Home/Product/oracle flexcube universal banking
Product

oracle flexcube universal banking

95 known vulnerabilities across versions
Vulnerabilities are listed by affected version. Select any CVE for the full briefing and its intelligence graph.
CVE-2026-21978
>= 14.0.0 and <= 14.8.0.0.0
Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Relationship
6.5MEDIUM
 CVE-2023-22119
>= 14.0.0 and <= 14.3.0
Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructur
5.9MEDIUM
 CVE-2023-22118
>= 14.0.0 and <= 14.3.0
Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructur
6.5MEDIUM
 CVE-2023-22117
>= 14.0.0 and <= 14.3.0
Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructur
5.4MEDIUM
 CVE-2022-21579
>= 12.1.0 and <= 12.4.0
Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructur
6.4MEDIUM
 CVE-2022-21578
>= 12.1.0 and <= 12.4.0
Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructur
6.7MEDIUM
 CVE-2022-21577
>= 12.1.0 and <= 12.4.0
Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructur
6.4MEDIUM
 CVE-2022-21576
>= 14.0.0 and <= 14.3.0
Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructur
6.4MEDIUM
 CVE-2022-21544
>= 12.1.0 and <= 12.4.0
Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructur
7.1HIGH
 CVE-2022-21428
>= 12.1.0 and <= 12.4
Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructur
6.7MEDIUM
 CVE-2022-21472
>= 14.0.0 and <= 14.3.0
Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructur
5.9MEDIUM
 CVE-2022-23437
all versions
There's a vulnerability within the Apache Xerces Java (XercesJ) XML parser when handling specially crafted XML document payloads.
6.5MEDIUM
 CVE-2021-45105
>= 12.1.0 and <= 12.4
Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from sel
5.9MEDIUM
 CVE-2021-41973
>= 14.0 and <= 14.3
In Apache MINA, a specifically crafted, malformed HTTP request may cause the HTTP Header decoder to loop indefinitely. The decoder
6.5MEDIUM
 CVE-2021-37714
>= 14.0.0 and <= 14.3.0
jsoup is a Java library for working with HTML. Those using jsoup versions prior to 1.14.2 to parse untrusted HTML or XML may be vu
7.5HIGH
 CVE-2021-2324
>= 12.0.0 and <= 12.4.0
Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Loans And Dep
4.6MEDIUM
 CVE-2021-2323
>= 14.0.0 and <= 14.4.0
Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Flex-Branch).
5.9MEDIUM
 CVE-2021-36090
>= 14.0.0 and <= 14.3.0
When reading a specially crafted ZIP archive, Compress can be made to allocate large amounts of memory that finally leads to an ou
7.5HIGH
 CVE-2021-35517
>= 14.0.0 and <= 14.3.0
When reading a specially crafted TAR archive, Compress can be made to allocate large amounts of memory that finally leads to an ou
7.5HIGH
 CVE-2021-35516
>= 14.0.0 and <= 14.3.0
When reading a specially crafted 7Z archive, Compress can be made to allocate large amounts of memory that finally leads to an out
7.5HIGH
 CVE-2021-35515
>= 14.0.0 and <= 14.3.0
When reading a specially crafted 7Z archive, the construction of the list of codecs that decompress an entry can result in an infi
7.5HIGH
 CVE-2021-30129
>= 14.0.0 and <= 14.3.0
A vulnerability in sshd-core of Apache Mina SSHD allows an attacker to overflow the server causing an OutOfMemory error. This issu
6.5MEDIUM
 CVE-2021-31811
>= 14.0.0 and <= 14.3.0
In Apache PDFBox, a carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file. This issue affects Apa
5.5MEDIUM
 CVE-2021-27906
>= 14.0.0 and <= 14.3.0
A carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file. This issue affects Apache PDFBox version
5.5MEDIUM
 CVE-2021-27807
>= 14.0.0 and <= 14.3.0
A carefully crafted PDF file can trigger an infinite loop while loading the file. This issue affects Apache PDFBox version 2.0.22
5.5MEDIUM
 CVE-2020-11987
>= 14.1.0 and <= 14.4.0
Apache Batik 1.13 is vulnerable to server-side request forgery, caused by improper input validation by the NodePickerPanel. By usi
8.2HIGH
 CVE-2020-14887
>= 14.0.0 and <= 14.4.0
Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructur
6.5MEDIUM
 CVE-2020-2700
>= 12.0.1 and <= 12.4.0
Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructur
4.3MEDIUM
 CVE-2020-2699
>= 12.0.1 and <= 12.4.0
Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructur
7.1HIGH
 CVE-2020-2685
>= 12.0.1 and <= 12.4.0
Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructur
5.4MEDIUM
 CVE-2020-2684
>= 12.0.1 and <= 12.4.0
Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructur
6.5MEDIUM
 CVE-2020-2683
>= 12.0.1 and <= 12.4.0
Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructur
5.4MEDIUM
 CVE-2019-12399
all versions
When Connect workers in Apache Kafka 2.0.0, 2.0.1, 2.1.0, 2.1.1, 2.2.0, 2.2.1, or 2.3.0 are configured with one or more config pro
7.5HIGH
 CVE-2019-2840
>= 12.0.1 and <= 12.0.3
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastr
5.7MEDIUM
 CVE-2019-2839
>= 12.1.0 and <= 12.4.0
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastr
5.3MEDIUM
 CVE-2019-2794
>= 12.0.1 and <= 12.0.3
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastr
5.3MEDIUM
 CVE-2019-2793
>= 12.0.1 and <= 12.0.3
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastr
3.5LOW
 CVE-2019-2790
>= 12.0.1 and <= 12.0.3
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastr
5.4MEDIUM
 CVE-2019-2754
>= 12.0.1 and <= 12.0.3
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastr
8.1HIGH
 CVE-2019-2744
>= 12.0.1 and <= 12.0.3
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastr
6.1MEDIUM
 CVE-2018-3019
all versions
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastr
5.4MEDIUM
 CVE-2018-3015
all versions
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastr
8.1HIGH
 CVE-2018-2982
all versions
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastr
5.3MEDIUM
 CVE-2018-2981
all versions
