Login Request a demo
FC
Product
Flexcube Core Banking
by Oracle · last CVE Apr 13, 2021
15
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities15In the news0Timeline
Severity mix
Critical 1High 2Medium 10Low 2
Severity
All severities15Critical1High2Medium10Low2
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Flexcube Core Banking to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-10683
9.8
7%
May 1
dom4j before 2.0.3 and 2.1.x before 2.1.3 allows external DTDs and External Entities by default, which might enable XXE attacks
Affected: 11.7.0; 11.8.0; 11.9.0; 11.10.0
CVE-2019-0227
7.5
92%
May 1
A Server Side Request Forgery (SSRF) vulnerability affected the Apache Axis 1.4 distribution that was last released in 2006
Affected: 11.7.0; 11.8.0; 11.9.0; 11.10.0
CVE-2020-27216
7.0
4%
Oct 23
In Eclipse Jetty versions 1.0 thru 9.4.32.v20200930, 10.0.0.alpha1 thru 10.0.0.beta2, and 11.0.0.alpha1 thru 11.0.0.beta2O, on Unix like systems, the system's temporary directory…
Affected: 11.5.0 through 11.9.0
CVE-2020-2955
6.3
1%
Apr 15
Vulnerability in the Oracle FLEXCUBE Core Banking product of Oracle Financial Services Applications (component: Transaction Processing)
Affected: 4.0
CVE-2019-10241
6.1
9%
Apr 22
In Eclipse Jetty version 9.2.26 and older, 9.3.25 and older, and 9.4.15 and older, the server is vulnerable to XSS conditions if a remote client USES a specially formatted URL…
Affected: 11.5.0 through 11.7.0; 5.2.0
CVE-2018-8032
6.1
11%
Aug 2
Apache Axis 1.x up to and including 1.4 is vulnerable to a cross-site scripting (XSS) attack in the default servlet/services
Affected: 11.7.0; 11.8.0; 11.9.0; 11.10.0
CVE-2018-2807
6.1
1%
Apr 19
Vulnerability in the Oracle FLEXCUBE Core Banking component of Oracle Financial Services Applications (subcomponent: Securities)
Affected: 11.5.0; 11.6.0; 11.7.0
CVE-2016-8323
5.4
1%
Jan 27
Vulnerability in the Oracle FLEXCUBE Core Banking component of Oracle Financial Services Applications (subcomponent: Core)
Affected: 5.1.0; 5.2.0; 11.5.0
CVE-2019-10247
5.3
6%
Apr 22
In Eclipse Jetty version 7.x, 8.x, 9.2.27 and older, 9.3.26 and older, and 9.4.16 and older, the server running on any OS and Jetty version combination will reveal the configured…
Affected: 11.5.0 through 11.7.0; 5.2.0
CVE-2019-10246
5.3
4%
Apr 22
In Eclipse Jetty version 9.2.27, 9.3.26, and 9.4.16, the server running on Windows is vulnerable to exposure of the fully qualified Base Resource directory name on Windows to a…
Affected: 11.5.0 through 11.7.0; 5.2.0
CVE-2016-8324
5.3
2%
Jan 27
Vulnerability in the Oracle FLEXCUBE Core Banking component of Oracle Financial Services Applications (subcomponent: Core)
Affected: 5.1.0; 5.2.0; 11.5.0
CVE-2021-29425
4.8
11%
Apr 13
Possible limited path traversal vulnerabily in Apache Commons IO
Affected: 11.6.0 through 11.8.0; 5.2.0; 11.10.0
CVE-2016-8322
4.3
1%
Jan 27
Vulnerability in the Oracle FLEXCUBE Core Banking component of Oracle Financial Services Applications (subcomponent: Core)
Affected: 5.1.0; 5.2.0; 11.5.0
CVE-2020-9488
3.7
8%
Apr 27
Improper validation of certificate with host mismatch in Apache Log4j SMTP appender
Affected: 11.5.0 through 11.7.0; 5.2.0
CVE-2016-8314
3.1
1%
Jan 27
Vulnerability in the Oracle FLEXCUBE Core Banking component of Oracle Financial Services Applications (subcomponent: Core)
Affected: 5.1.0; 5.2.0; 11.5.0
Showing 15