Oracle Flexcube Private Banking vulnerabilities

• x-stream xstream, debian linux, fedoraproject fedora +8 more +10 more Denial of Service by injecting highly recursive collections or maps in XStream CVE-2021-43859 Fix available 7.5 HighFebruary 1, 2022
• apache log4j, apache software foundation log4j2, cisco cloudcenter +20 more +22 more Apache Log4j2 vulnerable to RCE via JDBC Appender when attacker controls configuration CVE-2021-44832 Public exploitFix available EPSS 97.9% 6.6 MediumDecember 28, 2021
• apache software foundation santuario, apache cxf, santuario xml security for java +16 more +18 more Bypass of the secureValidation property CVE-2021-40690 Fix available 7.5 HighSeptember 19, 2021
• oracle advanced networking option, agile engineering data management, agile product lifecycle management +108 more +110 more Vulnerability in the Advanced Networking Option component of Oracle Database Server. Supported... CVE-2021-2351 8.3 HighJuly 20, 2021
• apache activemq, artemis, debian linux +5 more +7 more ActiveMQ: LDAP-Authentication does not verify passwords on servers with anonymous bind CVE-2021-26117 Fix available EPSS 11.3% 7.5 HighJanuary 27, 2021
• eclipse jetty, the eclipse foundation eclipse jetty, apache kafka +15 more +17 more Buffer not correctly recycled in Gzip Request inflation CVE-2020-27218 Fix available 4.8 MediumNovember 28, 2020
• eclipse jetty, the eclipse foundation eclipse jetty, apache beam +16 more +18 more Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations CVE-2020-27216 Fix available 7.0 HighOctober 23, 2020
• apache ant, fedoraproject fedora, gradle +34 more +36 more Code injection in Apache Ant CVE-2020-11979 Fix available 7.5 HighOctober 1, 2020
• spring by vmware framework, vmware spring framework, netapp oncommand insight +36 more +38 more RFD Protection Bypass via jsessionid CVE-2020-5421 Public exploitFix available EPSS 11.6% 8.7 HighSeptember 19, 2020
• apache activemq, oracle communications diameter signaling router, communications element manager +4 more +6 more Remote code execution in Apache ActiveMQ CVE-2020-11998 Public exploitFix available EPSS 48.9% 9.8 CriticalSeptember 10, 2020
• apache activemq, debian linux, oracle communications diameter signaling router +1 more +3 more Improper Authentication in Apache ActiveMQ CVE-2020-13920 Fix available 5.9 MediumSeptember 10, 2020
• spring by vmware integration, vmware spring integration, oracle banking corporate lending process management +6 more +8 more Kryo Configuration Allows Code Execution with Unknown "Serialization Gadgets" CVE-2020-5413 Fix available 9.8 CriticalJuly 31, 2020
• apache activemq, oracle communications diameter signaling router, communications element manager +4 more +6 more Apache ActiveMQ webconsole admin GUI is open to XSS CVE-2020-1941 Fix available 6.1 MediumMay 14, 2020
• apache camel, oracle communications diameter signaling router, enterprise manager base platform +1 more +3 more Deserialization of Untrusted Data in Apache Camel RabbitMQ CVE-2020-11972 Fix available 9.8 CriticalMay 14, 2020
• apache camel, oracle communications diameter signaling router, enterprise manager base platform +1 more +3 more Apache Camel Netty enables Java deserialization by default CVE-2020-11973 Fix available 9.8 CriticalMay 14, 2020
• apache camel, oracle communications diameter intelligence hub, communications diameter signaling router +2 more +4 more Improper Input Validation in Apache Camel CVE-2020-11971 Fix available EPSS 14.0% 7.5 HighMay 14, 2020
• apache ant, canonical ubuntu linux, fedoraproject fedora +47 more +49 more Sensitive Data Exposure in Apache Ant CVE-2020-1945 Fix available 6.3 MediumMay 14, 2020
• apache log4j, debian linux, oracle communications application session controller +43 more +45 more Improper validation of certificate with host mismatch in Apache Log4j SMTP appender CVE-2020-9488 Public exploitFix available 3.7 LowApril 27, 2020
• apache tika, the apache software foundation apache tika, oracle communications messaging server +3 more +5 more Missing Release of Memory after Effective Lifetime in Apache Tika CVE-2020-9489 Fix available 5.5 MediumApril 27, 2020
• apache tika, canonical ubuntu linux, debian linux +3 more +5 more Infinite Loop in Apache Tika CVE-2020-1951 Fix available 5.5 MediumMarch 23, 2020
• apache tika, canonical ubuntu linux, debian linux +3 more +5 more Uncontrolled Resource Consumption in Apache Tika CVE-2020-1950 Fix available 5.5 MediumMarch 23, 2020
• spring framework, vmware spring framework, oracle application testing suite +25 more +27 more CSRF Attack via CORS Preflight Requests with Spring MVC or Spring WebFlux CVE-2020-5397 Fix available 5.3 MediumJanuary 17, 2020
• spring framework, vmware spring framework, netapp data availability services +31 more +33 more RFD Attack via "Content-Disposition" Header Sourced from Request Input by Spring MVC or Spring WebFlux Application CVE-2020-5398 Public exploitFix available EPSS 88.3% 8.0 HighJanuary 16, 2020
• apache cxf, oracle commerce guided search, communications element manager +4 more +6 more Reflected Cross-Site Scripting in Apache CXF CVE-2019-17573 Public exploitFix available 6.1 MediumJanuary 16, 2020