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastr
5.4MEDIUM
 CVE-2018-2980
all versions
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastr
5.4MEDIUM
 CVE-2018-2979
all versions
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastr
6.5MEDIUM
 CVE-2018-2975
all versions
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastr
5.3MEDIUM
 CVE-2018-2974
all versions
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastr
6.3MEDIUM
 CVE-2018-2899
all versions
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastr
6.1MEDIUM
 CVE-2018-2749
all versions
Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core modu
5.4MEDIUM
 CVE-2018-2748
all versions
Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core modu
6.1MEDIUM
 CVE-2018-2747
all versions
Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core modu
6.5MEDIUM
 CVE-2018-2746
all versions
Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core modu
7.1HIGH
 CVE-2018-2649
all versions
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastr
8.1HIGH
 CVE-2018-2648
all versions
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastr
8.8HIGH
 CVE-2018-2630
all versions
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Security
5.4MEDIUM
 CVE-2018-2614
all versions
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastr
5.3MEDIUM
 CVE-2017-10363
all versions
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Security
7.1HIGH
 CVE-2017-10098
all versions
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastr
5.4MEDIUM
 CVE-2017-10085
all versions
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastr
7.1HIGH
 CVE-2017-10084
all versions
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Report G
6.5MEDIUM
 CVE-2017-10083
all versions
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastr
6.1MEDIUM
 CVE-2017-10073
all versions
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastr
5.4MEDIUM
 CVE-2017-10072
all versions
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: All Modu
5.4MEDIUM
 CVE-2017-10071
all versions
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: All Modu
4.3MEDIUM
 CVE-2017-3535
all versions
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastr
4.7MEDIUM
 CVE-2017-3534
all versions
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastr
6.5MEDIUM
 CVE-2017-3494
all versions
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Retail T
4.7MEDIUM
 CVE-2017-3485
all versions
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastr
6.8MEDIUM
 CVE-2017-3482
all versions
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastr
5.4MEDIUM
 CVE-2017-3481
all versions
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastr
4.3MEDIUM
 CVE-2017-3480
all versions
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastr
4.7MEDIUM
 CVE-2017-3314
all versions
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Core). S
6.1MEDIUM
 CVE-2017-3236
all versions
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Core). S
4.7MEDIUM
 CVE-2017-3235
all versions
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Core). S
3.5LOW
 CVE-2016-8311
all versions
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Core). S
6.5MEDIUM
 CVE-2016-8310
all versions
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Core). S
7.3HIGH
 CVE-2016-8307
all versions
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Core). S
5.3MEDIUM
 CVE-2016-8305
all versions
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Core). S
2.1LOW
 CVE-2016-8304
all versions
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Core). S
5.4MEDIUM
 CVE-2016-8303
all versions
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Core). S
6.1MEDIUM
 CVE-2016-8302
all versions
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Core). S
4.3MEDIUM
 CVE-2016-8301
all versions
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Core). S
4.3MEDIUM
 CVE-2016-8299
all versions
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Core). S
6.3MEDIUM
 CVE-2016-8297
all versions
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Core). S
8.1HIGH
 CVE-2016-5622
all versions
Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Applications 11.3.0, 11.
6.1MEDIUM
 CVE-2016-5621
all versions
Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Applications 11.3.0, 11.
4.3MEDIUM
 CVE-2016-5620
all versions
Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Applications 11.3.0, 11.
5.4MEDIUM
 CVE-2016-5619
all versions
Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Applications 11.3.0, 11.
8.1HIGH
 CVE-2016-5607
all versions
Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Applications 11.3.0, 11.
8.8HIGH
 CVE-2016-5603
all versions
Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Applications 11.3.0, 11.
4.3MEDIUM
 CVE-2016-5594
all versions
Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Applications 11.3.0, 11.
5.0MEDIUM
 CVE-2016-5502
all versions
Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Applications 11.3.0, 11.
5.4MEDIUM
 CVE-2016-5490
all versions
Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Applications 11.4.0 allo
3.3LOW
 CVE-2016-5479
all versions
Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Applications 11.3.0, 11.
4.3MEDIUM
Vulnerabilities
CISA KEV catalog
CWE weaknesses
CAPEC attack patterns
Package vulnerabilities
Threat intelligence
Threat actors
Tools & malware
ATT&CK techniques
IOCs
Detection & defense
Sigma rules
YARA rules
Atomic Red Team tests
D3FEND countermeasures
Compliance
NIST 800-53
ISO 27001:2022
SOC 2 TSC
PCI-DSS v4.0
CIS Controls v8.1
About
All capabilities
Live statistics
Data sources
Privacy policy
Terms of service
threatengine.sh  ·  Open-source threat intelligence platform  ·  100+ authoritative sources  ·  Every fact traces to its origin