Known vulnerabilities in Oracle Financial Services Revenue Management and Billing

Vendor: Oracle
Software: Oracle Financial Services Revenue Management and Billing
Software CPE: cpe:2.3:a:oracle:oracle_financial_services_revenue_management_and_billing:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 24
Public exploits: 4
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle Financial Services Revenue Management and Billing Oracle Financial Services Revenue Management and Billing is affected by 24 known vulnerabilities: 2 high, 17 medium, 5 low Critical High Medium Low

Vulnerabilities (24)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU117469 - Improper input validation
CVE-2025-50075		 CWE-20 Medium
No
No
 - 22.10.2025 SB2025102291
#VU117471 - Improper input validation
CVE-2025-50074		 CWE-20 Medium
No
No
 - 22.10.2025 SB2025102291
#VU107514 - Out-of-bounds read
CVE-2025-21573		 CWE-125 Medium
No
No
 - 16.04.2025 SB2025041660
#VU103302 - Improper input validation
CVE-2023-52070		 CWE-20 Low
No
No
 - 24.01.2025 SB2025012482
#VU98498 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2024-28168		 CWE-611 Medium
No
No
 - 14.10.2024 SB2024101462
SB2024101465
SB2024112829
and 18 more
#VU94547 - Improper input validation
CVE-2024-21188		 CWE-20 Medium
No
No
 - 18.07.2024 SB20240718121
#VU86625 - Resource exhaustion
CVE-2024-26308		 CWE-400 Medium
No
No
 - 20.02.2024 SB2024022033
SB2024022937
SB2024031520
and 138 more
#VU80018 - Server-Side Request Forgery (SSRF)
CVE-2022-44729		 CWE-918 Medium
No
No
 3.2.0.0.0 25.08.2023 SB2023082528
SB2023100208
SB2023100306
and 25 more
#VU78328 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
CVE-2023-33201		 CWE-90 Medium
No
No
 - 17.07.2023 SB2023071740
SB2023071742
SB2023071902
and 91 more
#VU72427 - Allocation of Resources Without Limits or Throttling
CVE-2023-24998		 CWE-770 Medium
Available
No
 - 20.02.2023 SB2023022046
SB2023022047
SB2023030917
and 203 more
#VU67585 - Server-Side Request Forgery (SSRF)
CVE-2022-40146		 CWE-918 Medium
Available
No
 - 22.09.2022 SB2022092232
SB2023011763
SB2023011838
and 21 more
#VU65834 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-31160		 CWE-79 Low
No
No
 - 27.07.2022 SB2022072727
SB2022100608
SB2022121119
and 44 more
#VU65495 - Improper input validation
CVE-2022-34169		 CWE-20 High
Available
No
 - 20.07.2022 SB2022072046
SB2022072047
SB2022072140
and 137 more
#VU60527 - Resource exhaustion
CVE-2021-43859		 CWE-400 Medium
No
No
 - 11.02.2022 SB2022021102
SB2022021103
SB2022042250
and 26 more
#VU59965 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-23437		 CWE-835 Medium
No
No
 - 25.01.2022 SB2022012503
SB2022041946
SB2022042249
and 92 more
#VU54853 - Resource exhaustion
CVE-2021-36090		 CWE-400 Medium
No
No
 - 14.07.2021 SB2021071408
SB2021080809
SB2021100411
and 70 more
#VU54291 - Server-Side Request Forgery (SSRF)
CVE-2020-11988		 CWE-918 Medium
No
No
 - 21.06.2021 SB2021062143
SB2021062144
SB2021062145
and 15 more
#VU52252 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-29425		 CWE-22 Low
No
No
 - 15.04.2021 SB2021041510
SB2021081922
SB2021093016
and 122 more
#VU22545 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2019-12415		 CWE-611 High
No
No
 - 06.11.2019 SB2019110635
SB2020012308
SB2020012309
and 42 more
#VU18092 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2019-11358		 CWE-1321 Low
Available
No
 - 28.03.2019 SB2019032804
SB2019041026
SB2019041801
and 155 more


Showing elements 1 - 20 out of 24