Known vulnerabilities in Oracle Financial Services Lending and Leasing

Vendor: Oracle
Software: Oracle Financial Services Lending and Leasing
Software CPE: cpe:2.3:a:oracle:oracle_financial_services_lending_and_leasing:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 6
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle Financial Services Lending and Leasing Oracle Financial Services Lending and Leasing is affected by 6 known vulnerabilities: 2 high, 2 medium, 2 low Critical High Medium Low

Vulnerabilities (6)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU113607 - Uncontrolled Recursion
CVE-2025-48924		 CWE-674 Medium
No
No
 - 04.08.2025 SB2025080422
SB2025080423
SB2025080427
and 182 more
#VU78328 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
CVE-2023-33201		 CWE-90 Medium
No
No
 14.8.0 17.07.2023 SB2023071740
SB2023071742
SB2023071902
and 91 more
#VU77107 - Incorrect Default Permissions
CVE-2023-2976		 CWE-276 Low
No
No
 14.8.0 08.06.2023 SB2023060849
SB2023071712
SB2023072512
and 157 more
#VU66756 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-36033		 CWE-79 Low
No
No
 14.8.0 25.08.2022 SB2022082508
SB2022101893
SB2022111644
and 44 more
#VU24597 - Improper input validation
CVE-2019-2904		 CWE-20 High
No
No
 - 25.01.2020 SB2020011463
SB2020042108
SB2020042109
and 20 more
#VU12127 - Deserialization of Untrusted Data
CVE-2017-5645		 CWE-502 High
No
No
 - 24.04.2018 SB2017040201
SB2019011707
SB2017090512
and 40 more