Known vulnerabilities in Oracle Banking Deposits and Lines of Credit Servicing

Vendor: Oracle
Software CPE: cpe:2.3:a:oracle:oracle_banking_deposits_and_lines_of_credit_servicing:*:*:*:*:*:*:*:*
Total vulnerabilities: 13
Public exploits: 3
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle Banking Deposits and Lines of Credit Servicing Oracle Banking Deposits and Lines of Credit Servicing is affected by 13 known vulnerabilities: 3 high, 8 medium, 2 low Critical High Medium Low

Vulnerabilities (13)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU86625 - Resource exhaustion
CVE-2024-26308
CWE-400 Medium
No
No
- 20.02.2024 -
#VU86224 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-24816
CWE-79 Low
Available
No
- 07.02.2024 -
#VU82276 - Allocation of Resources Without Limits or Throttling
CVE-2023-5072
CWE-770 Medium
No
No
- 20.10.2023 -
#VU78394 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-28439
CWE-79 Low
No
No
- 19.07.2023 -
#VU77573 - Resource exhaustion
CVE-2023-34462
CWE-400 Medium
No
No
- 20.06.2023 -
#VU70385 - Deserialization of Untrusted Data
CVE-2022-1471
CWE-502 High
Available
No
- 15.12.2022 -
#VU68635 - Deserialization of Untrusted Data
CVE-2022-42003
CWE-502 Medium
No
No
- 25.10.2022 -
#VU65469 - Improper input validation
CVE-2022-29577
CWE-20 Medium
No
No
- 19.07.2022 -
#VU64957 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-33980
CWE-94 High
Available
No
- 06.07.2022 -
#VU61810 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-43797
CWE-444 Medium
No
No
- 02.04.2022 -
#VU59965 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-23437
CWE-835 Medium
No
No
- 25.01.2022 -
#VU59098 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-44832
CWE-94 Medium
No
No
- 28.12.2021 -
#VU51511 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-13936
CWE-94 High
No
No
- 16.03.2021 -