Product by Oracle

    Financial Services Applications

    31 known vulnerabilities in Financial Services Applications (Oracle), 0 of them actively exploited (CISA KEV).

    Key figures

    31

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    7

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Financial Services Applications (Oracle)
    HighCVE-2026-21441

    Urllib3: Improper Handling of Highly Compressed Data (Data Amplification)

    also in 7 other products

    		7.5
    CriticalCVE-2026-4800

    lodash vulnerable to Code Injection via `_.template` imports key names

    also in 11 other products

    		8.1
    CriticalCVE-2024-47561

    Apache Avro Java SDK: Arbitrary Code Execution when reading Avro schema (Java SDK)

    also in 4 other products

    		7.3
    HighCVE-2026-41044

    Apache ActiveMQ: Code Injection

    also in 10 other products

    		8.8
    CriticalCVE-2026-33557

    Apache Kafka: Missing JWT token validation in OAUTHBEARER authentication

    also in 6 other products

    		9.1
    HighCVE-2026-24308

    Apache ZooKeeper: Sensitive information disclosure in client configuration handling

    also in 7 other products

    		7.5
    HighCVE-2026-34480

    Apache Log4j Core: Silent log event loss in XmlLayout due to unescaped XML 1.0 forbidden characters

    also in 5 other products

    		7.5
    CriticalCVE-2026-22732

    Under Some Conditions Spring Security HTTP Headers Are not Written

    also in 5 other products

    		9.1
    HighCVE-2026-68497

    jackson-databind: Duration XMLGregorianCalendar Unbounded Number Parse DoS

    also in 6 other products

    		7.5
    HighCVE-2026-34481

    Apache Log4j JSON Template Layout: Improper Encoding or Escaping of Output

    also in 12 other products

    		7.5
    HighCVE-2026-5795

    Eclipse Jetty: Sensitive Information in Resource Not Removed Before Reuse

    also in 5 other products

    		7.4
    HighCVE-2026-70922

    Oracle Financial Services Enterprise Case Management: Improper Authentication

    also in 2 other products

    		8.8
    CriticalCVE-2026-40976

    Spring Boot: Missing Authorization

    also in 3 other products

    		9.1
    HighCVE-2025-33042

    Apache Avro Java SDK: Code injection on Java generated code

    also in 2 other products

    		7.3
    HighCVE-2026-44248

    Netty: Resource exhaustion in MqttDecoder

    also in 2 other products

    		7.5
    MediumCVE-2026-49844

    Apache Log4j API: Improper serialization of non-finite floating-point values in MapMessage.asJson()

    also in 8 other products

    		5.9
    HighCVE-2026-87164

    Oracle Banking Branch: security vulnerability

    also in 1 other product

    		8.0
    HighCVE-2026-83489

    Oracle Banking Origination: security vulnerability

    also in 1 other product

    		7.5
    CriticalCVE-2026-61097

    Oracle Banking Trade Finance Process Management: Open Redirect

    also in 2 other products

    		9.6
    HighCVE-2026-61105

    Oracle Banking Trade Finance: Improper Access Control

    also in 2 other products

    		8.1
    HighCVE-2026-61102

    Oracle Banking Trade Finance: Improper Access Control

    also in 2 other products

    		8.1
    HighCVE-2026-83081

    Oracle Banking Corporate Lending: security vulnerability

    also in 1 other product

    		8.0
    HighCVE-2026-83080

    Oracle Banking Branch: security vulnerability

    also in 1 other product

    		7.1
    HighCVE-2026-83206

    Oracle Banking Corporate Lending Process Management: security vulnerability

    also in 1 other product

    		7.1
    HighCVE-2025-70873

    SQLite: Information Disclosure

    also in 2 other products

    		7.5

    All vulnerabilities in search

    News

    All products by Oracle