• apache cxf, oracle commerce guided search, communications diameter signaling router +5 more +7 more Private key leak in Apache CXF CVE-2019-12423 Fix available 7.5 HighJanuary 16, 2020
• hibernate hibernate-validator, netapp active iq unified manager, element +185 more +187 more The SafeHtml annotation in Hibernate-Validator does not properly guard against XSS attacks CVE-2019-10219 Public exploitFix available 6.5 MediumNovember 8, 2019
• apache cxf, oracle commerce guided search, enterprise manager base platform +2 more +4 more Potential session hijack in Apache CXF CVE-2019-12419 Fix available EPSS 13.8% 9.8 CriticalNovember 6, 2019
• apache cxf, oracle commerce guided search, flexcube private banking +1 more +3 more Potential DOS attack due to unrestricted attachment count in messages CVE-2019-12406 Fix available 6.5 MediumNovember 6, 2019
• apache poi, oracle application testing suite, banking enterprise originations +24 more +26 more Improper Restriction of XML External Entity Reference in Apache POI CVE-2019-12415 Fix available 5.5 MediumOctober 23, 2019
• oracle application testing suite, banking enterprise collections, banking enterprise originations +19 more +21 more Vulnerability in the Oracle JDeveloper and ADF product of Oracle Fusion Middleware (component:... CVE-2019-2904 EPSS 14.3% 9.8 CriticalOctober 16, 2019
• apache tomee, bouncycastle bc-java, netapp active iq unified manager +18 more +20 more Out-of-Memory Error in Bouncy Castle Crypto CVE-2019-17359 Fix available 7.5 HighOctober 8, 2019
• apache commons compress, fedoraproject fedora, oracle banking payments +16 more +18 more Denial of Service in Apache Commons Compress CVE-2019-12402 Fix available EPSS 16.2% 7.5 HighAugust 29, 2019
• apache commons beanutils, nifi, debian linux +57 more +59 more Insecure Deserialization in Apache Commons Beanutils CVE-2019-10086 Fix available EPSS 29.1% 7.3 HighAugust 20, 2019
• softwareag quartz, apache tomee, atlassian jira service management +28 more +30 more XML external entity injection in Terracotta Quartz Scheduler CVE-2019-13990 Public exploitFix available EPSS 16.6% 9.8 CriticalJuly 26, 2019
• apache camel, oracle enterprise data quality, enterprise manager base platform +2 more +4 more XML External Entity injection in Apache Camel CVE-2019-0188 Fix available 7.5 HighMay 28, 2019
• apache axis 1.4, axis, oracle agile engineering data management +35 more +37 more Server Side Request Forgery in Apache Axis CVE-2019-0227 Public exploitFix available EPSS 91.9% 7.5 HighMay 1, 2019
• mchange c3p0, fedoraproject fedora, oracle communications ip service activator +8 more +10 more Billion laughs attack in c3p0 CVE-2019-5427 Public exploitFix available 7.5 HighApril 22, 2019
• eclipse jetty, the eclipse foundation eclipse jetty, debian linux +24 more +26 more Installation information leak in Eclipse Jetty CVE-2019-10247 Fix available 5.3 MediumApril 22, 2019
• eclipse jetty, the eclipse foundation eclipse jetty, netapp element +23 more +25 more Information Exposure vulnerability in Eclipse Jetty CVE-2019-10246 Fix available 5.3 MediumApril 22, 2019
• broadcom spring web services, spring web services, oracle financial services analytical applications infrastructure +1 more +3 more Spring Web Services XML External Entity Injection (XXE) CVE-2019-3773 Fix available 9.8 CriticalJanuary 18, 2019
• pivotal spring framework, debian linux, oracle agile product lifecycle management +37 more +39 more DoS Attack via Range Requests CVE-2018-15756 Fix available 7.5 HighOctober 18, 2018
• apache activemq, oracle enterprise repository, flexcube private banking +2 more Improper Certificate Validation in Apache activemq-client CVE-2018-11775 Fix available 7.4 HighSeptember 10, 2018
• apache axis, debian linux, oracle agile engineering data management +35 more +37 more Moderate severity vulnerability that affects apache axis CVE-2018-8032 Public exploitFix available EPSS 10.6% 6.1 MediumAugust 2, 2018
• pivotal spring framework, debian linux, oracle agile product lifecycle management +25 more +27 more Moderate severity vulnerability that affects org.springframework:spring-core CVE-2018-11040 Fix available 7.5 HighJune 25, 2018
• pivotal spring framework, oracle agile product lifecycle management, application testing suite +27 more +29 more Denial of Service in org.springframework:spring-core CVE-2018-1257 Fix available 6.5 MediumMay 11, 2018
• google guava, oracle banking payments, communications ip service activator +14 more +16 more Denial of Service in Google Guava CVE-2018-10237 Fix available 5.9 MediumApril 26, 2018
• oracle flexcube private banking Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services... CVE-2017-10103 6.5 MediumAugust 8, 2017
• oracle flexcube private banking Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services... CVE-2017-10023 6.5 MediumAugust 8, 2017
• oracle flexcube private banking Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services... CVE-2017-10022 4.3 MediumAugust 8, 2017
• oracle flexcube private banking Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services... CVE-2017-10012 5.4 MediumAugust 8, 2017
• Show olderLoading…