Known vulnerabilities in Oracle Banking Treasury Management

Known vulnerabilities in Oracle Banking Treasury Management

Vendor: Oracle

Software: Oracle Banking Treasury Management

Software CPE: cpe:2.3:a:oracle:oracle_banking_treasury_management:*:*:*:*:*:*:*:*

Website: https://www.oracle.com

Total vulnerabilities: 16

Public exploits: 1

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (16)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU71109 - Out-of-bounds write CVE-2022-45693	CWE-787	Medium	No	No	-	11.01.2023	SB2023011159 SB2023011160 SB2023013112 and 45 more
#VU70530 - Deserialization of Untrusted Data CVE-2022-45047	CWE-502	High	Available	No	-	28.12.2022	SB2022122828 SB2022122920 SB2023011148 and 49 more
#VU70441 - Insufficient Verification of Data Authenticity CVE-2021-37533	CWE-345	Low	No	No	-	20.12.2022	SB2022122007 SB2022123001 SB2023011876 and 82 more
#VU69293 - Improper input validation CVE-2022-3171	CWE-20	Medium	No	No	-	14.11.2022	SB2022111433 SB2022111440 SB2022112934 and 105 more
#VU68635 - Deserialization of Untrusted Data CVE-2022-42003	CWE-502	Medium	No	No	-	25.10.2022	SB2022102509 SB2022102510 SB2022103117 and 208 more
#VU66756 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2022-36033	CWE-79	Low	No	No	-	25.08.2022	SB2022082508 SB2022101893 SB2022111644 and 44 more
#VU64152 - Deserialization of Untrusted Data CVE-2022-25647	CWE-502	Medium	No	No	-	10.06.2022	SB2021120221 SB2022061003 SB2022061421 and 94 more
#VU62518 - Improper input validation CVE-2022-21473	CWE-20	Medium	No	No	-	22.04.2022	SB2022042271
#VU59098 - Improper Control of Generation of Code ('Code Injection') CVE-2021-44832	CWE-94	Medium	No	No	-	28.12.2021	SB2021122816 SB2021123002 SB2022010601 and 197 more
#VU58176 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2021-37714	CWE-835	Medium	No	No	-	16.11.2021	SB2021111606 SB2021111715 SB2022012314 and 24 more
#VU56931 - Memory corruption CVE-2021-30129	CWE-119	Medium	No	No	-	29.09.2021	SB2021092916 SB2021092917 SB2021111715 and 15 more
#VU54856 - Resource exhaustion CVE-2021-36374	CWE-400	Medium	No	No	-	14.07.2021	SB2021071409 SB2021072011 SB2021101927 and 43 more
#VU54853 - Resource exhaustion CVE-2021-36090	CWE-400	Medium	No	No	-	14.07.2021	SB2021071408 SB2021080809 SB2021100411 and 70 more
#VU54080 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2021-31812	CWE-835	Medium	No	No	-	13.06.2021	SB2021061308 SB2021100412 SB2022020119 and 17 more
#VU48979 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2020-25649	CWE-611	Medium	No	No	-	03.12.2020	SB2020121510 SB2021020321 SB2021042112 and 68 more
#VU47428 - Permissions, Privileges, and Access Controls CVE-2020-11979	CWE-264	Low	No	No	-	14.05.2020	SB2020100804 SB2020100815 SB2020111614 and 51 more