Known vulnerabilities in Oracle Financial Services Enterprise Case Management
Vendor:
Oracle
Software CPE:
cpe:2.3:a:oracle:oracle_financial_services_enterprise_case_management:*:*:*:*:*:*:*:*
Website:
https://www.oracle.com
Total vulnerabilities:
13
Public exploits:
3
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
Vulnerabilities (13)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU120231 - Improper Validation of Certificate with Host Mismatch CVE-2025-68161 |
CWE-297 | Medium | - | 22.12.2025 | - | ||
| #VU89801 - Server-Side Request Forgery (SSRF) CVE-2024-22262 |
CWE-918 | Medium | - | 24.05.2024 | - | ||
| #VU75409 - Improper input validation CVE-2023-20863 |
CWE-20 | Medium | - | 21.04.2023 | - | ||
| #VU68635 - Deserialization of Untrusted Data CVE-2022-42003 |
CWE-502 | Medium | - | 25.10.2022 | - | ||
| #VU65835 - Incorrect Regular Expression CVE-2022-31129 |
CWE-185 | Medium | - | 27.07.2022 | - | ||
| #VU65495 - Improper input validation CVE-2022-34169 |
CWE-20 | High | - | 20.07.2022 | - | ||
| #VU63085 - Improper input validation CVE-2022-22971 |
CWE-20 | Medium | - | 12.05.2022 | - | ||
| #VU61799 - Out-of-bounds write CVE-2020-36518 |
CWE-787 | Medium | - | 01.04.2022 | - | ||
| #VU61756 - Improper Control of Generation of Code ('Code Injection') CVE-2022-22965 |
CWE-94 | Critical | - | 31.03.2022 | - | ||
| #VU61427 - Incorrect Regular Expression CVE-2022-24729 |
CWE-185 | Low | - | 17.03.2022 | - | ||
| #VU59965 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2022-23437 |
CWE-835 | Medium | - | 25.01.2022 | - | ||
| #VU56790 - Information Exposure Through Timing Discrepancy CVE-2021-38153 |
CWE-208 | Low | - | 21.09.2021 | - | ||
| #VU55044 - Improper input validation CVE-2021-2351 |
CWE-20 | High | - | 20.07.2021 | - |