Flexcube Universal Banking (Oracle) - vulnerabilities (CVEs)

95 CVEs, 0 in the last 30 days, 34 known versions, newest CVE from 2026-01-20. Vendor: Oracle.

CVEs of Flexcube Universal Banking

CVE-2026-21978 - CVSS 6.5 (medium), 2026-01-20: Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Relationship Pricing). Supported versions…
CVE-2023-22117 - CVSS 5.4 (medium), 2023-10-17: Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that…
CVE-2023-22119 - CVSS 5.9 (medium), 2023-10-17: Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that…
CVE-2023-22118 - CVSS 6.5 (medium), 2023-10-17: Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that…
CVE-2022-21577 - CVSS 6.4 (medium), 2022-07-19: Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that…
CVE-2022-21576 - CVSS 6.4 (medium), 2022-07-19: Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that…
CVE-2022-21579 - CVSS 6.4 (medium), 2022-07-19: Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that…
CVE-2022-21578 - CVSS 6.7 (medium), 2022-07-19: Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that…
CVE-2022-21544 - CVSS 7.1 (high), 2022-07-19: Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that…
CVE-2022-21428 - CVSS 6.7 (medium), 2022-07-19: Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that…
CVE-2022-21472 - CVSS 5.9 (medium), 2022-04-19: Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that…
CVE-2022-23437 - CVSS 6.5 (medium), 2022-01-24: There's a vulnerability within the Apache Xerces Java (XercesJ) XML parser when handling specially crafted XML document payloads. This causes, the XercesJ XML…
CVE-2021-45105 - CVSS 5.9 (medium), 2021-12-18: Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups. This…
CVE-2021-41973 - CVSS 6.5 (medium), 2021-11-01: In Apache MINA, a specifically crafted, malformed HTTP request may cause the HTTP Header decoder to loop indefinitely. The decoder assumed that the HTTP…
CVE-2021-37714 - CVSS 7.5 (high), 2021-08-18: jsoup is a Java library for working with HTML. Those using jsoup versions prior to 1.14.2 to parse untrusted HTML or XML may be vulnerable to DOS attacks. If…
CVE-2021-2323 - CVSS 5.9 (medium), 2021-07-21: Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Flex-Branch). Supported versions that are…
CVE-2021-2324 - CVSS 4.6 (medium), 2021-07-21: Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Loans And Deposits). Supported versions…
CVE-2021-35516 - CVSS 7.5 (high), 2021-07-13: When reading a specially crafted 7Z archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for…
CVE-2021-35515 - CVSS 7.5 (high), 2021-07-13: When reading a specially crafted 7Z archive, the construction of the list of codecs that decompress an entry can result in an infinite loop. This could be…
CVE-2021-36090 - CVSS 7.5 (high), 2021-07-13: When reading a specially crafted ZIP archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for…
CVE-2021-35517 - CVSS 7.5 (high), 2021-07-13: When reading a specially crafted TAR archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for…
CVE-2021-30129 - CVSS 6.5 (medium), 2021-07-12: A vulnerability in sshd-core of Apache Mina SSHD allows an attacker to overflow the server causing an OutOfMemory error. This issue affects the SFTP and port…
CVE-2021-31811 - CVSS 5.5 (medium), 2021-06-12: In Apache PDFBox, a carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file. This issue affects Apache PDFBox version 2.0.23…
CVE-2021-27906 - CVSS 5.5 (medium), 2021-03-19: A carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file. This issue affects Apache PDFBox version 2.0.22 and prior 2.0.x…
CVE-2021-27807 - CVSS 5.5 (medium), 2021-03-19: A carefully crafted PDF file can trigger an infinite loop while loading the file. This issue affects Apache PDFBox version 2.0.22 and prior 2.0.x versions.
CVE-2020-11987 - CVSS 8.2 (high), 2021-02-24: Apache Batik 1.13 is vulnerable to server-side request forgery, caused by improper input validation by the NodePickerPanel. By using a specially-crafted…
CVE-2020-14887 - CVSS 6.5 (medium), 2020-10-21: Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that…
CVE-2020-2700 - CVSS 4.3 (medium), 2020-01-15: Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that…
CVE-2020-2699 - CVSS 7.1 (high), 2020-01-15: Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that…
CVE-2020-2685 - CVSS 5.4 (medium), 2020-01-15: Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that…
CVE-2020-2684 - CVSS 6.5 (medium), 2020-01-15: Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that…
CVE-2020-2683 - CVSS 5.4 (medium), 2020-01-15: Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that…
CVE-2019-12399 - CVSS 7.5 (high), 2020-01-14: When Connect workers in Apache Kafka 2.0.0, 2.0.1, 2.1.0, 2.1.1, 2.2.0, 2.2.1, or 2.3.0 are configured with one or more config providers, and a connector is…
CVE-2019-2840 - CVSS 5.7 (medium), 2019-07-23: Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions…
CVE-2019-2839 - CVSS 5.3 (medium), 2019-07-23: Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions…
CVE-2019-2794 - CVSS 5.3 (medium), 2019-07-23: Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions…
CVE-2019-2793 - CVSS 3.5 (low), 2019-07-23: Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions…
CVE-2019-2790 - CVSS 5.4 (medium), 2019-07-23: Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions…
CVE-2019-2754 - CVSS 8.1 (high), 2019-07-23: Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions…
CVE-2019-2744 - CVSS 6.1 (medium), 2019-07-23: Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions…
CVE-2018-3015 - CVSS 8.1 (high), 2018-07-18: Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions…
CVE-2018-3019 - CVSS 5.4 (medium), 2018-07-18: Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions…
CVE-2018-2980 - CVSS 5.4 (medium), 2018-07-18: Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions…
CVE-2018-2979 - CVSS 6.5 (medium), 2018-07-18: Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions…
