Known vulnerabilities in Oracle FLEXCUBE Investor Servicing - page 2

Vendor: Oracle
Software: Oracle FLEXCUBE Investor Servicing
Software CPE: cpe:2.3:a:oracle:oracle_flexcube_investor_servicing:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 31
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle FLEXCUBE Investor Servicing Oracle FLEXCUBE Investor Servicing is affected by 31 known vulnerabilities: 6 high, 14 medium, 11 low Critical High Medium Low

Vulnerabilities (31)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU109713 - Improper input validation
CVE-2019-2841		 CWE-20 High
No
No
 - 16.07.2019 SB2019071695
#VU109715 - Improper input validation
CVE-2019-2736		 CWE-20 Medium
No
No
 - 16.07.2019 SB2019071695
#VU109717 - Improper input validation
CVE-2019-2847		 CWE-20 Medium
No
No
 - 16.07.2019 SB2019071695
#VU109720 - Improper input validation
CVE-2019-2843		 CWE-20 Medium
No
No
 - 16.07.2019 SB2019071695
#VU109725 - Improper input validation
CVE-2019-2845		 CWE-20 Low
No
No
 - 16.07.2019 SB2019071695
#VU14515 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2018-1000632		 CWE-611 Low
No
No
 - 21.08.2018 SB2018082321
SB2018120722
SB2018121006
and 20 more
#VU12238 - Permissions, Privileges, and Access Controls
CVE-2017-3487		 CWE-264 Low
No
No
 - 26.04.2018 SB2017041803
#VU12223 - Permissions, Privileges, and Access Controls
CVE-2017-3288		 CWE-264 Low
No
No
 - 26.04.2018 SB2017041803
#VU12222 - Permissions, Privileges, and Access Controls
CVE-2017-3489		 CWE-264 Low
No
No
 - 26.04.2018 SB2017041803
#VU12217 - Permissions, Privileges, and Access Controls
CVE-2017-3488		 CWE-264 Low
No
No
 - 26.04.2018 SB2017041803
#VU12127 - Deserialization of Untrusted Data
CVE-2017-5645		 CWE-502 High
No
No
 - 24.04.2018 SB2017040201
SB2019011707
SB2017090512
and 40 more


Showing elements 21 - 40 out of 31