Login Request a demo
BP
Product
Banking Payments
by Oracle · last CVE Apr 18, 2023
35
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities35In the news0Timeline
Severity mix
Critical 1High 10Medium 24Low 0
Severity
All severities35Critical1High10Medium24Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Banking Payments to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2019-13990
9.8
17%
Jul 26
initDocumentParser in xml/XMLSchedulingDataProcessor.java in Terracotta Quartz Scheduler through 2.3.0 allows XXE attacks via a job description
Affected: 14.1.0 through 14.4.0
CVE-2018-2705
8.8
2%
Jan 18
Vulnerability in the Oracle Banking Payments component of Oracle Financial Services Applications (subcomponent: Payments Core)
Affected: 12.3.0; 12.4.0
CVE-2018-3027
8.1
2%
Jul 18
Vulnerability in the Oracle Banking Payments component of Oracle Financial Services Applications (subcomponent: Payments Core)
Affected: 12.2.0; 12.3.0; 12.4.0; 12.5.0; 14.1.0
CVE-2018-2704
8.1
2%
Jan 18
Vulnerability in the Oracle Banking Payments component of Oracle Financial Services Applications (subcomponent: Payments Core)
Affected: 12.3.0; 12.4.0
CVE-2021-35515
7.5
12%
Jul 13
When reading a specially crafted 7Z archive, the construction of the list of codecs that decompress an entry can result in an infinite loop
Affected: 14.5
CVE-2021-36090
7.5
13%
Jul 13
Apache Commons Compress 1.0 to 1.20 denial of service vulnerability
Affected: 14.5
CVE-2021-35517
7.5
11%
Jul 13
Apache Commons Compress 1.1 to 1.20 denial of service vulnerability
Affected: 14.5
CVE-2019-12399
7.5
4%
Jan 14
When Connect workers in Apache Kafka 2.0.0, 2.0.1, 2.1.0, 2.1.1, 2.2.0, 2.2.1, or 2.3.0 are configured with one or more config providers, and a connector is created/updated on…
Affected: 14.4.0
CVE-2019-12402
7.5
16%
Aug 30
The file name encoding algorithm used internally in Apache Commons Compress 1.15 to 1.18 can get into an infinite loop when faced with specially crafted inputs
Affected: 14.1.0 through 14.4.0
CVE-2020-2713
7.1
1%
Jan 15
Vulnerability in the Oracle Banking Payments product of Oracle Financial Services Applications (component: Core)
Affected: 14.1.0 through 14.3.0
CVE-2018-2746
7.1
2%
Apr 19
Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core module)
Affected: 12.3.0; 12.4.0; 12.5.0; 14.0.0
CVE-2021-41973
6.5
5%
Nov 1
In Apache MINA, a specifically crafted, malformed HTTP request may cause the HTTP Header decoder to loop indefinitely
Affected: 14.5
CVE-2021-30129
6.5
3%
Jul 12
A vulnerability in sshd-core of Apache Mina SSHD allows an attacker to overflow the server causing an OutOfMemory error
Affected: 14.5
CVE-2020-14896
6.5
2%
Oct 21
Vulnerability in the Oracle Banking Payments product of Oracle Financial Services Applications (component: Core)
Affected: 14.1.0 through 14.4.0
CVE-2020-2711
6.5
1%
Jan 15
Vulnerability in the Oracle Banking Payments product of Oracle Financial Services Applications (component: Core)
Affected: 14.1.0 through 14.3.0
CVE-2018-3022
6.5
2%
Jul 18
Vulnerability in the Oracle Banking Payments component of Oracle Financial Services Applications (subcomponent: Payments Core)
Affected: 12.2.0; 12.3.0; 12.4.0; 12.5.0; 14.1.0
CVE-2018-2747
6.5
2%
Apr 19
Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core module)
Affected: 12.3.0; 12.4.0; 12.5.0; 14.0.0