CVE-2018-2982 - CVSS 5.3 (medium), 2018-07-18: Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions…
CVE-2018-2981 - CVSS 5.4 (medium), 2018-07-18: Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions…
CVE-2018-2975 - CVSS 5.3 (medium), 2018-07-18: Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions…
CVE-2018-2974 - CVSS 6.3 (medium), 2018-07-18: Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions…
CVE-2018-2899 - CVSS 6.1 (medium), 2018-07-18: Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions…
CVE-2018-2747 - CVSS 6.5 (medium), 2018-04-19: Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core module). Supported versions that…
CVE-2018-2749 - CVSS 5.4 (medium), 2018-04-19: Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core module). Supported versions that…
CVE-2018-2748 - CVSS 6.1 (medium), 2018-04-19: Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core module). Supported versions that…
CVE-2018-2746 - CVSS 7.1 (high), 2018-04-19: Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core module). Supported versions that…
CVE-2018-2648 - CVSS 8.8 (high), 2018-01-18: Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions…
CVE-2018-2649 - CVSS 8.1 (high), 2018-01-18: Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions…
CVE-2018-2630 - CVSS 5.4 (medium), 2018-01-18: Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Security Management System).…
CVE-2018-2614 - CVSS 5.3 (medium), 2018-01-18: Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions…
CVE-2017-10363 - CVSS 7.1 (high), 2017-10-19: Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Security). Supported versions that…
CVE-2017-10098 - CVSS 5.4 (medium), 2017-08-08: Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions…
CVE-2017-10084 - CVSS 6.5 (medium), 2017-08-08: Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Report Generator). Supported…
CVE-2017-10071 - CVSS 4.3 (medium), 2017-08-08: Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: All Modules). Supported versions…
CVE-2017-10083 - CVSS 6.1 (medium), 2017-08-08: Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions…
CVE-2017-10073 - CVSS 5.4 (medium), 2017-08-08: Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions…
CVE-2017-10085 - CVSS 7.1 (high), 2017-08-08: Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions…
CVE-2017-10072 - CVSS 5.4 (medium), 2017-08-08: Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: All Modules). Supported versions…
CVE-2017-3535 - CVSS 4.7 (medium), 2017-04-24: Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions…
CVE-2017-3534 - CVSS 6.5 (medium), 2017-04-24: Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions…
CVE-2017-3481 - CVSS 4.3 (medium), 2017-04-24: Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions…
CVE-2017-3494 - CVSS 4.7 (medium), 2017-04-24: Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Retail Teller). Supported versions…
CVE-2017-3480 - CVSS 4.7 (medium), 2017-04-24: Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions…
CVE-2017-3485 - CVSS 6.8 (medium), 2017-04-24: Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions…
CVE-2017-3482 - CVSS 5.4 (medium), 2017-04-24: Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions…
CVE-2017-3314 - CVSS 6.1 (medium), 2017-01-27: Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are…
CVE-2017-3236 - CVSS 4.7 (medium), 2017-01-27: Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are…
CVE-2017-3235 - CVSS 3.5 (low), 2017-01-27: Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are…
CVE-2016-8304 - CVSS 5.4 (medium), 2017-01-27: Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are…
CVE-2016-8310 - CVSS 7.3 (high), 2017-01-27: Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are…
CVE-2016-8303 - CVSS 6.1 (medium), 2017-01-27: Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are…
CVE-2016-8307 - CVSS 5.3 (medium), 2017-01-27: Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are…
CVE-2016-8302 - CVSS 4.3 (medium), 2017-01-27: Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are…
CVE-2016-8305 - CVSS 2.1 (low), 2017-01-27: Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are…
CVE-2016-8311 - CVSS 6.5 (medium), 2017-01-27: Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are…
CVE-2016-8301 - CVSS 4.3 (medium), 2017-01-27: Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are…
CVE-2016-8299 - CVSS 6.3 (medium), 2017-01-27: Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are…
CVE-2016-8297 - CVSS 8.1 (high), 2017-01-27: Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are…
CVE-2016-5622 - CVSS 6.1 (medium), 2016-10-25: Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Applications 11.3.0, 11.4.0, 12.0.1 through 12.0.3,…
CVE-2016-5621 - CVSS 4.3 (medium), 2016-10-25: Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Applications 11.3.0, 11.4.0, 12.0.1 and 12.0.3,…
CVE-2016-5620 - CVSS 5.4 (medium), 2016-10-25: Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Applications 11.3.0, 11.4.0, 12.0.1 through 12.0.3,…
CVE-2016-5619 - CVSS 8.1 (high), 2016-10-25: Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Applications 11.3.0, 11.4.0, 12.0.1 through 12.0.3,…
CVE-2016-5607 - CVSS 8.8 (high), 2016-10-25: Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Applications 11.3.0, 11.4.0, 12.0.1 through 12.0.3,…
CVE-2016-5603 - CVSS 4.3 (medium), 2016-10-25: Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Applications 11.3.0, 11.4.0, 12.0.1 through 12.0.3,…
CVE-2016-5594 - CVSS 5 (medium), 2016-10-25: Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Applications 11.3.0, 11.4.0, and 12.0.1 through…
CVE-2016-5502 - CVSS 5.4 (medium), 2016-10-25: Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Applications 11.3.0, 11.4.0, 12.0.1 through 12.0.3…
CVE-2016-5490 - CVSS 3.3 (low), 2016-10-25: Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Applications 11.4.0 allows local users to affect…
CVE-2016-5479 - CVSS 4.3 (medium), 2016-10-25: Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Applications 11.3.0, 11.4.0, and 12.0.1 allows…