Known vulnerabilities in Oracle Financial Services Crime and Compliance Management Studio

Vendor: Oracle
Software: Oracle Financial Services Crime and Compliance Management Studio
Software CPE: cpe:2.3:a:oracle:oracle_financial_services_crime_and_compliance_management_studio:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 23
Public exploits: 5
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle Financial Services Crime and Compliance Management Studio Oracle Financial Services Crime and Compliance Management Studio is affected by 23 known vulnerabilities: 4 high, 15 medium, 4 low Critical High Medium Low

Vulnerabilities (23)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU73957 - Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
CVE-2023-28708		 CWE-614 Low
No
No
 - 22.03.2023 SB2023032237
SB2023032939
SB2023032945
and 53 more
#VU69293 - Improper input validation
CVE-2022-3171		 CWE-20 Medium
No
No
 - 14.11.2022 SB2022111433
SB2022111440
SB2022112934
and 105 more
#VU68859 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-42252		 CWE-444 Medium
No
No
 - 31.10.2022 SB2022103146
SB2022112324
SB2022112533
and 43 more
#VU68635 - Deserialization of Untrusted Data
CVE-2022-42003		 CWE-502 Medium
No
No
 - 25.10.2022 SB2022102509
SB2022102510
SB2022103117
and 208 more
#VU66756 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-36033		 CWE-79 Low
No
No
 - 25.08.2022 SB2022082508
SB2022101893
SB2022111644
and 44 more
#VU65830 - Resource Management Errors
CVE-2022-2048		 CWE-399 Medium
No
No
 - 27.07.2022 SB2022072723
SB2022080103
SB2022080260
and 44 more
#VU65470 - Improper input validation
CVE-2021-38296		 CWE-20 Medium
No
No
 - 19.07.2022 SB2022072013
SB2022092339
SB2022032606
and 1 more
#VU64957 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-33980		 CWE-94 High
Available
No
 - 06.07.2022 SB2022070645
SB2022072604
SB2022081517
and 31 more
#VU64152 - Deserialization of Untrusted Data
CVE-2022-25647		 CWE-502 Medium
No
No
 - 10.06.2022 SB2021120221
SB2022061003
SB2022061421
and 94 more
#VU63345 - Improper Authorization
CVE-2022-22978		 CWE-285 High
Available
No
 - 17.05.2022 SB2022051717
SB2022052009
SB2022052010
and 20 more
#VU61799 - Out-of-bounds write
CVE-2020-36518		 CWE-787 Medium
No
No
 - 01.04.2022 SB2022040113
SB2022040114
SB2022040115
and 147 more
#VU60079 - Permissions, Privileges, and Access Controls
CVE-2022-23181		 CWE-264 Low
No
No
 - 27.01.2022 SB2022012708
SB2022030854
SB2022041951
and 25 more
#VU59965 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-23437		 CWE-835 Medium
No
No
 - 25.01.2022 SB2022012503
SB2022041946
SB2022042249
and 92 more
#VU58176 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-37714		 CWE-835 Medium
No
No
 - 16.11.2021 SB2021111606
SB2021111715
SB2022012314
and 24 more
#VU56683 - Improper Authentication
CVE-2021-41303		 CWE-287 High
No
No
 - 17.09.2021 SB2021091709
SB2022072013
SB2023010505
#VU55238 - Improper input validation
CVE-2020-7712		 CWE-20 Medium
No
No
 - 22.07.2021 SB2021072720
SB2022012312
SB2022071932
and 2 more
#VU54853 - Resource exhaustion
CVE-2021-36090		 CWE-400 Medium
No
No
 - 14.07.2021 SB2021071408
SB2021080809
SB2021100411
and 70 more
#VU53202 - Command injection
CVE-2021-23337		 CWE-77 Medium
No
No
 - 12.05.2021 SB2021021525
SB2021051230
SB2021062703
and 60 more
#VU50000 - Permissions, Privileges, and Access Controls
CVE-2020-9492		 CWE-264 Medium
No
No
 - 26.01.2021 SB2021012612
SB2021120219
SB2021120336
and 12 more
#VU11918 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2018-1273		 CWE-113 High
Available
Exploited
 - 18.04.2018 SB2018041815
SB2022072013
SB2023011758
and 2 more


Showing elements 1 - 20 out of 23