Known vulnerabilities in Oracle Financial Services Enterprise Case Management

Known vulnerabilities in Oracle Financial Services Enterprise Case Management

Vendor: Oracle

Software: Oracle Financial Services Enterprise Case Management

Software CPE: cpe:2.3:a:oracle:oracle_financial_services_enterprise_case_management:*:*:*:*:*:*:*:*

Website: https://www.oracle.com

Total vulnerabilities: 13

Public exploits: 3

Known exploited (KEV): 1

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (13)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU120231 - Improper Validation of Certificate with Host Mismatch CVE-2025-68161	CWE-297	Medium	No	No	-	22.12.2025	SB2025122245 SB2026012084 SB2026012087 and 101 more
#VU89801 - Server-Side Request Forgery (SSRF) CVE-2024-22262	CWE-918	Medium	No	No	-	24.05.2024	SB2024052420 SB2024052423 SB2024052708 and 76 more
#VU75409 - Improper input validation CVE-2023-20863	CWE-20	Medium	No	No	-	21.04.2023	SB2023042131 SB2023042132 SB2023050511 and 88 more
#VU68635 - Deserialization of Untrusted Data CVE-2022-42003	CWE-502	Medium	No	No	-	25.10.2022	SB2022102509 SB2022102510 SB2022103117 and 208 more
#VU65835 - Incorrect Regular Expression CVE-2022-31129	CWE-185	Medium	No	No	-	27.07.2022	SB2022072729 SB2022072901 SB2022081048 and 102 more
#VU65495 - Improper input validation CVE-2022-34169	CWE-20	High	Available	No	-	20.07.2022	SB2022072046 SB2022072047 SB2022072140 and 137 more
#VU63085 - Improper input validation CVE-2022-22971	CWE-20	Medium	Available	No	-	12.05.2022	SB2022051201 SB2022060620 SB2022062223 and 52 more
#VU61799 - Out-of-bounds write CVE-2020-36518	CWE-787	Medium	No	No	-	01.04.2022	SB2022040113 SB2022040114 SB2022040115 and 147 more
#VU61756 - Improper Control of Generation of Code ('Code Injection') CVE-2022-22965	CWE-94	Critical	Available	Exploited	-	31.03.2022	SB2022033109 SB2022040109 SB2022040110 and 78 more
#VU61427 - Incorrect Regular Expression CVE-2022-24729	CWE-185	Low	No	No	-	17.03.2022	SB2022031702 SB2022031703 SB2022031704 and 24 more
#VU59965 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2022-23437	CWE-835	Medium	No	No	-	25.01.2022	SB2022012503 SB2022041946 SB2022042249 and 92 more
#VU56790 - Information Exposure Through Timing Discrepancy CVE-2021-38153	CWE-208	Low	No	No	-	21.09.2021	SB2021092116 SB2022010906 SB2022012104 and 21 more
#VU55044 - Improper input validation CVE-2021-2351	CWE-20	High	No	No	-	20.07.2021	SB2021072053 SB2022011824 SB2022011825 and 110 more