Known vulnerabilities in Oracle Financial Services Analytical Applications Infrastructure - page 5

Vendor: Oracle
Software: Oracle Financial Services Analytical Applications Infrastructure
Software CPE: cpe:2.3:a:oracle:oracle_financial_services_analytical_applications_infrastructure:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 100
Public exploits: 14
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle Financial Services Analytical Applications Infrastructure Oracle Financial Services Analytical Applications Infrastructure is affected by 100 known vulnerabilities: 2 critical, 15 high, 62 medium, 21 low Critical High Medium Low

Vulnerabilities (100)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU30014 - Improper input validation
CVE-2020-14685		 CWE-20 Medium
No
No
 - 16.07.2020 SB2020071662
#VU30017 - Improper input validation
CVE-2020-14662		 CWE-20 Medium
No
No
 - 16.07.2020 SB2020071662
#VU30021 - Improper input validation
CVE-2020-14604		 CWE-20 Medium
No
No
 - 16.07.2020 SB2020071662
#VU30022 - Improper input validation
CVE-2020-14684		 CWE-20 Low
No
No
 - 16.07.2020 SB2020071662
#VU30011 - Improper input validation
CVE-2020-14602		 CWE-20 Medium
No
No
 - 16.07.2020 SB2020071662
#VU30013 - Improper input validation
CVE-2020-14605		 CWE-20 Medium
No
No
 - 16.07.2020 SB2020071662
#VU28624 - Improper input validation
CVE-2019-14379		 CWE-20 High
No
No
 8.0.9 04.06.2020 SB2019101525
SB2019101568
SB2019101569
and 6 more
#VU27924 - Incorrect Default Permissions
CVE-2020-1945		 CWE-276 Low
No
No
 - 15.05.2020 SB2020051501
SB2020052114
SB2020060205
and 48 more
#VU27196 - Improper input validation
CVE-2020-2793		 CWE-20 Medium
No
No
 - 23.04.2020 SB2020041459
#VU24871 - Improper input validation
CVE-2020-2688		 CWE-20 Medium
No
No
 - 04.02.2020 SB2020011475
#VU24468 - Improper input validation
CVE-2019-0227		 CWE-20 Medium
Available
No
 - 21.01.2020 SB2020012205
SB2020012308
SB2020012309
and 40 more
#VU22545 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2019-12415		 CWE-611 High
No
No
 - 06.11.2019 SB2019110635
SB2020012308
SB2020012309
and 42 more
#VU22272 - Missing release of memory after effective lifetime
CVE-2019-17359		 CWE-401 Medium
No
No
 - 24.10.2019 SB2019102418
SB2020011478
SB2020042338
and 14 more
#VU109719 - Improper input validation
CVE-2019-2823		 CWE-20 Medium
No
No
 8.0.8.0 16.07.2019 SB2019071685
#VU18092 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2019-11358		 CWE-1321 Low
Available
No
 8.0.8.0 28.03.2019 SB2019032804
SB2019041026
SB2019041801
and 155 more
#VU17781 - Improper input validation
CVE-2018-19362		 CWE-20 High
No
No
 8.0.8.0 19.02.2019 SB2018121501
SB2019052407
SB2019091718
and 38 more
#VU17053 - Permissions, Privileges, and Access Controls
CVE-2018-14718		 CWE-264 High
No
No
 - 17.01.2019 SB2019011703
SB2019052407
SB2019091718
and 29 more
#VU15467 - Improper input validation
CVE-2018-15756		 CWE-20 Low
No
No
 8.0.8.0 22.10.2018 SB2018102305
SB2020012203
SB2020032701
and 28 more
#VU12312 - Deserialization of Untrusted Data
CVE-2016-1000031		 CWE-502 High
No
No
 - 01.05.2018 SB2017111432
SB2018110601
SB2019051512
and 39 more
#VU11268 - Deserialization of Untrusted Data
CVE-2018-7489		 CWE-502 High
No
No
 - 26.03.2018 SB2018021604
SB2018041910
SB2018050306
and 28 more


Showing elements 81 - 100 out of 100