Login Request a demo
FS
Product
Financial Services Analytical Applications Infrastructure
by Oracle · last CVE Apr 21, 2026
On CISA KEVExploited in the wild
88
CVEs
3
On KEV
10.0
Max CVSS
0
New 30D
Vulnerabilities88In the news0Timeline
Severity mix
Critical 18High 30Medium 39Low 1
Severity
All severities88Critical18High30Medium39Low1
Exploitation
On CISA KEV3Exploited in the wild3
Watch

Add Financial Services Analytical Applications Infrastructure to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-34325
6.8
0%
Apr 21
Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: User Interface)
Affected: 8.0.7.9.0; 8.0.8.7.0; 8.1.2.5.0
CVE-2026-34314
6.8
0%
Apr 21
Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Platform)
Affected: 8.0.7.9.0; 8.0.8.7.0; 8.1.2.5.0
CVE-2026-34313
6.5
0%
Apr 21
Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Platform)
Affected: 8.0.7.9.0; 8.0.8.7.0; 8.1.2.5.0
CVE-2025-53035
6.5
0%
Oct 21
Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Platform)
Affected: 8.0.7.9.0; 8.0.8.7.0; 8.1.2.5.0
CVE-2022-23437
6.5
12%
Jan 24
Infinite loop within Apache XercesJ xml parser
Affected: 8.0.6.0.0 through 8.0.9.0; 8.1.0.0 before 8.1.2.0
CVE-2021-26272
6.5
2%
Jan 26
It was possible to execute a ReDoS-type attack inside CKEditor 4 before 4.16 by persuading a victim to paste crafted URL-like text into the editor, and then press Enter or Space…
Affected: 8.0.6 through 8.0.9; 8.1.0; 8.1.1
CVE-2021-26271
6.5
2%
Jan 26
It was possible to execute a ReDoS-type attack inside CKEditor 4 before 4.16 by persuading a victim to paste crafted text into the Styles input of specific dialogs (in the…
Affected: 8.0.6 through 8.0.9; 8.1.0; 8.1.1
CVE-2020-5421
6.5
12%
Sep 19
RFD Protection Bypass via jsessionid
Affected: 8.0.6 through 8.1.0
CVE-2020-14685
6.5
1%
Jul 15
Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Infrastructure)
Affected: 8.0.6.0.0 through 8.1.0.0.0
CVE-2020-14605
6.5
1%
Jul 15
Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Infrastructure)
Affected: 8.0.6 through 8.1.0
CVE-2020-14662
6.3
1%
Jul 15
Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Infrastructure)
Affected: 8.0.6.0.0 through 8.1.0.0.0
CVE-2020-1945
6.3
2%
May 14
Apache Ant 1.1 to 1.9.14 and 1.10.0 to 1.10.7 uses the default temporary directory identified by the Java system property java.io.tmpdir for several tasks and may thus leak…
Affected: 8.0.6 through 8.1.0
CVE-2021-2140
6.1
1%
Apr 22
Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Rules Framework)
Affected: 8.0.6 through 8.1.0
CVE-2020-27193
6.1
2%
Nov 12
A cross-site scripting (XSS) vulnerability in the Color Dialog plugin for CKEditor 4.15.0 allows remote attackers to run arbitrary web script after persuading a user to copy and…
Affected: 8.0.6 through 8.0.9; 8.1.0; 8.1.1
CVE-2020-14615
6.1
1%
Jul 15
Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Infrastructure)
Affected: 8.0.6 through 8.1.0
CVE-2020-14601
6.1
1%
Jul 15
Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Infrastructure)
Affected: 8.0.6 through 8.1.0
CVE-2020-11022
6.1
99%
Apr 29
In jQuery starting with 1.12.0 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e
Affected: 8.0.6.0.0 through 8.1.0.0.0; 8.0.6 through 8.1.0
CVE-2019-11358
6.1
87%
Apr 20
jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution
Affected: 7.3.3 through 7.3.5; 8.0.2 through 8.1.0
CVE-2018-8032
6.1
11%
Aug 2
Apache Axis 1.x up to and including 1.4 is vulnerable to a cross-site scripting (XSS) attack in the default servlet/services