CVE-2018-3020
6.3
1%
Jul 18
Vulnerability in the Oracle Banking Payments component of Oracle Financial Services Applications (subcomponent: Payments Core)
Affected: 12.2.0; 12.3.0; 12.4.0; 12.5.0; 14.1.0
CVE-2018-2896
6.1
2%
Jul 18
Vulnerability in the Oracle Banking Payments component of Oracle Financial Services Applications (subcomponent: Payments Core)
Affected: 12.2.0; 12.3.0; 12.4.0; 12.5.0; 14.1.0
CVE-2018-2748
6.1
1%
Apr 19
Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core module)
Affected: 12.3.0; 12.4.0; 12.5.0; 14.0.0
CVE-2022-21475
5.9
1%
Apr 19
Vulnerability in the Oracle Banking Payments product of Oracle Financial Services Applications (component: Infrastructure)
Affected: 14.5
CVE-2021-45105
5.9
100%
Dec 18
Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups
Affected: 14.5
CVE-2018-10237
5.9
5%
Apr 26
Unbounded memory allocation in Google Guava 11.0 through 24.x before 24.1.1 allows remote attackers to conduct denial of service attacks against servers that depend on this…
Affected: 14.1.0 through 14.4.0
CVE-2019-12415
5.5
1%
Oct 23
In Apache POI up to 4.1.0, when using the tool XSSFExportToXml to convert user-provided Microsoft Excel documents, a specially crafted document can allow an attacker to read files…
Affected: 14.0.0; 14.1.0
CVE-2020-2712
5.4
1%
Jan 15
Vulnerability in the Oracle Banking Payments product of Oracle Financial Services Applications (component: Core)
Affected: 14.1.0 through 14.3.0
CVE-2020-2710
5.4
1%
Jan 15
Vulnerability in the Oracle Banking Payments product of Oracle Financial Services Applications (component: Core)
Affected: 14.1.0 through 14.3.0
CVE-2018-3026
5.4
1%
Jul 18
Vulnerability in the Oracle Banking Payments component of Oracle Financial Services Applications (subcomponent: Payments Core)
Affected: 12.2.0; 12.3.0; 12.4.0; 12.5.0; 14.1.0
CVE-2018-3024
5.4
1%
Jul 18
Vulnerability in the Oracle Banking Payments component of Oracle Financial Services Applications (subcomponent: Payments Core)
Affected: 12.2.0; 12.3.0; 12.4.0; 12.5.0; 14.1.0
CVE-2018-3023
5.4
2%
Jul 18
Vulnerability in the Oracle Banking Payments component of Oracle Financial Services Applications (subcomponent: Payments Core)
Affected: 12.2.0; 12.3.0; 12.4.0; 12.5.0; 14.1.0
CVE-2018-2749
5.4
1%
Apr 19
Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core module)
Affected: 12.3.0; 12.4.0; 12.5.0; 14.0.0
CVE-2018-3025
5.3
2%
Jul 18
Vulnerability in the Oracle Banking Payments component of Oracle Financial Services Applications (subcomponent: Payments Core)
Affected: 12.2.0; 12.3.0; 12.4.0; 12.5.0; 14.1.0
CVE-2018-3021
5.3
2%
Jul 18
Vulnerability in the Oracle Banking Payments component of Oracle Financial Services Applications (subcomponent: Payments Core)
Affected: 12.2.0; 12.3.0; 12.4.0; 12.5.0; 14.1.0
CVE-2018-2708
5.3
1%
Jan 18
Vulnerability in the Oracle Banking Payments component of Oracle Financial Services Applications (subcomponent: Payments Core)
Affected: 12.3.0; 12.4.0
CVE-2023-21915
4.6
0%
Apr 18
Vulnerability in the Oracle Banking Payments product of Oracle Financial Services Applications (component: Book/Internal Transfer)
Affected: 14.5; 14.6; 14.7
CVE-2020-2714
4.3
1%
Jan 15
Vulnerability in the Oracle Banking Payments product of Oracle Financial Services Applications (component: Core)
Affected: 14.1.0 through 14.3.0
Showing 35