Product by Oracle
Banking Apis
14 known vulnerabilities in Banking Apis (Oracle), 0 of them actively exploited (CISA KEV).
Key figures
14
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2019-17495 | SmartBear Swagger UI: Cross-Site Request Forgery (CSRF) | 9.8 | |
| High | CVE-2020-11987 | Apache Batik: Server-Side Request Forgery (SSRF) | 8.2 | |
| High | CVE-2020-25649 | Jackson-databind: Improper Restriction of XML External Entity Reference | 7.5 | |
| High | CVE-2021-36090 | Apache Commons Compress 1.0 to 1.20 denial of service vulnerability | 7.5 | |
| High | CVE-2021-35517 | Apache Commons Compress 1.1 to 1.20 denial of service vulnerability | 7.5 | |
| High | CVE-2021-37137 | The Netty project Netty: Uncontrolled Resource Consumption | 7.5 | |
| High | CVE-2021-37136 | The Netty project Netty: Uncontrolled Resource Consumption | 7.5 | |
| Medium | CVE-2021-28164 | The Eclipse Foundation Eclipse Jetty: Incorrect Behavior Order: Authorization Before Parsing and Canonicalization | 5.3 | |
| High | CVE-2021-2351 | Oracle WebLogic Server: security vulnerability | 8.3 | |
| Medium | CVE-2021-29425 | Possible limited path traversal vulnerabily in Apache Commons IO | 4.8 | |
| Medium | CVE-2019-10219 | Hibernate Hibernate-validator: Cross-site Scripting | 6.5 | |
| High | CVE-2021-41165 | HTML comments vulnerability allowing to execute JavaScript code | 8.2 | |
| High | CVE-2021-41164 | Advanced Content Filter (ACF) vulnerability allowing to execute JavaScript code using malformed HTML | 8.2 | |
| Low | CVE-2021-28163 | The Eclipse Foundation Eclipse Jetty: Exposure of Sensitive Information to an Unauthorized Actor | 2.7 |