Known vulnerabilities in Oracle Banking APIs - page 2

Vendor: Oracle

Software: Oracle Banking APIs

Software CPE: cpe:2.3:a:oracle:oracle_banking_apis:*:*:*:*:*:*:*:*

Website: https://www.oracle.com

Total vulnerabilities: 35

Public exploits: 5

Known exploited (KEV): 1

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (35)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU78394 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2023-28439	CWE-79	Low	No	No	-	19.07.2023	SB2023071950 SB2023071977 SB20230719111 and 13 more
#VU73970 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2022-48285	CWE-22	Medium	No	No	-	23.03.2023	SB2023032314 SB2023032315 SB2023042510 and 22 more
#VU72427 - Allocation of Resources Without Limits or Throttling CVE-2023-24998	CWE-770	Medium	Available	No	-	20.02.2023	SB2023022046 SB2023022047 SB2023030917 and 203 more
#VU72123 - Deserialization of Untrusted Data CVE-2023-25194	CWE-502	Low	Available	No	-	11.02.2023	SB2023021101 SB2023030952 SB2023040419 and 40 more
#VU65835 - Incorrect Regular Expression CVE-2022-31129	CWE-185	Medium	No	No	-	27.07.2022	SB2022072729 SB2022072901 SB2022081048 and 102 more
#VU64152 - Deserialization of Untrusted Data CVE-2022-25647	CWE-502	Medium	No	No	-	10.06.2022	SB2021120221 SB2022061003 SB2022061421 and 94 more
#VU59924 - Improper input validation CVE-2021-37137	CWE-20	Medium	No	No	-	23.01.2022	SB2022012310 SB2022012745 SB2022012753 and 44 more
#VU58219 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2021-41165	CWE-79	Medium	No	No	-	18.11.2021	SB2021111801 SB2021111802 SB2021111909 and 14 more
#VU55044 - Improper input validation CVE-2021-2351	CWE-20	High	No	No	-	20.07.2021	SB2021072053 SB2022011824 SB2022011825 and 110 more
#VU54853 - Resource exhaustion CVE-2021-36090	CWE-400	Medium	No	No	-	14.07.2021	SB2021071408 SB2021080809 SB2021100411 and 70 more
#VU52501 - Server-Side Request Forgery (SSRF) CVE-2020-11987	CWE-918	Medium	No	No	-	23.04.2021	SB2021042315 SB2021042316 SB2021042514 and 32 more
#VU52252 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2021-29425	CWE-22	Low	No	No	-	15.04.2021	SB2021041510 SB2021081922 SB2021093016 and 121 more
#VU51877 - Improper input validation CVE-2021-28164	CWE-20	Medium	Available	No	-	01.04.2021	SB2021040179 SB2021050704 SB2021051321 and 22 more
#VU48979 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2020-25649	CWE-611	Medium	No	No	-	03.12.2020	SB2020121510 SB2021020321 SB2021042112 and 68 more
#VU30727 - Cross-Site Request Forgery (CSRF) CVE-2019-17495	CWE-352	Medium	No	No	-	11.10.2019	SB2019101115 SB2020102846 SB2020102933 and 12 more

Showing elements 21 - 40 out of 35

Known vulnerabilities in Oracle Banking APIs - page 2

Breakdown by Severity Chart

Vulnerabilities (35)

Please verify you're human