Known vulnerabilities in Oracle FLEXCUBE Private Banking - page 2

Vendor: Oracle
Software: Oracle FLEXCUBE Private Banking
Software CPE: cpe:2.3:a:oracle:oracle_flexcube_private_banking:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 47
Public exploits: 5
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle FLEXCUBE Private Banking Oracle FLEXCUBE Private Banking is affected by 47 known vulnerabilities: 1 critical, 11 high, 17 medium, 18 low Critical High Medium Low

Vulnerabilities (47)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU27954 - Deserialization of Untrusted Data
CVE-2020-11973		 CWE-502 High
No
No
 - 17.05.2020 SB2020051702
SB2020102703
SB2020102927
and 1 more
#VU27953 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-1941		 CWE-79 Low
No
No
 - 17.05.2020 SB2020051701
SB2020071609
SB2020071610
and 5 more
#VU27924 - Incorrect Default Permissions
CVE-2020-1945		 CWE-276 Low
No
No
 - 15.05.2020 SB2020051501
SB2020052114
SB2020060205
and 48 more
#VU27701 - Insufficiently Protected Credentials
CVE-2019-12423		 CWE-522 Medium
No
No
 - 12.05.2020 SB2020011628
SB2020071609
SB2020071610
and 7 more
#VU27487 - Improper Certificate Validation
CVE-2020-9488		 CWE-295 Low
No
No
 - 04.05.2020 SB2020050406
SB2020071606
SB2020071620
and 67 more
#VU26470 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2020-1951		 CWE-835 Medium
No
No
 - 31.03.2020 SB2020033108
SB2020071605
SB2020102927
and 3 more
#VU25067 - Improper input validation
CVE-2019-10247		 CWE-20 Medium
No
No
 - 07.02.2020 SB2020011489
SB2020032710
SB2020042110
and 25 more
#VU24597 - Improper input validation
CVE-2019-2904		 CWE-20 High
No
No
 - 25.01.2020 SB2020011463
SB2020042108
SB2020042109
and 20 more
#VU24494 - Improper input validation
CVE-2019-10088		 CWE-20 High
No
No
 - 22.01.2020 SB2020012309
SB2020042111
SB2020041458
and 1 more
#VU24468 - Improper input validation
CVE-2019-0227		 CWE-20 Medium
Available
No
 - 21.01.2020 SB2020012205
SB2020012308
SB2020012309
and 40 more
#VU22576 - Improper Authentication
CVE-2019-12419		 CWE-287 Medium
No
No
 - 07.11.2019 SB2019110708
SB2020041458
SB20200114138
#VU22545 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2019-12415		 CWE-611 High
No
No
 - 06.11.2019 SB2019110635
SB2020012308
SB2020012309
and 42 more
#VU22272 - Missing release of memory after effective lifetime
CVE-2019-17359		 CWE-401 Medium
No
No
 - 24.10.2019 SB2019102418
SB2020011478
SB2020042338
and 14 more
#VU19595 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2019-13990		 CWE-611 Medium
No
No
 - 01.08.2019 SB2019080104
SB2020042114
SB2020042350
and 26 more
#VU18570 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2019-0188		 CWE-611 Medium
No
No
 - 22.05.2019 SB2019052202
SB2019101556
SB2020071664
and 1 more
#VU16676 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2018-17197		 CWE-835 Low
No
No
 - 22.12.2018 SB2018122407
SB2020042337
SB2019071640
and 2 more
#VU15467 - Improper input validation
CVE-2018-15756		 CWE-20 Low
No
No
 - 22.10.2018 SB2018102305
SB2020012203
SB2020032701
and 28 more
#VU13523 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2018-8039		 CWE-300 Low
No
No
 - 28.06.2018 SB2018062910
SB2019021223
SB2020042115
and 11 more
#VU12842 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2017-12626		 CWE-835 Low
No
No
 - 18.05.2018 SB2018050312
SB2020011463
SB2020011481
and 24 more
#VU12213 - Permissions, Privileges, and Access Controls
CVE-2017-3472		 CWE-264 Low
No
No
 - 26.04.2018 SB2017041803


Showing elements 21 - 40 out of 47