Known vulnerabilities in Oracle FLEXCUBE Private Banking 12.0.0

Vendor: Oracle

Software: Oracle FLEXCUBE Private Banking

Version: 12.0.0

Software CPE: cpe:2.3:a:oracle:oracle_flexcube_private_banking:*:*:*:*:*:*:*:*

Website: https://www.oracle.com

Total vulnerabilities: 25

Public exploits: 2

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Vulnerabilities (25)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU55044 - Improper input validation CVE-2021-2351	CWE-20	High	No	No	-	20.07.2021	SB2021072053 SB2022011824 SB2022011825 and 110 more
#VU52502 - Improper input validation CVE-2020-27218	CWE-20	Medium	No	No	-	23.04.2021	SB2021042305 SB2021042635 SB2021063002 and 15 more
#VU50072 - Improper Authentication CVE-2021-26117	CWE-287	High	No	No	-	27.01.2021	SB2021012801 SB2021072724 SB20230719107 and 2 more
#VU49739 - Improper input validation CVE-2020-5421	CWE-20	Medium	Public exploit available	No	-	20.01.2021	SB2021012002 SB2021012008 SB2021012015 and 39 more
#VU46680 - Improper Authentication CVE-2020-11998	CWE-287	High	No	No	-	14.09.2020	SB2020091416 SB2021012050 SB2021042523 and 2 more
#VU31796 - Deserialization of Untrusted Data CVE-2020-5413	CWE-502	High	No	No	-	24.07.2020	SB2020072408 SB2021042523 SB2021072724
#VU34161 - Operation on a Resource after Expiration or Release CVE-2019-17638	CWE-672	High	No	No	-	09.07.2020	SB2020070939 SB2020081709 SB2020102107 and 11 more
#VU28463 - Use of Insufficiently Random Values CVE-2020-5408	CWE-330	Medium	No	No	-	01.06.2020	SB2020060107 SB2020102832 SB2020102833 and 13 more
#VU27954 - Deserialization of Untrusted Data CVE-2020-11973	CWE-502	High	No	No	-	17.05.2020	SB2020051702 SB2020102703 SB2020102927 and 1 more
#VU27953 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-1941	CWE-79	Low	No	No	-	17.05.2020	SB2020051701 SB2020071609 SB2020071610 and 5 more
#VU47428 - Permissions, Privileges, and Access Controls CVE-2020-11979	CWE-264	Low	No	No	-	14.05.2020	SB2020100804 SB2020100815 SB2020111614 and 51 more
#VU27487 - Improper Certificate Validation CVE-2020-9488	CWE-295	Low	No	No	-	04.05.2020	SB2020050406 SB2020071606 SB2020071620 and 67 more
#VU34420 - Missing release of memory after effective lifetime CVE-2020-9489	CWE-401	Medium	No	No	-	27.04.2020	SB2020042727 SB2020102706 SB2020102845 and 2 more
#VU27264 - Improper input validation CVE-2020-5398	CWE-20	Medium	Public exploit available	No	-	23.04.2020	SB2020042353 SB2020071609 SB2020071610 and 21 more
#VU26470 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2020-1951	CWE-835	Medium	No	No	-	31.03.2020	SB2020033108 SB2020071605 SB2020102927 and 3 more
#VU22545 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2019-12415	CWE-611	High	No	No	-	06.11.2019	SB2019110635 SB2020012308 SB2020012309 and 41 more
#VU22272 - Missing release of memory after effective lifetime CVE-2019-17359	CWE-401	Medium	No	No	-	24.10.2019	SB2019102418 SB2020011478 SB2020042338 and 14 more
#VU20844 - Protection Mechanism Failure CVE-2019-10086	CWE-693	Low	No	No	-	04.09.2019	SB2019090405 SB2019090406 SB2019121902 and 112 more
#VU18570 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2019-0188	CWE-611	Medium	No	No	-	22.05.2019	SB2019052202 SB2019101556 SB2020071664 and 1 more
#VU17185 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2019-3773	CWE-611	Low	No	No	-	24.01.2019	SB2019012402 SB2021012213 SB2021042523

Showing elements 1 - 20 out of 25

Known vulnerabilities in Oracle FLEXCUBE Private Banking 12.0.0

Vulnerabilities by Severity

Vulnerabilities (25)

Please verify you're human