Known vulnerabilities in Oracle Banking Digital Experience
Vendor:
Oracle
Software:
Oracle Banking Digital Experience
Software CPE:
cpe:2.3:a:oracle:oracle_banking_digital_experience:*:*:*:*:*:*:*:*
Website:
https://www.oracle.com
Total vulnerabilities:
43
Public exploits:
8
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
Vulnerabilities (43)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU106926 - Resource Management Errors CVE-2024-57699 |
CWE-399 | Medium | - | 03.04.2025 | - | ||
| #VU105112 - Resource exhaustion CVE-2025-23184 |
CWE-400 | Medium | - | 28.02.2025 | - | ||
| #VU103770 - Improper input validation CVE-2025-24970 |
CWE-20 | Medium | - | 11.02.2025 | - | ||
| #VU101829 - Improper Authentication CVE-2024-56128 |
CWE-287 | Medium | - | 18.12.2024 | - | ||
| #VU98498 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2024-28168 |
CWE-611 | Medium | - | 14.10.2024 | - | ||
| #VU98025 - Resource exhaustion CVE-2024-47554 |
CWE-400 | Medium | - | 03.10.2024 | - | ||
| #VU96371 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2024-43407 |
CWE-79 | Low | - | 21.08.2024 | - | ||
| #VU89096 - Missing Authorization CVE-2024-32114 |
CWE-862 | Medium | - | 01.05.2024 | - | ||
| #VU86625 - Resource exhaustion CVE-2024-26308 |
CWE-400 | Medium | - | 20.02.2024 | - | ||
| #VU82690 - Deserialization of Untrusted Data CVE-2023-46604 |
CWE-502 | Critical | - | 02.11.2023 | - | ||
| #VU82276 - Allocation of Resources Without Limits or Throttling CVE-2023-5072 |
CWE-770 | Medium | - | 20.10.2023 | - | ||
| #VU80880 - Security Features CVE-2023-34034 |
CWE-254 | High | - | 19.09.2023 | - | ||
| #VU78394 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2023-28439 |
CWE-79 | Low | - | 19.07.2023 | - | ||
| #VU78328 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') CVE-2023-33201 |
CWE-90 | Medium | - | 17.07.2023 | - | ||
| #VU77573 - Resource exhaustion CVE-2023-34462 |
CWE-400 | Medium | - | 20.06.2023 | - | ||
| #VU77107 - Incorrect Default Permissions CVE-2023-2976 |
CWE-276 | Low | - | 08.06.2023 | - | ||
| #VU77102 - Stack-based buffer overflow CVE-2022-45688 |
CWE-121 | Medium | - | 08.06.2023 | - | ||
| #VU75409 - Improper input validation CVE-2023-20863 |
CWE-20 | Medium | - | 21.04.2023 | - | ||
| #VU70527 - Improper input validation CVE-2022-41966 |
CWE-20 | Medium | - | 28.12.2022 | - | ||
| #VU64724 - Incorrect Regular Expression CVE-2022-33879 |
CWE-185 | Medium | - | 28.06.2022 | - |
Showing elements 1 - 20 out of 43