Known vulnerabilities in Oracle Banking Credit Facilities Process Management - page 2

Vendor: Oracle

Software CPE: cpe:2.3:a:oracle:oracle_banking_credit_facilities_process_management:*:*:*:*:*:*:*:*

Website: https://www.oracle.com

Total vulnerabilities: 34

Public exploits: 7

Known exploited (KEV): 1

Highest CVSSv4 Score: 9.3

Vulnerabilities (34)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU75562 - Improper input validation CVE-2023-20861	CWE-20	Medium	No	No	-	27.04.2023	-
#VU73970 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2022-48285	CWE-22	Medium	No	No	-	23.03.2023	-
#VU70527 - Improper input validation CVE-2022-41966	CWE-20	Medium	Available	No	-	28.12.2022	-
#VU70444 - Server-Side Request Forgery (SSRF) CVE-2022-46364	CWE-918	Medium	No	No	-	20.12.2022	-
#VU70118 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2022-41881	CWE-835	Medium	No	No	-	12.12.2022	-
#VU69499 - Resource exhaustion CVE-2022-45199	CWE-400	Medium	No	No	-	22.11.2022	-
#VU68635 - Deserialization of Untrusted Data CVE-2022-42003	CWE-502	Medium	No	No	-	25.10.2022	-
#VU66756 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2022-36033	CWE-79	Low	No	No	-	25.08.2022	-
#VU64724 - Incorrect Regular Expression CVE-2022-33879	CWE-185	Medium	No	No	-	28.06.2022	-
#VU61754 - Improper Control of Generation of Code ('Code Injection') CVE-2022-22963	CWE-94	Critical	Available	Exploited	-	31.03.2022	-
#VU28463 - Use of Insufficiently Random Values CVE-2020-5408	CWE-330	Medium	No	No	-	01.06.2020	-
#VU27513 - Resource exhaustion CVE-2020-11612	CWE-400	Medium	No	No	-	04.05.2020	-
#VU24240 - Exposure of sensitive information to an unauthorized actor CVE-2019-12399	CWE-200	Low	No	No	-	14.01.2020	-
#VU18660 - Insufficient Verification of Data Authenticity CVE-2019-11269	CWE-345	Medium	Available	No	-	03.06.2019	-

Showing elements 21 - 40 out of 34