Known vulnerabilities in Oracle Financial Services Analytical Applications Infrastructure 8.0.8 - page 2

Vendor: Oracle
Software: Oracle Financial Services Analytical Applications Infrastructure
Version: 8.0.8
Software CPE: cpe:2.3:a:oracle:oracle_financial_services_analytical_applications_infrastructure:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 45
Public exploits: 5
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Oracle Financial Services Analytical Applications Infrastructure version 8.0.8 Oracle Financial Services Analytical Applications Infrastructure 8.0.8 is affected by 45 vulnerabilities: 1 critical, 6 high, 23 medium, 15 low Critical High Medium Low

Vulnerabilities (45)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU47972 - Improper input validation
CVE-2020-14824		 CWE-20 High
No
No
 - 29.10.2020 SB2020102932
#VU30014 - Improper input validation
CVE-2020-14685		 CWE-20 Medium
No
No
 - 16.07.2020 SB2020071662
#VU30017 - Improper input validation
CVE-2020-14662		 CWE-20 Medium
No
No
 - 16.07.2020 SB2020071662
#VU30018 - Improper input validation
CVE-2020-14601		 CWE-20 Medium
No
No
 - 16.07.2020 SB2020071662
#VU30019 - Improper input validation
CVE-2020-14615		 CWE-20 Medium
No
No
 - 16.07.2020 SB2020071662
#VU30020 - Improper input validation
CVE-2020-14603		 CWE-20 Medium
No
No
 - 16.07.2020 SB2020071662
#VU30021 - Improper input validation
CVE-2020-14604		 CWE-20 Medium
No
No
 - 16.07.2020 SB2020071662
#VU30022 - Improper input validation
CVE-2020-14684		 CWE-20 Low
No
No
 - 16.07.2020 SB2020071662
#VU30011 - Improper input validation
CVE-2020-14602		 CWE-20 Medium
No
No
 - 16.07.2020 SB2020071662
#VU30013 - Improper input validation
CVE-2020-14605		 CWE-20 Medium
No
No
 - 16.07.2020 SB2020071662
#VU28238 - Exposed Dangerous Method or Function
CVE-2020-10683		 CWE-749 Medium
No
No
 - 26.05.2020 SB2020050106
SB2020052616
SB2020071632
and 43 more
#VU27924 - Incorrect Default Permissions
CVE-2020-1945		 CWE-276 Low
No
No
 - 15.05.2020 SB2020051501
SB2020052114
SB2020060205
and 48 more
#VU27487 - Improper Certificate Validation
CVE-2020-9488		 CWE-295 Low
No
No
 - 04.05.2020 SB2020050406
SB2020071606
SB2020071620
and 67 more
#VU27196 - Improper input validation
CVE-2020-2793		 CWE-20 Medium
No
No
 - 23.04.2020 SB2020041459
#VU27052 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11022		 CWE-79 Low
Public exploit available
No
 - 21.04.2020 SB2020042126
SB2020052033
SB2020052103
and 181 more
#VU25830 - Deserialization of Untrusted Data
CVE-2020-9546		 CWE-502 High
No
No
 - 09.03.2020 SB2020030909
SB2020071523
SB2020071620
and 31 more
#VU24871 - Improper input validation
CVE-2020-2688		 CWE-20 Medium
No
No
 - 04.02.2020 SB2020011475
#VU24468 - Improper input validation
CVE-2019-0227		 CWE-20 Medium
Public exploit available
No
 - 21.01.2020 SB2020012205
SB2020012308
SB2020012309
and 40 more
#VU22545 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2019-12415		 CWE-611 High
No
No
 - 06.11.2019 SB2019110635
SB2020012308
SB2020012309
and 42 more
#VU22272 - Missing release of memory after effective lifetime
CVE-2019-17359		 CWE-401 Medium
No
No
 - 24.10.2019 SB2019102418
SB2020011478
SB2020042338
and 14 more


Showing elements 21 - 40 out of 45