Known vulnerabilities in Oracle Financial Services Model Management and Governance - page 2

Vendor: Oracle
Software: Oracle Financial Services Model Management and Governance
Software CPE: cpe:2.3:a:oracle:oracle_financial_services_model_management_and_governance:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 49
Public exploits: 7
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle Financial Services Model Management and Governance Oracle Financial Services Model Management and Governance is affected by 49 known vulnerabilities: 7 high, 35 medium, 7 low Critical High Medium Low

Vulnerabilities (49)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU94546 - Improper input validation
CVE-2023-26031		 CWE-20 Medium
No
No
 - 18.07.2024 -
#VU87510 - Improper input validation
CVE-2024-24549		 CWE-20 Medium
Available
No
 - 13.03.2024 -
#VU86625 - Resource exhaustion
CVE-2024-26308		 CWE-400 Medium
No
No
 - 20.02.2024 -
#VU83581 - Improper input validation
CVE-2023-34055		 CWE-20 Medium
No
No
 - 29.11.2023 -
#VU83241 - Information Exposure Through Log Files
CVE-2023-44483		 CWE-532 Medium
No
No
 - 17.11.2023 -
#VU78721 - Improper Privilege Management
CVE-2023-22946		 CWE-269 High
No
No
 - 27.07.2023 -
#VU77622 - Exposure of sensitive information to an unauthorized actor
CVE-2023-34981		 CWE-200 Medium
No
No
 - 22.06.2023 -
#VU75409 - Improper input validation
CVE-2023-20863		 CWE-20 Medium
No
No
 - 21.04.2023 -
#VU75408 - Security Features
CVE-2023-20862		 CWE-254 Medium
No
No
 - 21.04.2023 -
#VU75407 - Security Features
CVE-2023-20873		 CWE-254 Medium
No
No
 - 21.04.2023 -
#VU75217 - Improper input validation
CVE-2023-26049		 CWE-20 Low
No
No
 - 18.04.2023 -
#VU75044 - Uncontrolled Recursion
CVE-2023-1370		 CWE-674 Medium
No
No
 - 12.04.2023 -
#VU73970 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-48285		 CWE-22 Medium
No
No
 - 23.03.2023 -
#VU72427 - Allocation of Resources Without Limits or Throttling
CVE-2023-24998		 CWE-770 Medium
Available
No
 - 20.02.2023 -
#VU70441 - Insufficient Verification of Data Authenticity
CVE-2021-37533		 CWE-345 Low
No
No
 - 20.12.2022 -
#VU70385 - Deserialization of Untrusted Data
CVE-2022-1471		 CWE-502 High
Available
No
 - 15.12.2022 -
#VU68859 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-42252		 CWE-444 Medium
No
No
 - 31.10.2022 -
#VU67664 - Stack-based buffer overflow
CVE-2022-38752		 CWE-121 Medium
No
No
 - 27.09.2022 -
#VU66756 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-36033		 CWE-79 Low
No
No
 - 25.08.2022 -
#VU58198 - Exposure of sensitive information to an unauthorized actor
CVE-2021-40690		 CWE-200 Medium
No
No
 - 16.11.2021 -


Showing elements 21 - 40 out of 49