FP
Product
Flexcube Private Banking
On CISA KEVExploited in the wild
75
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 8High 23Medium 42Low 1
Watch
Add Flexcube Private Banking to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-10011 | 5.5 | Aug 8 | Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Miscellaneous) Affected: 2.0.0; 2.0.1; 2.2.0; 12.0.1 |
| CVE-2017-10012 | 5.4 | Aug 8 | Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Operations) Affected: 2.0.0; 2.0.1; 2.2.0; 12.0.1 |
| CVE-2017-3479 | 5.4 | Apr 24 | Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Miscellaneous) Affected: 2.0.0; 2.0.1; 2.2.0.1; 12.0.1 |
| CVE-2017-3478 | 5.4 | Apr 24 | Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Miscellaneous) Affected: 12.0.0; 12.1.0 |
| CVE-2016-5623 | 5.4 | Jan 27 | Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Product / Instrument Search) Affected: 2.0.1; 2.2.0; 12.0.1 |
| CVE-2020-5397 | 5.3 | Jan 17 | Spring Framework, versions 5.2.x prior to 5.2.3 are vulnerable to CSRF attacks through CORS preflight requests that target Spring MVC (spring-webmvc module) or Spring WebFlux… Affected: 12.0.0; 12.1.0 |
| CVE-2019-10247 | 5.3 | Apr 22 | In Eclipse Jetty version 7.x, 8.x, 9.2.27 and older, 9.3.26 and older, and 9.4.16 and older, the server running on any OS and Jetty version combination will reveal the configured… Affected: 12.0.0; 12.1.0 |
| CVE-2019-10246 | 5.3 | Apr 22 | In Eclipse Jetty version 9.2.27, 9.3.26, and 9.4.16, the server running on Windows is vulnerable to exposure of the fully qualified Base Resource directory name on Windows to a… Affected: 12.0.0; 12.1.0 |
| CVE-2016-8300 | 5.3 | Jan 27 | Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Product / Instrument Search) Affected: 2.0.1; 2.2.0; 12.0.1 |
| CVE-2017-3475 | 5.0 | Apr 24 | Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Miscellaneous) Affected: 2.0.0; 2.0.1; 2.2.0.1; 12.0.1 |
| CVE-2020-27218 | 4.8 | Nov 28 | In Eclipse Jetty version 9.4.0.RC0 to 9.4.34.v20201102, 10.0.0.alpha0 to 10.0.0.beta2, and 11.0.0.alpha0 to 11.0.0.beta2, if GZIP request body inflation is enabled and requests… Affected: 12.0.0; 12.1.0 |
| CVE-2017-3471 | 4.7 | Apr 24 | Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Miscellaneous) Affected: 12.0.0; 12.1.0 |
| CVE-2017-10010 | 4.6 | Aug 8 | Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: FileUploads) Affected: 2.0.0; 2.0.1; 2.2.0; 12.0.1 |
| CVE-2017-10022 | 4.3 | Aug 8 | Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Operations) Affected: 2.0.0; 2.0.1; 2.2.0; 12.0.1 |
| CVE-2017-10009 | 4.3 | Aug 8 | Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Miscellaneous) Affected: 2.0.0; 2.0.1; 2.2.0; 12.0.1 |
| CVE-2017-10008 | 4.3 | Aug 8 | Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Miscellaneous) Affected: 2.0.0; 2.0.1; 2.2.0; 12.0.1 |
| CVE-2017-10007 | 4.3 | Aug 8 | Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Miscellaneous) Affected: 2.0.0; 2.0.1; 2.2.0; 12.0.1 |
| CVE-2017-3473 | 4.3 | Apr 24 | Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Miscellaneous) Affected: 2.0.0; 2.0.1; 2.2.0.1; 12.0.1 |
| CVE-2016-8308 | 4.3 | Jan 27 | Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Product / Instrument Search) Affected: 2.0.1; 2.2.0; 12.0.1 |
| CVE-2016-5614 | 4.3 | Jan 27 | Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Product / Instrument Search) Affected: 2.0.1; 2.2.0; 12.0.1 |
| CVE-2017-3477 | 4.2 | Apr 24 | Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Miscellaneous) Affected: 12.0.0; 12.1.0 |
| CVE-2016-5493 | 4.2 | Oct 25 | Unspecified vulnerability in the Oracle FLEXCUBE Private Banking component in Oracle Financial Services Applications 12.0.1 through 12.0.3 allows remote authenticated users to… Affected: 12.0.1; 12.0.2; 12.0.3 |
| CVE-2016-8313 | 4.1 | Jan 27 | Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Product / Instrument Search) Affected: 2.0.1; 2.2.0; 12.0.1 |
| CVE-2020-9488 | 3.7 | Apr 27 | Improper validation of certificate with host mismatch in Apache Log4j SMTP appender Affected: 12.0.0; 12.1.0 |
| CVE-2013-4316 | – | Sep 30 | Apache Struts 2.0.0 through 2.3.15.1 enables Dynamic Method Invocation by default, which has unknown impact and attack vectors Affected: 1.7; 2.0; 2.0.1; 2.2.0.1; 3.0; 12.0.1; +1 more |
