Known vulnerabilities in Oracle FLEXCUBE Universal Banking

Vendor: Oracle
Software: Oracle FLEXCUBE Universal Banking
Software CPE: cpe:2.3:a:oracle:oracle_flexcube_universal_banking:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 73
Public exploits: 3
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle FLEXCUBE Universal Banking Oracle FLEXCUBE Universal Banking is affected by 73 known vulnerabilities: 3 high, 45 medium, 25 low Critical High Medium Low

Vulnerabilities (73)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU121715 - Improper input validation
CVE-2026-21978		 CWE-20 Medium
No
No
 - 20.01.2026 SB20260120128
#VU89801 - Server-Side Request Forgery (SSRF)
CVE-2024-22262		 CWE-918 Medium
No
No
 - 24.05.2024 SB2024052420
SB2024052423
SB2024052708
and 76 more
#VU87779 - Exposure of sensitive information to an unauthorized actor
CVE-2024-29025		 CWE-200 Medium
No
No
 - 25.03.2024 SB2024032532
SB2024040230
SB2024042995
and 95 more
#VU82127 - Improper input validation
CVE-2023-22118		 CWE-20 Medium
No
No
 14.3.0 17.10.2023 SB2023101782
#VU82129 - Improper input validation
CVE-2023-22119		 CWE-20 Medium
No
No
 14.3.0 17.10.2023 SB2023101782
#VU82134 - Improper input validation
CVE-2023-22117		 CWE-20 Medium
No
No
 14.3.0 17.10.2023 SB2023101782
#VU77573 - Resource exhaustion
CVE-2023-34462		 CWE-400 Medium
No
No
 - 20.06.2023 SB2023062026
SB2023072521
SB2023072539
and 98 more
#VU76427 - Resource Management Errors
CVE-2023-20883		 CWE-399 Medium
No
No
 - 23.05.2023 SB2023052310
SB2023052311
SB2023061548
and 42 more
#VU75562 - Improper input validation
CVE-2023-20861		 CWE-20 Medium
No
No
 14.7.0.0.0 27.04.2023 SB2023042742
SB2023042746
SB2023042832
and 61 more
#VU75431 - Uncontrolled Recursion
CVE-2023-1436		 CWE-674 Medium
No
No
 14.7.0.0.0 24.04.2023 SB2023042409
SB2023042411
SB2023050111
and 86 more
#VU75409 - Improper input validation
CVE-2023-20863		 CWE-20 Medium
No
No
 - 21.04.2023 SB2023042131
SB2023042132
SB2023050511
and 88 more
#VU75044 - Uncontrolled Recursion
CVE-2023-1370		 CWE-674 Medium
No
No
 14.7.0.0.0 12.04.2023 SB2023041258
SB2023041259
SB2023041809
and 130 more
#VU70530 - Deserialization of Untrusted Data
CVE-2022-45047		 CWE-502 High
Available
No
 14.7.0.0.0 28.12.2022 SB2022122828
SB2022122920
SB2023011148
and 49 more
#VU70527 - Improper input validation
CVE-2022-41966		 CWE-20 Medium
Available
No
 14.7.0.0.0 28.12.2022 SB2022122822
SB2023011211
SB2023020616
and 53 more
#VU70441 - Insufficient Verification of Data Authenticity
CVE-2021-37533		 CWE-345 Low
No
No
 14.7.0.0.0 20.12.2022 SB2022122007
SB2022123001
SB2023011876
and 82 more
#VU70118 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-41881		 CWE-835 Medium
No
No
 14.7.0.0.0 12.12.2022 SB2022121215
SB2023011210
SB2023011757
and 74 more
#VU69293 - Improper input validation
CVE-2022-3171		 CWE-20 Medium
No
No
 14.3.0 14.11.2022 SB2022111433
SB2022111440
SB2022112934
and 105 more
#VU68827 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-42890		 CWE-94 Low
No
No
 14.7.0.0.0 30.10.2022 SB2022103004
SB2022103009
SB2023030742
and 34 more
#VU68635 - Deserialization of Untrusted Data
CVE-2022-42003		 CWE-502 Medium
No
No
 14.7.0.0.0 25.10.2022 SB2022102509
SB2022102510
SB2022103117
and 208 more
#VU66756 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-36033		 CWE-79 Low
No
No
 14.3.0 25.08.2022 SB2022082508
SB2022101893
SB2022111644
and 44 more


Showing elements 1 - 20 out of 73