Login Request a demo
FS
Product
Financial Services Analytical Applications Infrastructure
by Oracle · last CVE Apr 21, 2026
On CISA KEVExploited in the wild
88
CVEs
3
On KEV
10.0
Max CVSS
0
New 30D
Vulnerabilities88In the news0Timeline
Severity mix
Critical 18High 30Medium 39Low 1
Severity
All severities88Critical18High30Medium39Low1
Exploitation
On CISA KEV3Exploited in the wild3
Watch

Add Financial Services Analytical Applications Infrastructure to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2017-12617
In wildKEV
8.1
100%
Oct 3
When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g
Affected: 7.3.3.0.0 through 7.3.5.3.0; 8.0.0.0.0 through 8.0.9.0.0
CVE-2020-11113
8.8
6%
Mar 31
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.openjpa.ee.WASRegistryManagedRuntime (aka…
Affected: 8.0.6 through 8.1.0
CVE-2020-11112
8.8
4%
Mar 31
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to…
Affected: 8.0.6 through 8.1.0
CVE-2020-10969
8.8
4%
Mar 26
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to javax.swing.JEditorPane
Affected: 8.0.6 through 8.1.0
CVE-2020-10968
8.8
4%
Mar 26
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.aoju.bus.proxy.provider.remoting.RmiProvider…
Affected: 8.0.6 through 8.1.0
CVE-2020-10673
8.8
8%
Mar 18
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.caucho.config.types.ResourceRef (aka…
Affected: 8.0.6 through 8.1.0
CVE-2020-10672
8.8
3%
Mar 18
FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to…
Affected: 8.0.6 through 8.1.0
CVE-2025-53036
8.6
0%
Oct 21
Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Platform)
Affected: 8.0.7.9.0; 8.0.8.7.0; 8.1.2.5.0
CVE-2020-14824
8.6
2%
Oct 21
Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Infrastructure)
Affected: 8.0.6.0.0 through 8.1.0.0.0
CVE-2021-2351
8.3
2%
Jul 21
Vulnerability in the Advanced Networking Option component of Oracle Database Server
Affected: 8.0.7 through 8.1.1
CVE-2025-61751
8.1
0%
Oct 21
Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Platform)
Affected: 8.0.7.9.0; 8.0.8.7.0; 8.1.2.5.0
CVE-2021-22118
7.8
0%
May 27
In Spring Framework, versions 5.2.x prior to 5.2.15 and versions 5.3.x prior to 5.3.7, a WebFlux application is vulnerable to a privilege escalation: by (re)creating the temporary…
Affected: 8.0.8 through 8.1.1
CVE-2026-34310
7.5
0%
Apr 21
Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Platform)
Affected: 8.0.7.9.0; 8.0.8.7.0; 8.1.2.5.0
CVE-2026-22010
7.5
0%
Apr 21
Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Platform)
Affected: 8.0.7.9.0; 8.0.8.7.0; 8.1.2.5.0
CVE-2025-61756
7.5
0%
Oct 21
Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: System Configuration)
Affected: 8.0.7.9.0; 8.0.8.7.0; 8.1.2.5.0
CVE-2022-24729
7.5
2%
Mar 16
CKEditor4 is an open source what-you-see-is-what-you-get HTML editor
Affected: 8.0.7.0.0 through 8.1.0.0.0; 8.1.1.0; 8.1.2.0; 8.1.2.1
CVE-2020-36518
7.5
5%
Mar 11
jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects
Affected: 8.0.7 through 8.1.0.0; 8.1.1.0; 8.1.2.0; 8.1.2.1
CVE-2021-36090
7.5
13%
Jul 13
Apache Commons Compress 1.0 to 1.20 denial of service vulnerability
Affected: 8.0.6 through 8.1.1
CVE-2019-17566
7.5
11%
Nov 12
Apache Batik is vulnerable to server-side request forgery, caused by improper input validation by the "xlink:href" attributes
Affected: 8.0.6 through 8.1.0
CVE-2020-11979
7.5
8%
Oct 1
As mitigation for CVE-2020-1945 Apache Ant 1.10.8 changed the permissions of temporary files it created so that only the current user was allowed to access them
Affected: 8.0.6 through 8.0.9; 8.1.0; 8.1.1
CVE-2019-12399
7.5
4%
Jan 14
When Connect workers in Apache Kafka 2.0.0, 2.0.1, 2.1.0, 2.1.1, 2.2.0, 2.2.1, or 2.3.0 are configured with one or more config providers, and a connector is created/updated on…
Affected: 8.0.6 through 8.1.0
CVE-2019-17359
7.5
9%
Oct 8
The ASN.1 parser in Bouncy Castle Crypto (aka BC Java) 1.63 can trigger a large attempted memory allocation, and resultant OutOfMemoryError error, via crafted ASN.1 data
Affected: 8.0.6 through 8.0.9
CVE-2019-14439
7.5
11%
Jul 30
A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x before 2.9.9.2
Affected: 8.0.2 through 8.0.8
CVE-2019-0227
7.5
92%
May 1
A Server Side Request Forgery (SSRF) vulnerability affected the Apache Axis 1.4 distribution that was last released in 2006
Affected: 7.3.3 through 7.3.5; 8.0.0 through 8.0.8
CVE-2018-15756
7.5
9%
Oct 18
DoS Attack via Range Requests
Affected: 8.0.2 through 8.0.8
CVE-2023-21901
7.4
0%
Jan 16
Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Infrastructure)
Affected: 8.0.7; 8.0.8; 8.0.9; 8.1.0; 8.1.1; 8.1.2
CVE-2018-2660
7.4
1%
Jan 18
Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure component of Oracle Financial Services Applications (subcomponent: Core)
Affected: 7.3.5.0.0; 7.3.5.1.0; 7.3.5.2.0; 7.3.5.3.0; 8.0.0.0.0; 8.0.1.0.0; +4 more
CVE-2020-14602
7.1
1%
Jul 15
Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Infrastructure)
Affected: 8.0.6 through 8.1.0
CVE-2020-2793
7.1
1%
Apr 15
Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Infrastructure)
Affected: 8.0.6.0.0 through 8.0.9.0.0
CVE-2020-2688
7.1
1%
Jan 15
Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Object Migration)
Affected: 8.0.4 through 8.0.8
Showing 30