| Package | Affected versions | Patched versions |
|---|---|---|
| knockout | ≤ 3.4.2 | |
| business intelligence | = 12.2.1.3.0= 12.2.1.4.0= 5.5.0.0.0 | |
| goldengate | = 12.3.0.1.2 | |
| decision manager | = 7.0 | |
| process automation | = 7.0 | |
| knockout | < 3.5.0 | 3.5.0 |
There is a vulnerability in knockout before version 3.5.0-beta, where after escaping the context of the web application, the web application delivers data to its users along with other trusted dynamic content, without validating it.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free