Known vulnerabilities in Oracle Banking Cash Management
Vendor:
Oracle
Software:
Oracle Banking Cash Management
Software CPE:
cpe:2.3:a:oracle:oracle_banking_cash_management:*:*:*:*:*:*:*:*
Website:
https://www.oracle.com
Total vulnerabilities:
45
Public exploits:
8
Known exploited (KEV):
2
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
Vulnerabilities (45)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU121007 - Exposure of sensitive information to an unauthorized actor CVE-2025-66566 |
CWE-200 | Medium | - | 07.01.2026 | - | ||
| #VU117439 - Improper input validation CVE-2025-48795 |
CWE-20 | Low | - | 22.10.2025 | - | ||
| #VU116213 - Out-of-bounds write CVE-2025-9230 |
CWE-787 | Medium | - | 01.10.2025 | - | ||
| #VU115573 - Protection Mechanism Failure CVE-2025-41249 |
CWE-693 | Medium | - | 16.09.2025 | - | ||
| #VU114316 - Resource exhaustion CVE-2025-5115 |
CWE-400 | Medium | - | 21.08.2025 | - | ||
| #VU114026 - Resource exhaustion CVE-2025-55163 |
CWE-400 | Medium | - | 13.08.2025 | - | ||
| #VU113607 - Uncontrolled Recursion CVE-2025-48924 |
CWE-674 | Medium | - | 04.08.2025 | - | ||
| #VU112146 - Server-Side Request Forgery (SSRF) CVE-2025-27817 |
CWE-918 | High | - | 03.07.2025 | - | ||
| #VU111223 - Type confusion CVE-2025-49796 |
CWE-843 | Medium | - | 17.06.2025 | - | ||
| #VU111165 - Improper Access Control CVE-2025-48734 |
CWE-284 | Medium | - | 16.06.2025 | - | ||
| #VU111162 - Resource exhaustion CVE-2025-48976 |
CWE-400 | Medium | - | 16.06.2025 | - | ||
| #VU97458 - Improper input validation CVE-2024-32007 |
CWE-20 | Medium | - | 18.09.2024 | - | ||
| #VU93424 - Out-of-bounds read CVE-2024-5535 |
CWE-125 | Low | - | 27.06.2024 | - | ||
| #VU89801 - Server-Side Request Forgery (SSRF) CVE-2024-22262 |
CWE-918 | Medium | - | 24.05.2024 | - | ||
| #VU86625 - Resource exhaustion CVE-2024-26308 |
CWE-400 | Medium | - | 20.02.2024 | - | ||
| #VU85743 - Improper Control of Generation of Code ('Code Injection') CVE-2023-50447 |
CWE-94 | High | - | 24.01.2024 | - | ||
| #VU85550 - Improper input validation CVE-2023-2618 |
CWE-20 | Medium | - | 17.01.2024 | - | ||
| #VU83241 - Information Exposure Through Log Files CVE-2023-44483 |
CWE-532 | Medium | - | 17.11.2023 | - | ||
| #VU82276 - Allocation of Resources Without Limits or Throttling CVE-2023-5072 |
CWE-770 | Medium | - | 20.10.2023 | - | ||
| #VU81728 - Resource exhaustion CVE-2023-44487 |
CWE-400 | High | - | 10.10.2023 | - |
Showing elements 1 - 20 out of 45