Flexcube Investor Servicing (Oracle) - vulnerabilities (CVEs)

45 CVEs, 0 in the last 30 days, 25 known versions, newest CVE from 2026-01-20. Vendor: Oracle.

CVEs of Flexcube Investor Servicing

• CVE-2026-21973 - CVSS 8.1 (high), 2026-01-20: Vulnerability in the Oracle FLEXCUBE Investor Servicing product of Oracle Financial Services Applications (component: Security Management System). Supported…
• CVE-2021-2351 - CVSS 8.3 (high), 2021-07-21: Vulnerability in the Advanced Networking Option component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c.…
• CVE-2020-14569 - CVSS 8.1 (high), 2020-07-15: Vulnerability in the Oracle FLEXCUBE Investor Servicing product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that…
• CVE-2020-1945 - CVSS 6.3 (medium), 2020-05-14: Apache Ant 1.1 to 1.9.14 and 1.10.0 to 1.10.7 uses the default temporary directory identified by the Java system property java.io.tmpdir for several tasks and…
• CVE-2020-2720 - CVSS 5.4 (medium), 2020-01-15: Vulnerability in the Oracle FLEXCUBE Investor Servicing product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that…
• CVE-2020-2723 - CVSS 7.1 (high), 2020-01-15: Vulnerability in the Oracle FLEXCUBE Investor Servicing product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that…
• CVE-2020-2722 - CVSS 5.4 (medium), 2020-01-15: Vulnerability in the Oracle FLEXCUBE Investor Servicing product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that…
• CVE-2020-2721 - CVSS 6.5 (medium), 2020-01-15: Vulnerability in the Oracle FLEXCUBE Investor Servicing product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that…
• CVE-2020-2724 - CVSS 4.3 (medium), 2020-01-15: Vulnerability in the Oracle FLEXCUBE Investor Servicing product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that…
• CVE-2019-10219 - CVSS 6.5 (medium), 2019-11-08: A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious…
• CVE-2019-12402 - CVSS 7.5 (high), 2019-08-30: The file name encoding algorithm used internally in Apache Commons Compress 1.15 to 1.18 can get into an infinite loop when faced with specially crafted…
• CVE-2019-13990 - CVSS 9.8 (critical), 2019-07-26: initDocumentParser in xml/XMLSchedulingDataProcessor.java in Terracotta Quartz Scheduler through 2.3.0 allows XXE attacks via a job description.
• CVE-2019-2845 - CVSS 3.5 (low), 2019-07-23: Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions…
• CVE-2019-2843 - CVSS 5.4 (medium), 2019-07-23: Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions…
• CVE-2019-2847 - CVSS 5.7 (medium), 2019-07-23: Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions…
• CVE-2019-2841 - CVSS 8.1 (high), 2019-07-23: Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions…
• CVE-2019-2846 - CVSS 5.3 (medium), 2019-07-23: Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions…
• CVE-2019-2736 - CVSS 6.1 (medium), 2019-07-23: Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions…
• CVE-2018-1000632 - CVSS 7.5 (high), 2018-08-20: dom4j version prior to version 2.1.1 contains a CWE-91: XML Injection vulnerability in Class: Element. Methods: addElement, addAttribute that can result in an…
• CVE-2018-3030 - CVSS 6.5 (medium), 2018-07-18: Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions…
• CVE-2018-3033 - CVSS 5.3 (medium), 2018-07-18: Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions…
• CVE-2018-3029 - CVSS 5.3 (medium), 2018-07-18: Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions…
• CVE-2018-3032 - CVSS 5.4 (medium), 2018-07-18: Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions…
• CVE-2018-3035 - CVSS 8.1 (high), 2018-07-18: Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions…
• CVE-2018-3028 - CVSS 6.3 (medium), 2018-07-18: Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions…
• CVE-2018-3031 - CVSS 5.4 (medium), 2018-07-18: Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions…
• CVE-2018-3034 - CVSS 5.4 (medium), 2018-07-18: Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions…
• CVE-2018-2898 - CVSS 6.1 (medium), 2018-07-18: Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions…
• CVE-2018-10237 - CVSS 5.9 (medium), 2018-04-26: Unbounded memory allocation in Google Guava 11.0 through 24.x before 24.1.1 allows remote attackers to conduct denial of service attacks against servers that…
• CVE-2018-2748 - CVSS 6.1 (medium), 2018-04-19: Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core module). Supported versions that…
• CVE-2018-2747 - CVSS 6.5 (medium), 2018-04-19: Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core module). Supported versions that…
• CVE-2018-2749 - CVSS 5.4 (medium), 2018-04-19: Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core module). Supported versions that…
• CVE-2018-2746 - CVSS 7.1 (high), 2018-04-19: Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core module). Supported versions that…
• CVE-2017-3488 - CVSS 6.5 (medium), 2017-04-24: Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Unit Trust). Supported versions…
• CVE-2017-3487 - CVSS 3.1 (low), 2017-04-24: Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Unit Trust). Supported versions…
• CVE-2017-3489 - CVSS 5.4 (medium), 2017-04-24: Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Security Management System).…
• CVE-2017-3288 - CVSS 5.4 (medium), 2017-04-24: Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Unit Trust). Supported versions…
• CVE-2017-5645 - CVSS 9.8 (critical), 2017-04-17: In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially…
• CVE-2016-8306 - CVSS 5.4 (medium), 2017-01-27: Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are…
• CVE-2016-8316 - CVSS 5.4 (medium), 2017-01-27: Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are…
• CVE-2016-8315 - CVSS 8.1 (high), 2017-01-27: Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure Code). Supported…
• CVE-2016-8319 - CVSS 6.1 (medium), 2017-01-27: Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are…
• CVE-2016-8309 - CVSS 4.3 (medium), 2017-01-27: Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are…
• CVE-2016-8317 - CVSS 5.3 (medium), 2017-01-27: Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Unit Trust). Supported versions…
• CVE-2016-5509 - CVSS 3.1 (low), 2017-01-27: Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are…