Known vulnerabilities in Oracle Financial Services Compliance Studio

Vendor: Oracle
Software: Oracle Financial Services Compliance Studio
Software CPE: cpe:2.3:a:oracle:oracle_financial_services_compliance_studio:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 28
Public exploits: 5
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle Financial Services Compliance Studio Oracle Financial Services Compliance Studio is affected by 28 known vulnerabilities: 5 high, 18 medium, 5 low Critical High Medium Low

Vulnerabilities (28)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU123113 - Out-of-bounds write
CVE-2026-25990		 CWE-787 High
No
No
 - 20.02.2026 SB2026022027
SB2026022028
SB2026022035
and 12 more
#VU119230 - Allocation of Resources Without Limits or Throttling
CVE-2025-66418		 CWE-770 Medium
No
No
 - 05.12.2025 SB2025120581
SB2025121208
SB2025121938
and 93 more
#VU115573 - Protection Mechanism Failure
CVE-2025-41249		 CWE-693 Medium
No
No
 - 16.09.2025 SB20250916314
SB2025100741
SB20251008143
and 62 more
#VU114316 - Resource exhaustion
CVE-2025-5115		 CWE-400 Medium
No
No
 - 21.08.2025 SB2025082101
SB2025082751
SB20250828111
and 42 more
#VU113607 - Uncontrolled Recursion
CVE-2025-48924		 CWE-674 Medium
No
No
 - 04.08.2025 SB2025080422
SB2025080423
SB2025080427
and 180 more
#VU113156 - Memory corruption
CVE-2025-6965		 CWE-119 Medium
No
No
 - 22.07.2025 SB2025072254
SB2025072807
SB2025072890
and 100 more
#VU100676 - Improper Authorization
CVE-2024-38827		 CWE-285 Medium
No
No
 - 19.11.2024 SB2024111987
SB2025012185
SB2025012188
and 30 more
#VU98796 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-38819		 CWE-22 Medium
Available
No
 - 17.10.2024 SB2024101781
SB2024112849
SB2024120331
and 54 more
#VU95806 - Cleartext Storage of Sensitive Information
CVE-2024-5206		 CWE-312 Low
No
No
 - 13.08.2024 SB2024081329
SB2024081330
SB2024081334
and 10 more
#VU94546 - Improper input validation
CVE-2023-26031		 CWE-20 Medium
No
No
 - 18.07.2024 SB2024071897
SB20240718138
SB2025012477
#VU92262 - Exposure of sensitive information to an unauthorized actor
CVE-2024-37891		 CWE-200 Low
No
No
 - 19.06.2024 SB2024061955
SB20240625146
SB2024062605
and 194 more
#VU90156 - Security Features
CVE-2024-35195		 CWE-254 Low
No
No
 - 31.05.2024 SB2024053174
SB2024053188
SB2024053192
and 117 more
#VU89677 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-34064		 CWE-79 Medium
No
No
 - 20.05.2024 SB2024052067
SB2024052081
SB2024052082
and 83 more
#VU88063 - Memory corruption
CVE-2024-28219		 CWE-119 Medium
No
No
 - 03.04.2024 SB2024040318
SB2024040320
SB2024040844
and 28 more
#VU86290 - Stack-based buffer overflow
CVE-2023-51074		 CWE-121 Medium
No
No
 - 09.02.2024 SB2024020912
SB2024021238
SB2024021241
and 37 more
#VU85743 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-50447		 CWE-94 High
No
No
 - 24.01.2024 SB2024012413
SB2024012417
SB2024012465
and 34 more
#VU84537 - Inadequate Encryption Strength
CVE-2023-48795		 CWE-326 Low
Available
No
 - 19.12.2023 SB2023121903
SB2023121905
SB2023121906
and 343 more
#VU83581 - Improper input validation
CVE-2023-34055		 CWE-20 Medium
No
No
 - 29.11.2023 SB2023112967
SB2024011660
SB2024011661
and 22 more
#VU83241 - Information Exposure Through Log Files
CVE-2023-44483		 CWE-532 Medium
No
No
 - 17.11.2023 SB2023111724
SB2023111747
SB2023120143
and 76 more
#VU65495 - Improper input validation
CVE-2022-34169		 CWE-20 High
Available
No
 - 20.07.2022 SB2022072046
SB2022072047
SB2022072140
and 137 more


Showing elements 1 - 20 out of 28