Known vulnerabilities in Oracle Financial Services Model Management and Governance - page 2

Vendor: Oracle
Software: Oracle Financial Services Model Management and Governance
Software CPE: cpe:2.3:a:oracle:oracle_financial_services_model_management_and_governance:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 49
Public exploits: 7
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle Financial Services Model Management and Governance Oracle Financial Services Model Management and Governance is affected by 49 known vulnerabilities: 7 high, 35 medium, 7 low Critical High Medium Low

Vulnerabilities (49)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU94546 - Improper input validation
CVE-2023-26031		 CWE-20 Medium
No
No
 - 18.07.2024 SB2024071897
SB20240718138
SB2025012477
#VU87510 - Improper input validation
CVE-2024-24549		 CWE-20 Medium
Available
No
 - 13.03.2024 SB2024031386
SB2024031879
SB2024031880
and 64 more
#VU86625 - Resource exhaustion
CVE-2024-26308		 CWE-400 Medium
No
No
 - 20.02.2024 SB2024022033
SB2024022937
SB2024031520
and 138 more
#VU83581 - Improper input validation
CVE-2023-34055		 CWE-20 Medium
No
No
 - 29.11.2023 SB2023112967
SB2024011660
SB2024011661
and 22 more
#VU83241 - Information Exposure Through Log Files
CVE-2023-44483		 CWE-532 Medium
No
No
 - 17.11.2023 SB2023111724
SB2023111747
SB2023120143
and 76 more
#VU78721 - Improper Privilege Management
CVE-2023-22946		 CWE-269 High
No
No
 - 27.07.2023 SB2023072730
SB2023090130
SB2023091827
and 5 more
#VU77622 - Exposure of sensitive information to an unauthorized actor
CVE-2023-34981		 CWE-200 Medium
No
No
 - 22.06.2023 SB2023062241
SB2023070714
SB2023071901
and 24 more
#VU75409 - Improper input validation
CVE-2023-20863		 CWE-20 Medium
No
No
 - 21.04.2023 SB2023042131
SB2023042132
SB2023050511
and 88 more
#VU75408 - Security Features
CVE-2023-20862		 CWE-254 Medium
No
No
 - 21.04.2023 SB2023042130
SB2023042132
SB2023053121
and 20 more
#VU75407 - Security Features
CVE-2023-20873		 CWE-254 Medium
No
No
 - 21.04.2023 SB2023042129
SB2023042132
SB2023060816
and 16 more
#VU75217 - Improper input validation
CVE-2023-26049		 CWE-20 Low
No
No
 - 18.04.2023 SB2023041842
SB2023051821
SB2023060836
and 78 more
#VU75044 - Uncontrolled Recursion
CVE-2023-1370		 CWE-674 Medium
No
No
 - 12.04.2023 SB2023041258
SB2023041259
SB2023041809
and 130 more
#VU73970 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-48285		 CWE-22 Medium
No
No
 - 23.03.2023 SB2023032314
SB2023032315
SB2023042510
and 22 more
#VU72427 - Allocation of Resources Without Limits or Throttling
CVE-2023-24998		 CWE-770 Medium
Available
No
 - 20.02.2023 SB2023022046
SB2023022047
SB2023030917
and 203 more
#VU70441 - Insufficient Verification of Data Authenticity
CVE-2021-37533		 CWE-345 Low
No
No
 - 20.12.2022 SB2022122007
SB2022123001
SB2023011876
and 82 more
#VU70385 - Deserialization of Untrusted Data
CVE-2022-1471		 CWE-502 High
Available
No
 - 15.12.2022 SB2022121539
SB2022121540
SB2022121928
and 124 more
#VU68859 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-42252		 CWE-444 Medium
No
No
 - 31.10.2022 SB2022103146
SB2022112324
SB2022112533
and 43 more
#VU67664 - Stack-based buffer overflow
CVE-2022-38752		 CWE-121 Medium
No
No
 - 27.09.2022 SB2022092715
SB2022092728
SB2022100555
and 66 more
#VU66756 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-36033		 CWE-79 Low
No
No
 - 25.08.2022 SB2022082508
SB2022101893
SB2022111644
and 44 more
#VU58198 - Exposure of sensitive information to an unauthorized actor
CVE-2021-40690		 CWE-200 Medium
No
No
 - 16.11.2021 SB2021111622
SB2021111712
SB2022012032
and 37 more


Showing elements 21 - 40 out of 49