Login Request a demo
FU
Product
Flexcube Universal Banking
by Oracle · last CVE Jan 20, 2026
94
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities94In the news0Timeline
Severity mix
Critical 0High 20Medium 70Low 4
Severity
All severities94Critical0High20Medium70Low4
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Flexcube Universal Banking to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2018-2648
8.8
2%
Jan 18
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure)
Affected: 11.3.0; 11.4.0; 12.0.1; 12.0.2; 12.0.3; 12.1.0; +3 more
CVE-2016-5607
8.8
2%
Oct 25
Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Applications 11.3.0, 11.4.0, 12.0.1 through 12.0.3, 12.1.0, and 12.2.0…
Affected: 11.3.0; 11.4.0; 12.0.1; 12.0.2; 12.0.3; 12.1.0; +1 more
CVE-2020-11987
8.2
13%
Feb 24
Apache Batik 1.13 is vulnerable to server-side request forgery, caused by improper input validation by the NodePickerPanel
Affected: 14.1.0 through 14.4.0
CVE-2019-2754
8.1
1%
Jul 23
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure)
Affected: 12.0.1 through 12.0.3; 12.1.0 through 12.4.0; 14.0.0 through 14.2.0
CVE-2018-3015
8.1
2%
Jul 18
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure)
Affected: 11.3.0; 11.4.0; 12.0.1; 12.0.2; 12.0.3; 12.1.0; +5 more
CVE-2018-2649
8.1
2%
Jan 18
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure)
Affected: 11.3.0; 11.4.0; 12.0.1; 12.0.2; 12.0.3; 12.1.0; +3 more
CVE-2016-8297
8.1
1%
Jan 27
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Core)
Affected: 11.3.0; 11.4.0; 12.0.1; 12.0.2; 12.0.3; 12.1.0; +1 more
CVE-2016-5619
8.1
2%
Oct 25
Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Applications 11.3.0, 11.4.0, 12.0.1 through 12.0.3, 12.1.0, and 12.2.0…
Affected: 11.3.0; 11.4.0; 12.0.1; 12.0.2; 12.0.3; 12.1.0; +1 more
CVE-2021-37714
7.5
7%
Aug 18
Crafted input may cause the jsoup HTML and XML parser to get stuck, timeout, or throw unchecked exceptions
Affected: 14.0.0 through 14.3.0; 14.5
CVE-2021-35516
7.5
12%
Jul 13
When reading a specially crafted 7Z archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs
Affected: 14.0.0 through 14.3.0; 12.4.0; 14.5
CVE-2021-35515
7.5
12%
Jul 13
When reading a specially crafted 7Z archive, the construction of the list of codecs that decompress an entry can result in an infinite loop
Affected: 14.0.0 through 14.3.0; 12.4.0; 14.5.0
CVE-2021-36090
7.5
13%
Jul 13
Apache Commons Compress 1.0 to 1.20 denial of service vulnerability
Affected: 14.0.0 through 14.3.0; 12.4; 14.5
CVE-2021-35517
7.5
11%
Jul 13
Apache Commons Compress 1.1 to 1.20 denial of service vulnerability
Affected: 14.0.0 through 14.3.0; 12.4; 14.5
CVE-2019-12399
7.5
4%
Jan 14
When Connect workers in Apache Kafka 2.0.0, 2.0.1, 2.1.0, 2.1.1, 2.2.0, 2.2.1, or 2.3.0 are configured with one or more config providers, and a connector is created/updated on…
Affected: 14.4.0
CVE-2016-8310
7.3
2%
Jan 27
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Core)
Affected: 11.3.0; 11.4.0; 12.0.1; 12.0.2; 12.0.3; 12.1.0; +1 more
CVE-2022-21544
7.1
1%
Jul 19
Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure)
Affected: 12.1.0 through 12.4.0; 14.0.0 through 14.3.0; 14.5.0
CVE-2020-2699
7.1
1%
Jan 15
Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure)
Affected: 12.0.1 through 12.4.0; 14.0.0 through 14.3.0
CVE-2018-2746
7.1
2%
Apr 19
Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core module)
Affected: 11.3.0; 11.4.0; 12.0.1; 12.0.2; 12.0.3; 12.1.0; +4 more
CVE-2017-10363
7.1
2%
Oct 19
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Security)
Affected: 11.3; 11.4.0; 12.0.1; 12.0.2; 12.0.3; 12.1.0; +3 more
CVE-2017-10085
7.1
2%
Aug 8
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure)
Affected: 11.3.0; 11.4.0; 12.0.1; 12.0.2; 12.0.3; 12.1.0; +2 more
CVE-2017-3485
6.8
2%
Apr 24
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure)
Affected: 11.3.0; 11.4.0; 12.0.0; 12.0.1; 12.0.2; 12.0.3; +2 more
CVE-2022-21578
6.7
1%
Jul 19
Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure)
Affected: 12.1.0 through 12.4.0; 14.0.0 through 14.3.0; 14.5.0
CVE-2022-21428
6.7
1%
Jul 19
Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure)
