FP
Product
Flexcube Private Banking
On CISA KEVExploited in the wild
75
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 8High 23Medium 42Low 1
Watch
Add Flexcube Private Banking to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-3081 In wildKEV | 8.1 | Apr 26 | Apache Struts 2.3.19 to 2.3.20.2, 2.3.21 to 2.3.24.1, and 2.3.25 to 2.3.28, when Dynamic Method Invocation is enabled, allow remote attackers to execute arbitrary code via method:… Affected: 2.0.0.0; 2.0.1; 2.2.0; 12.0.1; 12.0.3; 12.1.0 |
| CVE-2021-2351 | 8.3 | Jul 21 | Vulnerability in the Advanced Networking Option component of Oracle Database Server Affected: 12.0.0; 12.1.0 |
| CVE-2016-8312 | 8.2 | Jan 27 | Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Product / Instrument Search) Affected: 2.0.1; 2.2.0; 12.0.1 |
| CVE-2017-3472 | 8.1 | Apr 24 | Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Portfolio Management) Affected: 2.0.0; 2.0.1; 2.2.0.1; 12.0.1 |
| CVE-2016-8298 | 8.1 | Jan 27 | Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Product / Instrument Search) Affected: 2.0.1; 2.2.0; 12.0.1 |
| CVE-2021-43859 | 7.5 | Feb 1 | XStream is an open source java library to serialize objects to XML and back again Affected: 12.1.0 |
| CVE-2021-40690 | 7.5 | Sep 19 | Bypass of the secureValidation property Affected: 12.1.0 |
| CVE-2021-26117 | 7.5 | Jan 27 | The optional ActiveMQ LDAP login module can be configured to use anonymous access to the LDAP server Affected: 12.0.0; 12.1.0 |
| CVE-2020-11979 | 7.5 | Oct 1 | As mitigation for CVE-2020-1945 Apache Ant 1.10.8 changed the permissions of temporary files it created so that only the current user was allowed to access them Affected: 12.0.0; 12.1.0 |
| CVE-2020-11971 | 7.5 | May 14 | Apache Camel's JMX is vulnerable to Rebind Flaw Affected: 12.0.0; 12.1.0 |
| CVE-2020-5398 | 7.5 | Jan 16 | RFD Attack via "Content-Disposition" Header Sourced from Request Input by Spring MVC or Spring WebFlux Application Affected: 12.0.0; 12.1.0 |
| CVE-2019-12423 | 7.5 | Jan 16 | Apache CXF ships with a OpenId Connect JWK Keys service, which allows a client to obtain the public keys in JWK format, which can then be used to verify the signature of tokens… Affected: 12.0.0; 12.1.0 |
| CVE-2019-17359 | 7.5 | Oct 8 | The ASN.1 parser in Bouncy Castle Crypto (aka BC Java) 1.63 can trigger a large attempted memory allocation, and resultant OutOfMemoryError error, via crafted ASN.1 data Affected: 12.0.0; 12.1.0 |
| CVE-2019-12402 | 7.5 | Aug 30 | The file name encoding algorithm used internally in Apache Commons Compress 1.15 to 1.18 can get into an infinite loop when faced with specially crafted inputs Affected: 12.0.0; 12.1.0 |
| CVE-2019-0188 | 7.5 | May 28 | Apache Camel prior to 2.24.0 contains an XML external entity injection (XXE) vulnerability (CWE-611) due to using an outdated vulnerable JSON-lib library Affected: 12.0.0; 12.1.0 |
| CVE-2019-0227 | 7.5 | May 1 | A Server Side Request Forgery (SSRF) vulnerability affected the Apache Axis 1.4 distribution that was last released in 2006 Affected: 12.0.0; 12.1.0 |
| CVE-2019-5427 | 7.5 | Apr 22 | c3p0 version < 0.9.5.4 may be exploited by a billion laughs attack when loading XML configuration due to missing protections against recursive entity expansion when loading… Affected: 12.0.0; 12.1.0 |
| CVE-2018-15756 | 7.5 | Oct 18 | DoS Attack via Range Requests Affected: 12.0.1; 12.0.3; 12.1.0 |
| CVE-2018-11040 | 7.5 | Jun 25 | Spring Framework, versions 5.0.x prior to 5.0.7 and 4.3.x prior to 4.3.18 and older unsupported versions, allows web applications to enable cross-domain requests via JSONP (JSON… Affected: 2.0.0.0; 2.2.0.1; 12.0.1.0; 12.0.3.0; 12.1.0.0 |
| CVE-2018-11775 | 7.4 | Sep 10 | TLS hostname verification when using the Apache ActiveMQ Client before 5.15.6 was missing which could make the client vulnerable to a MITM attack between a Java application using… Affected: 2.0.0.0; 2.2.0.1; 12.0.1.0; 12.0.3.0; 12.1.0.0 |
| CVE-2019-10086 | 7.3 | Aug 20 | In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property… Affected: 12.0.0; 12.1.0 |
| CVE-2017-3476 | 7.1 | Apr 24 | Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Miscellaneous) Affected: 2.0.0; 2.0.1; 2.2.0.1; 12.0.1 |
| CVE-2020-27216 | 7.0 | Oct 23 | In Eclipse Jetty versions 1.0 thru 9.4.32.v20200930, 10.0.0.alpha1 thru 10.0.0.beta2, and 11.0.0.alpha1 thru 11.0.0.beta2O, on Unix like systems, the system's temporary directory… Affected: 12.0.0; 12.1.0 |
Showing 23