Flexcube Investor Servicing

CVEs (45)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2018-2748	Oracle Corporation Banking Corporate Lending	Med	0.40	6.1	0.01	Apr 19, 2018	Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core module). Supported versions that are affected are 12.3.0, 12.4.0, 12.5.0 and 14.0.0. Easily exploitable vulnerability allows unauthenticated attacker…
CVE-2016-8319	Oracle Corporation Flexcube Investor Servicing	Med	0.40	6.1	0.01	Jan 27, 2017	Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are affected are 12.0.1, 12.0.2,12.0.4,12.1.0 and 12.3.0. Easily exploitable vulnerability allows unauthenticated attacker…
CVE-2018-10237	Google Guava	Med	0.39	5.9	0.05	Apr 26, 2018	Unbounded memory allocation in Google Guava 11.0 through 24.x before 24.1.1 allows remote attackers to conduct denial of service attacks against servers that depend on this library and deserialize attacker-provided data, because the AtomicDoubleArray class (when serialized with…
CVE-2019-2847	Oracle Corporation Flexcube Investor Servicing	Med	0.37	5.7	0.01	Jul 23, 2019	Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.1, 12.0.3, 12.0.4, 12.1.0, 12.3.0, 12.4.0, 14.0.0 and 14.1.0. Easily exploitable…
CVE-2020-2722	Oracle Corporation Flexcube Investor Servicing	Med	0.35	5.4	0.01	Jan 15, 2020	Vulnerability in the Oracle FLEXCUBE Investor Servicing product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are affected are 12.1.0-12.4.0 and 14.0.0-14.1.0. Easily exploitable vulnerability allows unauthenticated attacker with…
CVE-2020-2720	Oracle Corporation Flexcube Investor Servicing	Med	0.35	5.4	0.01	Jan 15, 2020	Vulnerability in the Oracle FLEXCUBE Investor Servicing product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are affected are 12.1.0-12.4.0 and 14.0.0-14.1.0. Easily exploitable vulnerability allows low privileged attacker with…
CVE-2019-2846	Oracle Corporation Flexcube Investor Servicing	Med	0.35	5.3	0.01	Jul 23, 2019	Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.1, 12.0.3, 12.0.4, 12.1.0, 12.3.0, 12.4.0, 14.0.0 and 14.1.0. Easily exploitable…
CVE-2019-2843	Oracle Corporation Flexcube Investor Servicing	Med	0.35	5.4	0.01	Jul 23, 2019	Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.1, 12.0.3, 12.0.4, 12.1.0, 12.3.0, 12.4.0, 14.0.0 and 14.1.0. Easily exploitable…
CVE-2018-3034	Oracle Corporation Flexcube Investor Servicing	Med	0.35	5.4	0.01	Jul 18, 2018	Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.4, 12.1.0, 12.3.0 and 12.4.0. Easily exploitable vulnerability allows low privileged attacker…
CVE-2018-3033	Oracle Corporation Flexcube Investor Servicing	Med	0.35	5.3	0.02	Jul 18, 2018	Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.4, 12.1.0, 12.3.0 and 12.4.0. Difficult to exploit vulnerability allows low privileged…
CVE-2018-3032	Oracle Corporation Flexcube Investor Servicing	Med	0.35	5.4	0.01	Jul 18, 2018	Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.4, 12.1.0, 12.3.0 and 12.4.0. Easily exploitable vulnerability allows low privileged attacker…
CVE-2018-3031	Oracle Corporation Flexcube Investor Servicing	Med	0.35	5.4	0.02	Jul 18, 2018	Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.4, 12.1.0, 12.3.0 and 12.4.0. Easily exploitable vulnerability allows low privileged attacker…
CVE-2018-3029	Oracle Corporation Flexcube Investor Servicing	Med	0.35	5.3	0.02	Jul 18, 2018	Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.4, 12.1.0, 12.3.0 and 12.4.0. Easily exploitable vulnerability allows unauthenticated…
