Known vulnerabilities in Oracle FLEXCUBE Private Banking

Vendor: Oracle
Software: Oracle FLEXCUBE Private Banking
Software CPE: cpe:2.3:a:oracle:oracle_flexcube_private_banking:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 47
Public exploits: 5
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle FLEXCUBE Private Banking Oracle FLEXCUBE Private Banking is affected by 47 known vulnerabilities: 1 critical, 11 high, 17 medium, 18 low Critical High Medium Low

Vulnerabilities (47)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU83545 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
CVE-2022-46337		 CWE-90 High
No
No
 - 28.11.2023 SB2023112861
SB2024011806
SB2024020107
and 34 more
#VU82690 - Deserialization of Untrusted Data
CVE-2023-46604		 CWE-502 Critical
Available
Exploited
 - 02.11.2023 SB2023110251
SB2023111311
SB2023112410
and 36 more
#VU81728 - Resource exhaustion
CVE-2023-44487		 CWE-400 High
Available
Exploited
 - 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 650 more
#VU75431 - Uncontrolled Recursion
CVE-2023-1436		 CWE-674 Medium
No
No
 - 24.04.2023 SB2023042409
SB2023042411
SB2023050111
and 86 more
#VU60527 - Resource exhaustion
CVE-2021-43859		 CWE-400 Medium
No
No
 - 11.02.2022 SB2022021102
SB2022021103
SB2022042250
and 26 more
#VU59098 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-44832		 CWE-94 Medium
No
No
 - 28.12.2021 SB2021122816
SB2021123002
SB2022010601
and 197 more
#VU58198 - Exposure of sensitive information to an unauthorized actor
CVE-2021-40690		 CWE-200 Medium
No
No
 - 16.11.2021 SB2021111622
SB2021111712
SB2022012032
and 37 more
#VU55044 - Improper input validation
CVE-2021-2351		 CWE-20 High
No
No
 - 20.07.2021 SB2021072053
SB2022011824
SB2022011825
and 110 more
#VU52502 - Improper input validation
CVE-2020-27218		 CWE-20 Medium
No
No
 - 23.04.2021 SB2021042305
SB2021042635
SB2021063002
and 15 more
#VU50072 - Improper Authentication
CVE-2021-26117		 CWE-287 High
No
No
 - 27.01.2021 SB2021012801
SB2021072724
SB20230719107
and 2 more
#VU49739 - Improper input validation
CVE-2020-5421		 CWE-20 Medium
Available
No
 - 20.01.2021 SB2021012002
SB2021012008
SB2021012015
and 39 more
#VU46680 - Improper Authentication
CVE-2020-11998		 CWE-287 High
No
No
 - 14.09.2020 SB2020091416
SB2021012050
SB2021042523
and 2 more
#VU31796 - Deserialization of Untrusted Data
CVE-2020-5413		 CWE-502 High
No
No
 - 24.07.2020 SB2020072408
SB2021042523
SB2021072724
#VU34161 - Operation on a Resource after Expiration or Release
CVE-2019-17638		 CWE-672 High
No
No
 - 09.07.2020 SB2020070939
SB2020081709
SB2020102107
and 11 more
#VU28463 - Use of Insufficiently Random Values
CVE-2020-5408		 CWE-330 Medium
No
No
 - 01.06.2020 SB2020060107
SB2020102832
SB2020102833
and 13 more
#VU47428 - Permissions, Privileges, and Access Controls
CVE-2020-11979		 CWE-264 Low
No
No
 - 14.05.2020 SB2020100804
SB2020100815
SB2020111614
and 51 more
#VU34420 - Missing release of memory after effective lifetime
CVE-2020-9489		 CWE-401 Medium
No
No
 - 27.04.2020 SB2020042727
SB2020102706
SB2020102845
and 2 more
#VU27264 - Improper input validation
CVE-2020-5398		 CWE-20 Medium
Available
No
 - 23.04.2020 SB2020042353
SB2020071609
SB2020071610
and 21 more
#VU20844 - Protection Mechanism Failure
CVE-2019-10086		 CWE-693 Low
No
No
 - 04.09.2019 SB2019090405
SB2019090406
SB2019121902
and 112 more
#VU17185 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2019-3773		 CWE-611 Low
No
No
 - 24.01.2019 SB2019012402
SB2021012213
SB2021042523


Showing elements 1 - 20 out of 47