Known vulnerabilities in Oracle FLEXCUBE Investor Servicing

Vendor: Oracle
Software: Oracle FLEXCUBE Investor Servicing
Software CPE: cpe:2.3:a:oracle:oracle_flexcube_investor_servicing:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 31
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle FLEXCUBE Investor Servicing Oracle FLEXCUBE Investor Servicing is affected by 31 known vulnerabilities: 6 high, 14 medium, 11 low Critical High Medium Low

Vulnerabilities (31)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU121714 - Improper input validation
CVE-2026-21973		 CWE-20 High
No
No
 - 20.01.2026 SB20260120130
#VU86625 - Resource exhaustion
CVE-2024-26308		 CWE-400 Medium
No
No
 - 20.02.2024 SB2024022033
SB2024022937
SB2024031520
and 138 more
#VU77107 - Incorrect Default Permissions
CVE-2023-2976		 CWE-276 Low
No
No
 - 08.06.2023 SB2023060849
SB2023071712
SB2023072512
and 157 more
#VU75409 - Improper input validation
CVE-2023-20863		 CWE-20 Medium
No
No
 - 21.04.2023 SB2023042131
SB2023042132
SB2023050511
and 88 more
#VU75044 - Uncontrolled Recursion
CVE-2023-1370		 CWE-674 Medium
No
No
 - 12.04.2023 SB2023041258
SB2023041259
SB2023041809
and 130 more
#VU70441 - Insufficient Verification of Data Authenticity
CVE-2021-37533		 CWE-345 Low
No
No
 - 20.12.2022 SB2022122007
SB2022123001
SB2023011876
and 82 more
#VU70385 - Deserialization of Untrusted Data
CVE-2022-1471		 CWE-502 High
Available
No
 - 15.12.2022 SB2022121539
SB2022121540
SB2022121928
and 124 more
#VU68635 - Deserialization of Untrusted Data
CVE-2022-42003		 CWE-502 Medium
No
No
 - 25.10.2022 SB2022102509
SB2022102510
SB2022103117
and 208 more
#VU55044 - Improper input validation
CVE-2021-2351		 CWE-20 High
No
No
 - 20.07.2021 SB2021072053
SB2022011824
SB2022011825
and 110 more
#VU30010 - Improper input validation
CVE-2020-14569		 CWE-20 High
No
No
 - 16.07.2020 SB2020071665
#VU27924 - Incorrect Default Permissions
CVE-2020-1945		 CWE-276 Low
No
No
 - 15.05.2020 SB2020051501
SB2020052114
SB2020060205
and 48 more
#VU27487 - Improper Certificate Validation
CVE-2020-9488		 CWE-295 Low
No
No
 - 04.05.2020 SB2020050406
SB2020071606
SB2020071620
and 67 more
#VU24872 - Improper input validation
CVE-2020-2723		 CWE-20 Medium
No
No
 - 04.02.2020 SB2020011471
#VU24876 - Improper input validation
CVE-2020-2721		 CWE-20 Medium
No
No
 - 04.02.2020 SB2020011471
#VU24883 - Improper input validation
CVE-2020-2720		 CWE-20 Medium
No
No
 - 04.02.2020 SB2020011471
#VU24884 - Improper input validation
CVE-2020-2722		 CWE-20 Medium
No
No
 - 04.02.2020 SB2020011471
#VU24889 - Improper input validation
CVE-2020-2724		 CWE-20 Low
No
No
 - 04.02.2020 SB2020011471
#VU22185 - Resource Management Errors
CVE-2019-12402		 CWE-399 Medium
No
No
 - 23.10.2019 SB2019083014
SB2020042210
SB2020071665
and 13 more
#VU19595 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2019-13990		 CWE-611 Medium
No
No
 - 01.08.2019 SB2019080104
SB2020042114
SB2020042350
and 26 more
#VU109722 - Improper input validation
CVE-2019-2846		 CWE-20 Medium
No
No
 - 16.07.2019 SB2019071695


Showing elements 1 - 20 out of 31