CVE-2018-2749	Oracle Corporation Banking Corporate Lending	Med	0.35	5.4	0.01	Apr 19, 2018	Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core module). Supported versions that are affected are 12.3.0, 12.4.0, 12.5.0 and 14.0.0. Easily exploitable vulnerability allows low privileged attacker with…
CVE-2017-3489	Oracle Corporation Flexcube Investor Servicing	Med	0.35	5.4	0.01	Apr 24, 2017	Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Security Management System). Supported versions that are affected are 12.0.1, 12.0.2, 12.0.3, 12.0.4, 12.1.0, 12.2.0 and 12.3.0. Easily "exploitable"…
CVE-2017-3288	Oracle Corporation Flexcube Investor Servicing	Med	0.35	5.4	0.01	Apr 24, 2017	Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Unit Trust). Supported versions that are affected are 12.0.1, 12.0.2, 12.0.3, 12.0.4, 12.1.0, 12.2.0 and 12.3.0. Easily "exploitable" vulnerability allows…
CVE-2016-8317	Oracle Corporation Flexcube Investor Servicing	Med	0.35	5.3	0.01	Jan 27, 2017	Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Unit Trust). Supported versions that are affected are 12.0.1, 12.0.2,12.0.4,12.1.0 and 12.3.0. Difficult to exploit vulnerability allows low privileged…
CVE-2016-8316	Oracle Corporation Flexcube Investor Servicing	Med	0.35	5.4	0.01	Jan 27, 2017	Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are affected are 12.0.1, 12.0.2,12.0.4,12.1.0 and 12.3.0. Easily exploitable vulnerability allows low privileged attacker…
CVE-2016-8306	Oracle Corporation Flexcube Investor Servicing	Med	0.35	5.4	0.01	Jan 27, 2017	Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are affected are 12.0.1, 12.0.2,12.0.4,12.1.0 and 12.3.0. Easily exploitable vulnerability allows low privileged attacker…
CVE-2019-10219	Hibernate Hibernate Validator	Med	0.33	6.1	0.02	Nov 8, 2019	A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.

CVE-2018-2748MedApr 19, 2018
Oracle Corporation
Banking Corporate Lending
risk 0.40cvss 6.1epss 0.01
Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core module). Supported versions that are affected are 12.3.0, 12.4.0, 12.5.0 and 14.0.0. Easily exploitable vulnerability allows unauthenticated attacker…
CVE-2016-8319MedJan 27, 2017
Oracle Corporation
Flexcube Investor Servicing
risk 0.40cvss 6.1epss 0.01
Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are affected are 12.0.1, 12.0.2,12.0.4,12.1.0 and 12.3.0. Easily exploitable vulnerability allows unauthenticated attacker…
CVE-2018-10237MedApr 26, 2018
Google
Guava
risk 0.39cvss 5.9epss 0.05
Unbounded memory allocation in Google Guava 11.0 through 24.x before 24.1.1 allows remote attackers to conduct denial of service attacks against servers that depend on this library and deserialize attacker-provided data, because the AtomicDoubleArray class (when serialized with…
CVE-2019-2847MedJul 23, 2019
Oracle Corporation
Flexcube Investor Servicing
risk 0.37cvss 5.7epss 0.01
Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.1, 12.0.3, 12.0.4, 12.1.0, 12.3.0, 12.4.0, 14.0.0 and 14.1.0. Easily exploitable…
CVE-2020-2722MedJan 15, 2020
Oracle Corporation
Flexcube Investor Servicing
risk 0.35cvss 5.4epss 0.01
Vulnerability in the Oracle FLEXCUBE Investor Servicing product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are affected are 12.1.0-12.4.0 and 14.0.0-14.1.0. Easily exploitable vulnerability allows unauthenticated attacker with…
CVE-2020-2720MedJan 15, 2020
Oracle Corporation
Flexcube Investor Servicing
risk 0.35cvss 5.4epss 0.01
Vulnerability in the Oracle FLEXCUBE Investor Servicing product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are affected are 12.1.0-12.4.0 and 14.0.0-14.1.0. Easily exploitable vulnerability allows low privileged attacker with…
CVE-2019-2846MedJul 23, 2019
