Product by Oracle

Oracle Banking Platform

72 known vulnerabilities in Oracle Banking Platform (Oracle), 1 of them actively exploited (CISA KEV).

Vulnerabilities

Actively exploited (KEV)

Used by ransomware

Critical

Vulnerabilities

Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

Vulnerabilities in Oracle Banking Platform (Oracle)

Critical	CVE-2020-11023	Potential XSS vulnerability in jQuery In CISA KEValso in 48 other products	6.9	29.04.2020
Critical	CVE-2017-5645	Apache Log4j: Deserialization of Untrusted Data also in 74 other products	9.8	17.04.2017
Critical	CVE-2017-7525	FasterXML Jackson-databind: Incomplete List of Disallowed Inputs also in 20 other products	9.8	06.02.2018
Critical	CVE-2020-9548	FasterXML Jackson-databind: security vulnerability also in 25 other products	9.8	02.03.2020
Critical	CVE-2020-9547	FasterXML Jackson-databind: security vulnerability also in 17 other products	9.8	02.03.2020
Critical	CVE-2019-2904	Oracle Enterprise Repository: security vulnerability also in 22 other products	9.8	16.10.2019
Critical	CVE-2018-14721	FasterXML Jackson-databind: Deserialization of Untrusted Data also in 11 other products	10.0	02.01.2019
Critical	CVE-2018-14718	FasterXML Jackson-databind: Deserialization of Untrusted Data also in 24 other products	9.8	02.01.2019
Critical	CVE-2019-14540	FasterXML Jackson-databind: security vulnerability also in 18 other products	9.8	15.09.2019
Critical	CVE-2018-14719	FasterXML Jackson-databind: Deserialization of Untrusted Data also in 19 other products	9.8	02.01.2019
Critical	CVE-2019-20330	FasterXML Jackson-databind: security vulnerability also in 29 other products	9.8	03.01.2020
Critical	CVE-2017-15095	FasterXML Jackson-databind: Incomplete List of Disallowed Inputs also in 23 other products	9.8	06.02.2018
Critical	CVE-2019-14379	FasterXML Jackson-databind: Remote Code Execution also in 23 other products	9.8	29.07.2019
Critical	CVE-2018-14720	FasterXML Jackson-databind: XML External Entity (XXE) also in 11 other products	9.8	02.01.2019
High	CVE-2020-13936	Velocity Sandbox Bypass also in 14 other products	8.8	10.03.2021
Critical	CVE-2020-10683	Dom4j Project Dom4j: XML External Entity (XXE) also in 36 other products	9.8	01.05.2020
High	CVE-2020-26217	Remote Code Execution in XStream also in 15 other products	8.0	16.11.2020
Critical	CVE-2019-17495	SmartBear Swagger UI: Cross-Site Request Forgery (CSRF) also in 5 other products	9.8	10.10.2019
Critical	CVE-2019-16942	FasterXML Jackson-databind: security vulnerability also in 27 other products	9.8	01.10.2019
Critical	CVE-2019-17531	FasterXML Jackson-databind: security vulnerability also in 21 other products	9.8	12.10.2019
Critical	CVE-2019-16335	FasterXML Jackson-databind: security vulnerability also in 16 other products	9.8	15.09.2019
High	CVE-2021-21341	XStream can cause a Denial of Service also in 13 other products	7.5	22.03.2021
Critical	CVE-2018-1000613	Oracle Communications Diameter Signaling Router (DSR): Deserialization of Untrusted Data also in 22 other products	9.8	09.07.2018
Critical	CVE-2019-16943	FasterXML Jackson-databind: security vulnerability also in 25 other products	9.8	01.10.2019
Critical	CVE-2019-10173	Xstream: Code Injection also in 9 other products	7.3	23.07.2019

All vulnerabilities in search

News

SSA-501673 V1.0: Apache Log4j Denial of Service Vulnerability (CVE-2021-45105) - Impact to Siemens Productssiemens-productcert
SSA-661247 V1.0: Apache Log4j Vulnerability (CVE-2021-44228, Log4Shell) - Impact to Siemens Productssiemens-productcert
SSA-479842 V1.0: Apache Log4j Vulnerabilities - Impact to Siemens Energy Sensformer (Platform, Basic and Advanced)siemens-productcert

All products by Oracle

Key figures

Vulnerabilities

News