Known vulnerabilities in Oracle Banking Enterprise Default Management

Known vulnerabilities in Oracle Banking Enterprise Default Management

Vendor: Oracle

Software: Oracle Banking Enterprise Default Management

Software CPE: cpe:2.3:a:oracle:oracle_banking_enterprise_default_management:*:*:*:*:*:*:*:*

Website: https://www.oracle.com

Total vulnerabilities: 16

Public exploits: 1

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (16)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU82276 - Allocation of Resources Without Limits or Throttling CVE-2023-5072	CWE-770	Medium	No	No	-	20.10.2023	SB2023102017 SB2023102018 SB2023113056 and 97 more
#VU77107 - Incorrect Default Permissions CVE-2023-2976	CWE-276	Low	No	No	-	08.06.2023	SB2023060849 SB2023071712 SB2023072512 and 157 more
#VU68635 - Deserialization of Untrusted Data CVE-2022-42003	CWE-502	Medium	No	No	-	25.10.2022	SB2022102509 SB2022102510 SB2022103117 and 208 more
#VU67664 - Stack-based buffer overflow CVE-2022-38752	CWE-121	Medium	No	No	-	27.09.2022	SB2022092715 SB2022092728 SB2022100555 and 66 more
#VU65469 - Improper input validation CVE-2022-29577	CWE-20	Medium	No	No	-	19.07.2022	SB2022071969 SB2022072038 SB20221018125 and 10 more
#VU64957 - Improper Control of Generation of Code ('Code Injection') CVE-2022-33980	CWE-94	High	Available	No	-	06.07.2022	SB2022070645 SB2022072604 SB2022081517 and 31 more
#VU62849 - Creation of Temporary File With Insecure Permissions CVE-2022-24823	CWE-378	Low	No	No	-	09.05.2022	SB2022050902 SB2022063002 SB2022072013 and 56 more
#VU61799 - Out-of-bounds write CVE-2020-36518	CWE-787	Medium	No	No	-	01.04.2022	SB2022040113 SB2022040114 SB2022040115 and 147 more
#VU60208 - Improper input validation CVE-2021-35043	CWE-20	Medium	No	No	-	01.02.2022	SB2022020144 SB2022020165 SB2022020166 and 4 more
#VU59098 - Improper Control of Generation of Code ('Code Injection') CVE-2021-44832	CWE-94	Medium	No	No	-	28.12.2021	SB2021122816 SB2021123002 SB2022010601 and 197 more
#VU55044 - Improper input validation CVE-2021-2351	CWE-20	High	No	No	-	20.07.2021	SB2021072053 SB2022011824 SB2022011825 and 110 more
#VU54853 - Resource exhaustion CVE-2021-36090	CWE-400	Medium	No	No	-	14.07.2021	SB2021071408 SB2021080809 SB2021100411 and 70 more
#VU52562 - Deserialization of Untrusted Data CVE-2021-21345	CWE-502	High	No	No	-	26.04.2021	SB2021042607 SB2021042608 SB2021043019 and 28 more
#VU52252 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2021-29425	CWE-22	Low	No	No	-	15.04.2021	SB2021041510 SB2021081922 SB2021093016 and 121 more
#VU51511 - Improper Control of Generation of Code ('Code Injection') CVE-2020-13936	CWE-94	High	No	No	-	16.03.2021	SB2021031618 SB2021072614 SB2022011911 and 45 more
#VU47770 - Improper input validation CVE-2020-9281	CWE-20	Medium	No	No	-	21.10.2020	SB2020102103 SB2020102951 SB2021012078 and 8 more