Oracle Corporation
Flexcube Investor Servicing
risk 0.35cvss 5.3epss 0.01
Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.1, 12.0.3, 12.0.4, 12.1.0, 12.3.0, 12.4.0, 14.0.0 and 14.1.0. Easily exploitable…
CVE-2019-2843MedJul 23, 2019
Oracle Corporation
Flexcube Investor Servicing
risk 0.35cvss 5.4epss 0.01
Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.1, 12.0.3, 12.0.4, 12.1.0, 12.3.0, 12.4.0, 14.0.0 and 14.1.0. Easily exploitable…
CVE-2018-3034MedJul 18, 2018
Oracle Corporation
Flexcube Investor Servicing
risk 0.35cvss 5.4epss 0.01
Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.4, 12.1.0, 12.3.0 and 12.4.0. Easily exploitable vulnerability allows low privileged attacker…
CVE-2018-3033MedJul 18, 2018
Oracle Corporation
Flexcube Investor Servicing
risk 0.35cvss 5.3epss 0.02
Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.4, 12.1.0, 12.3.0 and 12.4.0. Difficult to exploit vulnerability allows low privileged…
CVE-2018-3032MedJul 18, 2018
Oracle Corporation
Flexcube Investor Servicing
risk 0.35cvss 5.4epss 0.01
Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.4, 12.1.0, 12.3.0 and 12.4.0. Easily exploitable vulnerability allows low privileged attacker…
CVE-2018-3031MedJul 18, 2018
Oracle Corporation
Flexcube Investor Servicing
risk 0.35cvss 5.4epss 0.02
Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.4, 12.1.0, 12.3.0 and 12.4.0. Easily exploitable vulnerability allows low privileged attacker…
CVE-2018-3029MedJul 18, 2018
Oracle Corporation
Flexcube Investor Servicing
risk 0.35cvss 5.3epss 0.02
Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.4, 12.1.0, 12.3.0 and 12.4.0. Easily exploitable vulnerability allows unauthenticated…
CVE-2018-2749MedApr 19, 2018
Oracle Corporation
Banking Corporate Lending
risk 0.35cvss 5.4epss 0.01
Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core module). Supported versions that are affected are 12.3.0, 12.4.0, 12.5.0 and 14.0.0. Easily exploitable vulnerability allows low privileged attacker with…
CVE-2017-3489MedApr 24, 2017
Oracle Corporation
Flexcube Investor Servicing
risk 0.35cvss 5.4epss 0.01
Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Security Management System). Supported versions that are affected are 12.0.1, 12.0.2, 12.0.3, 12.0.4, 12.1.0, 12.2.0 and 12.3.0. Easily "exploitable"…
CVE-2017-3288MedApr 24, 2017
Oracle Corporation
Flexcube Investor Servicing
risk 0.35cvss 5.4epss 0.01
Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Unit Trust). Supported versions that are affected are 12.0.1, 12.0.2, 12.0.3, 12.0.4, 12.1.0, 12.2.0 and 12.3.0. Easily "exploitable" vulnerability allows…
CVE-2016-8317MedJan 27, 2017
Oracle Corporation
Flexcube Investor Servicing
risk 0.35cvss 5.3epss 0.01
Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Unit Trust). Supported versions that are affected are 12.0.1, 12.0.2,12.0.4,12.1.0 and 12.3.0. Difficult to exploit vulnerability allows low privileged…
CVE-2016-8316MedJan 27, 2017
Oracle Corporation
Flexcube Investor Servicing
risk 0.35cvss 5.4epss 0.01
Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are affected are 12.0.1, 12.0.2,12.0.4,12.1.0 and 12.3.0. Easily exploitable vulnerability allows low privileged attacker…
CVE-2016-8306MedJan 27, 2017
Oracle Corporation
Flexcube Investor Servicing
risk 0.35cvss 5.4epss 0.01
Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are affected are 12.0.1, 12.0.2,12.0.4,12.1.0 and 12.3.0. Easily exploitable vulnerability allows low privileged attacker…
CVE-2019-10219MedNov 8, 2019
Hibernate
Hibernate Validator
risk 0.33cvss 6.1epss 0.02
A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.

Page 2 of 3