Known vulnerabilities in Oracle FLEXCUBE Enterprise Limits and Collateral Management

Known vulnerabilities in Oracle FLEXCUBE Enterprise Limits and Collateral Management

Vendor: Oracle

Software: Oracle FLEXCUBE Enterprise Limits and Collateral Management

Software CPE: cpe:2.3:a:oracle:oracle_flexcube_enterprise_limits_and_collateral_management:*:*:*:*:*:*:*:*

Website: https://www.oracle.com

Total vulnerabilities: 13

Public exploits: 1

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (13)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU111162 - Resource exhaustion CVE-2025-48976	CWE-400	Medium	Available	No	-	16.06.2025	SB2025061634 SB2025061635 SB2025061927 and 156 more
#VU77107 - Incorrect Default Permissions CVE-2023-2976	CWE-276	Low	No	No	14.4	08.06.2023	SB2023060849 SB2023071712 SB2023072512 and 157 more
#VU66756 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2022-36033	CWE-79	Low	No	No	-	25.08.2022	SB2022082508 SB2022101893 SB2022111644 and 44 more
#VU12312 - Deserialization of Untrusted Data CVE-2016-1000031	CWE-502	High	No	No	-	01.05.2018	SB2017111432 SB2018110601 SB2019051512 and 39 more
#VU12237 - Exposure of sensitive information to an unauthorized actor CVE-2017-3490	CWE-200	Low	No	No	-	26.04.2018	SB2017041803
#VU12232 - Exposure of sensitive information to an unauthorized actor CVE-2017-3483	CWE-200	Low	No	No	-	26.04.2018	SB2017041803
#VU12221 - Permissions, Privileges, and Access Controls CVE-2017-3484	CWE-264	Low	No	No	-	26.04.2018	SB2017041803
#VU12220 - Permissions, Privileges, and Access Controls CVE-2017-3492	CWE-264	Low	No	No	-	26.04.2018	SB2017041803
#VU12219 - Permissions, Privileges, and Access Controls CVE-2017-3496	CWE-264	Low	No	No	-	26.04.2018	SB2017041803
#VU12216 - Exposure of sensitive information to an unauthorized actor CVE-2017-3491	CWE-200	Low	No	No	-	26.04.2018	SB2017041803
#VU12212 - Permissions, Privileges, and Access Controls CVE-2017-3493	CWE-264	Low	No	No	-	26.04.2018	SB2017041803
#VU1053 - Resource Management Errors CVE-2016-5569	CWE-399	Low	No	No	-	24.10.2016	SB2016102410 SB2024072125
#VU1052 - Resource Management Errors CVE-2016-5543	CWE-399	Low	No	No	-	24.10.2016	SB2016102409 SB2024072125