Product by Oracle
Oracle Financial Services Enterprise Case Management
12 known vulnerabilities in Oracle Financial Services Enterprise Case Management (Oracle), 2 of them actively exploited (CISA KEV).
Key figures
12
Vulnerabilities
2
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2022-22965 | Spring Framework JDK 9+ Remote Code Execution Vulnerability In CISA KEValso in 35 other products | 9.8 | |
| Critical | CVE-2022-22963 | VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability In CISA KEValso in 24 other products | 9.8 | |
| High | CVE-2021-36090 | Apache Commons Compress 1.0 to 1.20 denial of service vulnerability | 7.5 | |
| High | CVE-2021-35516 | Apache Commons Compress 1.6 to 1.20 denial of service vulnerability | 7.5 | |
| High | CVE-2021-35515 | Apache Commons Compress 1.6 to 1.20 denial of service vulnerability | 7.5 | |
| High | CVE-2021-35517 | Apache Commons Compress 1.1 to 1.20 denial of service vulnerability | 7.5 | |
| Medium | CVE-2022-23437 | Infinite loop within Apache XercesJ xml parser | 6.5 | |
| High | CVE-2020-36518 | FasterXML Jackson-databind: Denial of Service | 7.5 | |
| Medium | CVE-2021-38153 | Timing Attack Vulnerability for Apache Kafka Connect and Clients | 5.9 | |
| High | CVE-2021-2351 | Oracle WebLogic Server: security vulnerability | 8.3 | |
| Medium | CVE-2019-10219 | Hibernate Hibernate-validator: Cross-site Scripting | 6.5 | |
| High | CVE-2026-70922 | Oracle Financial Services Enterprise Case Management: Improper Authentication | 8.8 |