Known vulnerabilities in Oracle Financial Services Institutional Performance Analytics

Vendor: Oracle
Software: Oracle Financial Services Institutional Performance Analytics
Software CPE: cpe:2.3:a:oracle:oracle_financial_services_institutional_performance_analytics:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 6
Public exploits: 3
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle Financial Services Institutional Performance Analytics Oracle Financial Services Institutional Performance Analytics is affected by 6 known vulnerabilities: 2 high, 1 medium, 3 low Critical High Medium Low

Vulnerabilities (6)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU58271 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-41184		 CWE-79 Medium
Available
No
 - 20.11.2021 SB2021112002
SB2022030804
SB2022041935
and 74 more
#VU27487 - Improper Certificate Validation
CVE-2020-9488		 CWE-295 Low
No
No
 - 04.05.2020 SB2020050406
SB2020071606
SB2020071620
and 67 more
#VU27052 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11022		 CWE-79 Low
Available
No
 - 21.04.2020 SB2020042126
SB2020052033
SB2020052103
and 181 more
#VU25830 - Deserialization of Untrusted Data
CVE-2020-9546		 CWE-502 High
No
No
 - 09.03.2020 SB2020030909
SB2020071523
SB2020071620
and 31 more
#VU18092 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2019-11358		 CWE-1321 Low
Available
No
 8.0.7.8.1 28.03.2019 SB2019032804
SB2019041026
SB2019041801
and 155 more
#VU17781 - Improper input validation
CVE-2018-19362		 CWE-20 High
No
No
 8.0.7.8.1 19.02.2019 SB2018121501
SB2019052407
SB2019091718
and 38 more