Affected: 7.3.3 through 7.3.5; 8.0.0 through 8.0.8
CVE-2015-9251
6.1
30%
Jan 18
jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript…
Affected: 7.3.3 through 7.3.5; 8.0.0 through 8.0.7
CVE-2018-2661
6.1
1%
Jan 18
Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure component of Oracle Financial Services Applications (subcomponent: Core)
Affected: 7.3.5.0.0; 7.3.5.1.0; 7.3.5.2.0; 7.3.5.3.0; 8.0.0.0.0; 8.0.1.0.0; +4 more
CVE-2021-38153
5.9
6%
Sep 22
Some components in Apache Kafka use `Arrays.equals` to validate a password or key, which is vulnerable to timing attacks that make brute force attacks for such credentials more…
Affected: 8.0.6.0 through 8.0.9.0; 8.1.0.0.0 through 8.1.20
CVE-2021-36374
5.5
3%
Jul 14
When reading a specially crafted ZIP archive, or a derived formats, an Apache Ant build can be made to allocate large amounts of memory that leads to an out of memory error, even…
Affected: 8.0.6 through 8.1.1
CVE-2021-36373
5.5
3%
Jul 14
When reading a specially crafted TAR archive an Apache Ant build can be made to allocate large amounts of memory that finally leads to an out of memory error, even for small…
Affected: 8.0.6 through 8.1.1
CVE-2019-12415
5.5
1%
Oct 23
In Apache POI up to 4.1.0, when using the tool XSSFExportToXml to convert user-provided Microsoft Excel documents, a specially crafted document can allow an attacker to read files…
Affected: 8.0.6 through 8.0.9
CVE-2025-53034
5.4
0%
Oct 21
Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Platform)
Affected: 8.0.7.9.0; 8.0.8.7.0; 8.1.2.5.0
CVE-2022-24728
5.4
1%
Mar 16
CKEditor4 is an open source what-you-see-is-what-you-get HTML editor
Affected: 8.0.7.0.0 through 8.1.0.0.0; 8.1.1.0; 8.1.2.0; 8.1.2.1
CVE-2021-37695
5.4
1%
Aug 13
ckeditor is an open source WYSIWYG HTML editor with rich content support
Affected: 8.0.7 through 8.1.1; 8.0.3
CVE-2021-32809
5.4
1%
Aug 12
ckeditor is an open source WYSIWYG HTML editor with rich content support
Affected: 8.0.7 through 8.1.1
CVE-2021-32808
5.4
1%
Aug 12
ckeditor is an open source WYSIWYG HTML editor with rich content support
Affected: 8.0.7 through 8.1.1
CVE-2019-2823
5.4
1%
Jul 23
Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure component of Oracle Financial Services Applications (subcomponent: Infrastructure)
Affected: 8.0.5 through 8.0.8
CVE-2025-53031
5.3
0%
Jul 15
Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Platform)
Affected: 8.0.7.8; 8.0.8.5; 8.0.8.6; 8.1.1.4; 8.1.2.5
CVE-2021-35687
5.3
1%
Jan 19
Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Unified Metadata Manager)
Affected: 8.0.7 through 8.1.1
CVE-2020-14604
5.3
1%
Jul 15
Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Infrastructure)
Affected: 8.0.6 through 8.1.0
CVE-2020-14603
5.3
1%
Jul 15
Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Infrastructure)
Affected: 8.0.6 through 8.1.0
CVE-2026-34321
4.8
0%
Apr 21
Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: User Interface)
Affected: 8.0.7.9.0; 8.0.8.7.0; 8.1.2.5.0
CVE-2021-29425
4.8
11%
Apr 13
Possible limited path traversal vulnerabily in Apache Commons IO
Affected: 8.0.7 through 8.1.1
CVE-2021-35686
4.3
1%
Jan 19
Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Unified Metadata Manager)
Affected: 8.0.7 through 8.1.1
CVE-2020-14684
4.3
1%
Jul 15
Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications (component: Infrastructure)
Affected: 8.0.6.0.0 through 8.1.0.0.0
Showing 39