Known vulnerabilities in Oracle Financial Services Revenue Management and Billing 2.9.1

Vendor: Oracle

Version: 2.9.1

Software CPE: cpe:2.3:a:oracle:oracle_financial_services_revenue_management_and_billing:*:*:*:*:*:*:*:*

Website: https://www.oracle.com

Total vulnerabilities: 10

Public exploits: 2

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.3

Vulnerabilities (10)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU117469 - Improper input validation CVE-2025-50075	CWE-20	Medium	No	No	-	22.10.2025	SB2025102291
#VU117471 - Improper input validation CVE-2025-50074	CWE-20	Medium	No	No	-	22.10.2025	SB2025102291
#VU103302 - Improper input validation CVE-2023-52070	CWE-20	Low	No	No	-	24.01.2025	SB2025012482
#VU98498 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2024-28168	CWE-611	Medium	No	No	-	14.10.2024	SB2024101462 SB2024101465 SB2024112829 and 18 more
#VU80018 - Server-Side Request Forgery (SSRF) CVE-2022-44729	CWE-918	Medium	No	No	3.2.0.0.0	25.08.2023	SB2023082528 SB2023100208 SB2023100306 and 25 more
#VU78328 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') CVE-2023-33201	CWE-90	Medium	No	No	-	17.07.2023	SB2023071740 SB2023071742 SB2023071902 and 91 more
#VU67585 - Server-Side Request Forgery (SSRF) CVE-2022-40146	CWE-918	Medium	Public exploit available	No	-	22.09.2022	SB2022092232 SB2023011763 SB2023011838 and 21 more
#VU65495 - Improper input validation CVE-2022-34169	CWE-20	High	Public exploit available	No	-	20.07.2022	SB2022072046 SB2022072047 SB2022072140 and 137 more
#VU60527 - Resource exhaustion CVE-2021-43859	CWE-400	Medium	No	No	-	11.02.2022	SB2022021102 SB2022021103 SB2022042250 and 26 more
#VU59965 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2022-23437	CWE-835	Medium	No	No	-	25.01.2022	SB2022012503 SB2022041946 SB2022042249 and 92 more