Known vulnerabilities in Oracle Financial Services Model Management and Governance
Vendor:
Oracle
Software CPE:
cpe:2.3:a:oracle:oracle_financial_services_model_management_and_governance:*:*:*:*:*:*:*:*
Website:
https://www.oracle.com
Total vulnerabilities:
49
Public exploits:
7
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
Vulnerabilities (49)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU122008 - Out-of-bounds write CVE-2025-27821 |
CWE-787 | Low | - | 24.01.2026 | - | ||
| #VU120231 - Improper Validation of Certificate with Host Mismatch CVE-2025-68161 |
CWE-297 | Medium | - | 22.12.2025 | - | ||
| #VU117682 - Resource exhaustion CVE-2025-61795 |
CWE-400 | Medium | - | 27.10.2025 | - | ||
| #VU115573 - Protection Mechanism Failure CVE-2025-41249 |
CWE-693 | Medium | - | 16.09.2025 | - | ||
| #VU115570 - Protection Mechanism Failure CVE-2025-41248 |
CWE-693 | Medium | - | 16.09.2025 | - | ||
| #VU114024 - Resource exhaustion CVE-2025-48989 |
CWE-400 | Medium | - | 13.08.2025 | - | ||
| #VU113607 - Uncontrolled Recursion CVE-2025-48924 |
CWE-674 | Medium | - | 04.08.2025 | - | ||
| #VU111165 - Improper Access Control CVE-2025-48734 |
CWE-284 | Medium | - | 16.06.2025 | - | ||
| #VU111162 - Resource exhaustion CVE-2025-48976 |
CWE-400 | Medium | - | 16.06.2025 | - | ||
| #VU101893 - Permissions, Privileges, and Access Controls CVE-2024-56337 |
CWE-264 | High | - | 20.12.2024 | - | ||
| #VU100676 - Improper Authorization CVE-2024-38827 |
CWE-285 | Medium | - | 19.11.2024 | - | ||
| #VU98796 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2024-38819 |
CWE-22 | Medium | - | 17.10.2024 | - | ||
| #VU98025 - Resource exhaustion CVE-2024-47554 |
CWE-400 | Medium | - | 03.10.2024 | - | ||
| #VU93732 - Resource Management Errors CVE-2024-34750 |
CWE-399 | Medium | - | 03.07.2024 | - | ||
| #VU89801 - Server-Side Request Forgery (SSRF) CVE-2024-22262 |
CWE-918 | Medium | - | 24.05.2024 | - | ||
| #VU87744 - Out-of-bounds write CVE-2024-29133 |
CWE-787 | High | - | 22.03.2024 | - | ||
| #VU85564 - Deserialization of Untrusted Data CVE-2023-47248 |
CWE-502 | High | - | 18.01.2024 | - | ||
| #VU83219 - Deserialization of Untrusted Data CVE-2023-39410 |
CWE-502 | Medium | - | 16.11.2023 | - | ||
| #VU78328 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') CVE-2023-33201 |
CWE-90 | Medium | - | 17.07.2023 | - | ||
| #VU70531 - Deserialization of Untrusted Data CVE-2022-36944 |
CWE-502 | High | - | 28.12.2022 | - |
Showing elements 1 - 20 out of 49