Known vulnerabilities in Oracle Banking Credit Facilities Process Management - page 2

Known vulnerabilities in Oracle Banking Credit Facilities Process Management - page 2

Vendor: Oracle

Software: Oracle Banking Credit Facilities Process Management

Software CPE: cpe:2.3:a:oracle:oracle_banking_credit_facilities_process_management:*:*:*:*:*:*:*:*

Website: https://www.oracle.com

Total vulnerabilities: 34

Public exploits: 7

Known exploited (KEV): 1

Breakdown by Severity Chart

Vulnerabilities (34)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU73970 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2022-48285	CWE-22	Medium	No	No	-	23.03.2023	SB2023032314 SB2023032315 SB2023042510 and 22 more
#VU72427 - Allocation of Resources Without Limits or Throttling CVE-2023-24998	CWE-770	Medium	Available	No	-	20.02.2023	SB2023022046 SB2023022047 SB2023030917 and 203 more
#VU72123 - Deserialization of Untrusted Data CVE-2023-25194	CWE-502	Low	Available	No	-	11.02.2023	SB2023021101 SB2023030952 SB2023040419 and 44 more
#VU70444 - Server-Side Request Forgery (SSRF) CVE-2022-46364	CWE-918	Medium	No	No	-	20.12.2022	SB2022122009 SB2023011329 SB2023011707 and 67 more
#VU70118 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2022-41881	CWE-835	Medium	No	No	-	12.12.2022	SB2022121215 SB2023011210 SB2023011757 and 74 more
#VU69499 - Resource exhaustion CVE-2022-45199	CWE-400	Medium	No	No	-	22.11.2022	SB2022112231 SB2022112234 SB2023011810 and 8 more
#VU69293 - Improper input validation CVE-2022-3171	CWE-20	Medium	No	No	-	14.11.2022	SB2022111433 SB2022111440 SB2022112934 and 105 more
#VU68827 - Improper Control of Generation of Code ('Code Injection') CVE-2022-42890	CWE-94	Low	No	No	-	30.10.2022	SB2022103004 SB2022103009 SB2023030742 and 34 more
#VU68635 - Deserialization of Untrusted Data CVE-2022-42003	CWE-502	Medium	No	No	-	25.10.2022	SB2022102509 SB2022102510 SB2022103117 and 208 more
#VU61754 - Improper Control of Generation of Code ('Code Injection') CVE-2022-22963	CWE-94	Critical	Available	Exploited	-	31.03.2022	SB2022033107 SB2022041275 SB2022060214 and 15 more
#VU28463 - Use of Insufficiently Random Values CVE-2020-5408	CWE-330	Medium	No	No	-	01.06.2020	SB2020060107 SB2020102832 SB2020102833 and 13 more
#VU27513 - Resource exhaustion CVE-2020-11612	CWE-400	Medium	No	No	-	04.05.2020	SB2020050435 SB2020073033 SB2021012210 and 35 more
#VU24240 - Exposure of sensitive information to an unauthorized actor CVE-2019-12399	CWE-200	Low	No	No	-	14.01.2020	SB2020011418 SB2020032709 SB2021012208 and 14 more
#VU18660 - Insufficient Verification of Data Authenticity CVE-2019-11269	CWE-345	Medium	Available	No	-	03.06.2019	SB2019060307 SB2021012210 SB2021012214 and 6 more

Showing elements 21 - 40 out of 34