Product by Oracle
Oracle FLEXCUBE Core Banking
15 known vulnerabilities in Oracle FLEXCUBE Core Banking (Oracle), 0 of them actively exploited (CISA KEV).
Key figures
15
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2020-10683 | Dom4j Project Dom4j: XML External Entity (XXE) | 9.8 | |
| High | CVE-2019-0227 | Apache Axis 1.4: Server-Side Request Forgery (SSRF) | 7.5 | |
| Medium | CVE-2018-8032 | Apache Axis: Cross-Site Scripting (XSS) | 6.1 | |
| Medium | CVE-2019-10241 | The Eclipse Foundation Eclipse Jetty: Cross-site Scripting | 6.1 | |
| High | CVE-2020-27216 | The Eclipse Foundation Eclipse Jetty: Creation of Temporary File With Insecure Permissions | 7.0 | |
| Medium | CVE-2021-29425 | Possible limited path traversal vulnerabily in Apache Commons IO | 4.8 | |
| Medium | CVE-2019-10247 | The Eclipse Foundation Eclipse Jetty: Exposure of Sensitive Information Due to Incompatible Policies | 5.3 | |
| Medium | CVE-2019-10246 | The Eclipse Foundation Eclipse Jetty: Exposure of Sensitive Information Due to Incompatible Policies | 5.3 | |
| Low | CVE-2020-9488 | Apache Log4j: security vulnerability | 3.7 | |
| Medium | CVE-2016-8324 | Oracle FLEXCUBE Core Banking: security vulnerability | 5.3 | |
| Medium | CVE-2018-2807 | Oracle FLEXCUBE Core Banking: security vulnerability | 6.1 | |
| Medium | CVE-2016-8322 | Oracle FLEXCUBE Core Banking: security vulnerability | 4.3 | |
| Medium | CVE-2020-2955 | Oracle FLEXCUBE Core Banking: Denial of Service | 6.3 | |
| Medium | CVE-2016-8323 | Oracle FLEXCUBE Core Banking: security vulnerability | 5.4 | |
| Low | CVE-2016-8314 | Oracle FLEXCUBE Core Banking: security vulnerability | 3.1 |