:oracle:retail_central_office:14.0:*:*:*:*:*:*:* - oracle / retail_central_office
Version / affected range: 14.1
cpe:2.3:a:oracle:retail_central_office:14.1:*:*:*:*:*:*:* - oracle / retail_customer_insights
Version / affected range: 15.0
cpe:2.3:a:oracle:retail_customer_insights:15.0:*:*:*:*:*:*:* - oracle / retail_customer_insights
Version / affected range: 16.0
cpe:2.3:a:oracle:retail_customer_insights:16.0:*:*:*:*:*:*:* - oracle / retail_customer_management_and_segmentation_foundation
Version / affected range: 18.0
cpe:2.3:a:oracle:retail_customer_management_and_segmentation_foundation:18.0:*:*:*:*:*:*:* - oracle / retail_customer_management_and_segmentation_foundation
Version / affected range: 19.0
cpe:2.3:a:oracle:retail_customer_management_and_segmentation_foundation:19.0:*:*:*:*:*:*:* - oracle / retail_point-of-service
Version / affected range: 14.0
cpe:2.3:a:oracle:retail_point-of-service:14.0:*:*:*:*:*:*:* - oracle / retail_point-of-service
Version / affected range: 14.1
cpe:2.3:a:oracle:retail_point-of-service:14.1:*:*:*:*:*:*:* - oracle / retail_returns_management
Version / affected range: 14.0
cpe:2.3:a:oracle:retail_returns_management:14.0:*:*:*:*:*:*:* - oracle / retail_returns_management
Version / affected range: 14.1
cpe:2.3:a:oracle:retail_returns_management:14.1:*:*:*:*:*:*:* - oracle / service_bus
Version / affected range: 11.1.1.9.0
cpe:2.3:a:oracle:service_bus:11.1.1.9.0:*:*:*:*:*:*:* - oracle / service_bus
Version / affected range: 12.1.3.0.0
cpe:2.3:a:oracle:service_bus:12.1.3.0.0:*:*:*:*:*:*:* - oracle / service_bus
Version / affected range: 12.2.1.3.0
cpe:2.3:a:oracle:service_bus:12.2.1.3.0:*:*:*:*:*:*:* - oracle / siebel_mobile_applications
Version / affected range: * · through (inclusive) 19.8
cpe:2.3:a:oracle:siebel_mobile_applications:*:*:*:*:*:*:*:* - oracle / siebel_ui_framework
Version / affected range: 20.8
cpe:2.3:a:oracle:siebel_ui_framework:20.8:*:*:*:*:*:*:* - oracle / storagetek_tape_analytics_sw_tool
Version / affected range: 2.3.0
cpe:2.3:a:oracle:storagetek_tape_analytics_sw_tool:2.3.0:*:*:*:*:*:*:* - oracle / system_utilities
Version / affected range: 19.1
cpe:2.3:a:oracle:system_utilities:19.1:*:*:*:*:*:*:* - oracle / tape_library_acsls
Version / affected range: 8.5
cpe:2.3:a:oracle:tape_library_acsls:8.5:*:*:*:*:*:*:* - oracle / tape_library_acsls
Version / affected range: 8.5.1
cpe:2.3:a:oracle:tape_library_acsls:8.5.1:*:*:*:*:*:*:* - oracle / transportation_management
Version / affected range: 1.4.3
cpe:2.3:a:oracle:transportation_management:1.4.3:*:*:*:*:*:*:* - oracle / utilities_mobile_workforce_management
Version / affected range: * · from (inclusive) 2.3.0.1 · through (inclusive) 2.3.0.3
cpe:2.3:a:oracle:utilities_mobile_workforce_management:*:*:*:*:*:*:*:* - oracle / webcenter_sites
Version / affected range: 12.2.1.3.0
cpe:2.3:a:oracle:webcenter_sites:12.2.1.3.0:*:*:*:*:*:*:* - oracle / weblogic_server
Version / affected range: 10.3.6.0.0
cpe:2.3:a:oracle:weblogic_server:10.3.6.0.0:*:*:*:*:*:*:* - oracle / weblogic_server
Version / affected range: 12.1.3.0.0
cpe:2.3:a:oracle:weblogic_server:12.1.3.0.0:*:*:*:*:*:*:* - oracle / weblogic_server
Version / affected range: 12.2.1.3.0
cpe:2.3:a:oracle:weblogic_server:12.2.1.3.0:*:*:*:*:*:*:* - oracle / weblogic_server
Version / affected range: 12.2.1.4.0
cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0:*:*:*:*:*:*:* - oracle / weblogic_server
Version / affected range: 14.1.1.0.0
cpe:2.3:a:oracle:weblogic_server:14.1.1.0.0:*:*:*:*:*:*:* - joomla / joomla\!
Version / affected range: * · from (inclusive) 3.0.0 · through (inclusive) 3.9.4
cpe:2.3:a:joomla:joomla\!:*:*:*:*:*:*:*:* - juniper / junos
Version / affected range: 21.2
cpe:2.3:o:juniper:junos:21.2:-:*:*:*:*:*:*
References
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.
Reported Context (1)
- | | | BDSA-2019-1138 (CVE-2019-11358) | 745 | 2,415 | 27% | Black Duck 2026 Report Finds Open Source Vulnerability Counts More Than Doubled
CVE (5)
Malware (1)
Threat Actors (1)
MITRE ATT&CK (5)
Vendors (1)
Products (6)
Industries (9)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.
