Known vulnerabilities in Oracle Banking Enterprise Default Management

Vendor: Oracle
Software: Oracle Banking Enterprise Default Management
Software CPE: cpe:2.3:a:oracle:oracle_banking_enterprise_default_management:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 16
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle Banking Enterprise Default Management Oracle Banking Enterprise Default Management is affected by 16 known vulnerabilities: 4 high, 9 medium, 3 low Critical High Medium Low

Vulnerabilities (16)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU82276 - Allocation of Resources Without Limits or Throttling
CVE-2023-5072		 CWE-770 Medium
No
No
 - 20.10.2023 -
#VU77107 - Incorrect Default Permissions
CVE-2023-2976		 CWE-276 Low
No
No
 - 08.06.2023 -
#VU68635 - Deserialization of Untrusted Data
CVE-2022-42003		 CWE-502 Medium
No
No
 - 25.10.2022 -
#VU67664 - Stack-based buffer overflow
CVE-2022-38752		 CWE-121 Medium
No
No
 - 27.09.2022 -
#VU65469 - Improper input validation
CVE-2022-29577		 CWE-20 Medium
No
No
 - 19.07.2022 -
#VU64957 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-33980		 CWE-94 High
Available
No
 - 06.07.2022 -
#VU62849 - Creation of Temporary File With Insecure Permissions
CVE-2022-24823		 CWE-378 Low
No
No
 - 09.05.2022 -
#VU61799 - Out-of-bounds write
CVE-2020-36518		 CWE-787 Medium
No
No
 - 01.04.2022 -
#VU60208 - Improper input validation
CVE-2021-35043		 CWE-20 Medium
No
No
 - 01.02.2022 -
#VU59098 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-44832		 CWE-94 Medium
No
No
 - 28.12.2021 -
#VU55044 - Improper input validation
CVE-2021-2351		 CWE-20 High
No
No
 - 20.07.2021 -
#VU54853 - Resource exhaustion
CVE-2021-36090		 CWE-400 Medium
No
No
 - 14.07.2021 -
#VU52562 - Deserialization of Untrusted Data
CVE-2021-21345		 CWE-502 High
No
No
 - 26.04.2021 -
#VU52252 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-29425		 CWE-22 Low
No
No
 - 15.04.2021 -
#VU51511 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-13936		 CWE-94 High
No
No
 - 16.03.2021 -
#VU47770 - Improper input validation
CVE-2020-9281		 CWE-20 Medium
No
No
 - 21.10.2020 -