Affected: 12.1.0 through 12.4; 14.0.0 through 14.3.0; 14.5.0
CVE-2026-21978
6.5
0%
Jan 20
Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Relationship Pricing)
Affected: 14.0.0 through 14.8.0.0.0
CVE-2023-22118
6.5
0%
Oct 17
Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure)
Affected: 14.0.0 through 14.3.0; 14.5.0 through 14.7.0; 12.3.0; 12.4.0
CVE-2022-23437
6.5
12%
Jan 24
Infinite loop within Apache XercesJ xml parser
Affected: 12.4.0
CVE-2021-41973
6.5
5%
Nov 1
In Apache MINA, a specifically crafted, malformed HTTP request may cause the HTTP Header decoder to loop indefinitely
Affected: 14.0 through 14.3; 14.5
CVE-2021-30129
6.5
3%
Jul 12
A vulnerability in sshd-core of Apache Mina SSHD allows an attacker to overflow the server causing an OutOfMemory error
Affected: 14.0.0 through 14.3.0; 14.5
CVE-2020-14887
6.5
2%
Oct 21
Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure)
Affected: 14.0.0 through 14.4.0; 12.3.0
CVE-2020-2684
6.5
1%
Jan 15
Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure)
Affected: 12.0.1 through 12.4.0; 14.0.0 through 14.3.0
CVE-2018-2979
6.5
2%
Jul 18
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure)
Affected: 11.3.0; 11.4.0; 12.0.1; 12.0.2; 12.0.3; 12.1.0; +5 more
CVE-2018-2747
6.5
2%
Apr 19
Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core module)
Affected: 11.3.0; 11.4.0; 12.0.1; 12.0.2; 12.0.3; 12.1.0; +4 more
CVE-2017-10084
6.5
2%
Aug 8
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Report Generator)
Affected: 11.3.0; 11.4.0; 12.0.1; 12.0.2; 12.0.3; 12.1.0; +2 more
CVE-2017-3534
6.5
2%
Apr 24
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure)
Affected: 12.0.1; 12.0.2; 12.0.3; 12.1.0; 12.2.0; 12.3.0
CVE-2016-8311
6.5
2%
Jan 27
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Core)
Affected: 11.3.0; 11.4.0; 12.0.1; 12.0.2; 12.0.3; 12.1.0; +1 more
CVE-2022-21579
6.4
1%
Jul 19
Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure)
Affected: 12.1.0 through 12.4.0; 14.0.0 through 14.3.0; 14.5.0
CVE-2022-21577
6.4
1%
Jul 19
Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure)
Affected: 12.1.0 through 12.4.0; 14.0.0 through 14.3.0; 14.5.0
CVE-2022-21576
6.4
1%
Jul 19
Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure)
Affected: 14.0.0 through 14.3.0; 12.3.0; 12.4.0; 14.5.0
CVE-2018-2974
6.3
1%
Jul 18
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure)
Affected: 11.3.0; 11.4.0; 12.0.1; 12.0.2; 12.0.3; 12.1.0; +5 more
CVE-2016-8299
6.3
1%
Jan 27
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Core)
Affected: 11.3.0; 11.4.0; 12.0.1; 12.0.2; 12.0.3; 12.1.0; +1 more
CVE-2019-2744
6.1
1%
Jul 23
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure)
Affected: 12.0.1 through 12.0.3; 12.1.0 through 12.4.0; 14.0.0 through 14.2.0
CVE-2018-2899
6.1
2%
Jul 18
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure)
Affected: 11.3.0; 11.4.0; 12.0.1; 12.0.2; 12.0.3; 12.1.0; +5 more
CVE-2018-2748
6.1
1%
Apr 19
Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core module)
Affected: 11.3.0; 11.4.0; 12.0.1; 12.0.2; 12.0.3; 12.1.0; +4 more
CVE-2017-10083
6.1
1%
Aug 8
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure)
Affected: 11.3.0; 11.4.0; 12.0.1; 12.0.2; 12.0.3; 12.1.0; +2 more
CVE-2017-3314
6.1
1%
Jan 27
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Core)
Affected: 12.0.0; 12.1.0; 12.2.0
CVE-2016-8303
6.1
1%
Jan 27
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Core)
Affected: 11.3.0; 11.4.0; 12.0.1; 12.0.2; 12.0.3; 12.1.0; +1 more
CVE-2016-5622
6.1
2%
Oct 25
Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Applications 11.3.0, 11.4.0, 12.0.1 through 12.0.3, 12.1.0, and 12.2.0…
Affected: 11.3.0; 11.4.0; 12.0.1; 12.0.2; 12.0.3; 12.1.0; +1 more
CVE-2023-22119
5.9
0%
Oct 17
Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure)
Affected: 14.0.0 through 14.3.0; 14.5.0 through 14.7.0; 12.3.0; 12.4.0
CVE-2022-21472
5.9
1%
Apr 19
Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure)
Affected: 14.0.0 through 14.3.0; 12.4.0; 14.5.0
CVE-2021-2323
5.9
1%
Jul 21
Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Flex-Branch)
Affected: 14.0.0 through 14.4.0; 12.3.0; 12.4.0
Page 1 of 2 · 94 total
12