Product by Oracle
Oracle Banking Trade Finance
15 known vulnerabilities in Oracle Banking Trade Finance (Oracle), 1 of them actively exploited (CISA KEV).
Key figures
15
Vulnerabilities
1
Actively exploited (KEV)
0
Used by ransomware
3
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2022-22963 | VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability In CISA KEValso in 24 other products | 9.8 | |
| Critical | CVE-2019-0228 | Apache PDFBox: XML External Entity (XXE) | 9.8 | |
| High | CVE-2020-26217 | Remote Code Execution in XStream | 8.0 | |
| High | CVE-2021-29505 | XStream is vulnerable to a Remote Command Execution attack | 7.5 | |
| High | CVE-2021-23337 | Command Injection | 7.2 | |
| High | CVE-2020-8203 | Lodash: Allocation of Resources Without Limits or Throttling | 7.4 | |
| High | CVE-2019-12399 | Apache Kafka: security vulnerability | 7.5 | |
| Medium | CVE-2021-41973 | Apache MINA HTTP listener DOS | 6.5 | |
| Medium | CVE-2020-28500 | Regular Expression Denial of Service (ReDoS) | 5.3 | |
| Medium | CVE-2021-21409 | Possible request smuggling in HTTP/2 due missing validation of content-length | 5.9 | |
| Medium | CVE-2021-27906 | A carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file | 5.5 | |
| Medium | CVE-2021-27807 | A carefully crafted PDF file can trigger an infinite loop while loading the file | 5.5 | |
| Medium | CVE-2021-21290 | Local Information Disclosure Vulnerability in Netty on Unix-Like systems due temporary files | 6.2 | |
| Critical | CVE-2026-61097 | Oracle Banking Trade Finance Process Management: Open Redirect | 9.6 | |
| Medium | CVE-2022-21474 | Oracle Banking Trade Finance: Denial of Service | 5.9 |