Login Request a demo
FU
Product
Flexcube Universal Banking
by Oracle · last CVE Jan 20, 2026
94
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities94In the news0Timeline
Severity mix
Critical 0High 20Medium 70Low 4
Severity
All severities94Critical0High20Medium70Low4
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Flexcube Universal Banking to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2018-2648
8.8
2%
Jan 18
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure)
Affected: 11.3.0; 11.4.0; 12.0.1; 12.0.2; 12.0.3; 12.1.0; +3 more
CVE-2016-5607
8.8
2%
Oct 25
Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Applications 11.3.0, 11.4.0, 12.0.1 through 12.0.3, 12.1.0, and 12.2.0…
Affected: 11.3.0; 11.4.0; 12.0.1; 12.0.2; 12.0.3; 12.1.0; +1 more
CVE-2020-11987
8.2
13%
Feb 24
Apache Batik 1.13 is vulnerable to server-side request forgery, caused by improper input validation by the NodePickerPanel
Affected: 14.1.0 through 14.4.0
CVE-2019-2754
8.1
1%
Jul 23
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure)
Affected: 12.0.1 through 12.0.3; 12.1.0 through 12.4.0; 14.0.0 through 14.2.0
CVE-2018-3015
8.1
2%
Jul 18
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure)
Affected: 11.3.0; 11.4.0; 12.0.1; 12.0.2; 12.0.3; 12.1.0; +5 more
CVE-2018-2649
8.1
2%
Jan 18
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure)
Affected: 11.3.0; 11.4.0; 12.0.1; 12.0.2; 12.0.3; 12.1.0; +3 more
CVE-2016-8297
8.1
1%
Jan 27
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Core)
Affected: 11.3.0; 11.4.0; 12.0.1; 12.0.2; 12.0.3; 12.1.0; +1 more
CVE-2016-5619
8.1
2%
Oct 25
Unspecified vulnerability in the Oracle FLEXCUBE Universal Banking component in Oracle Financial Services Applications 11.3.0, 11.4.0, 12.0.1 through 12.0.3, 12.1.0, and 12.2.0…
Affected: 11.3.0; 11.4.0; 12.0.1; 12.0.2; 12.0.3; 12.1.0; +1 more
CVE-2021-37714
7.5
7%
Aug 18
Crafted input may cause the jsoup HTML and XML parser to get stuck, timeout, or throw unchecked exceptions
Affected: 14.0.0 through 14.3.0; 14.5
CVE-2021-35516
7.5
12%
Jul 13
When reading a specially crafted 7Z archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs
Affected: 14.0.0 through 14.3.0; 12.4.0; 14.5
CVE-2021-35515
7.5
12%
Jul 13
When reading a specially crafted 7Z archive, the construction of the list of codecs that decompress an entry can result in an infinite loop
Affected: 14.0.0 through 14.3.0; 12.4.0; 14.5.0
CVE-2021-36090
7.5
13%
Jul 13
Apache Commons Compress 1.0 to 1.20 denial of service vulnerability
Affected: 14.0.0 through 14.3.0; 12.4; 14.5
CVE-2021-35517
7.5
11%
Jul 13
Apache Commons Compress 1.1 to 1.20 denial of service vulnerability
Affected: 14.0.0 through 14.3.0; 12.4; 14.5
CVE-2019-12399
7.5
4%
Jan 14
When Connect workers in Apache Kafka 2.0.0, 2.0.1, 2.1.0, 2.1.1, 2.2.0, 2.2.1, or 2.3.0 are configured with one or more config providers, and a connector is created/updated on…
Affected: 14.4.0
CVE-2016-8310
7.3
2%
Jan 27
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Core)
Affected: 11.3.0; 11.4.0; 12.0.1; 12.0.2; 12.0.3; 12.1.0; +1 more
CVE-2022-21544
7.1
1%
Jul 19
Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure)
Affected: 12.1.0 through 12.4.0; 14.0.0 through 14.3.0; 14.5.0
CVE-2020-2699
7.1
1%
Jan 15
Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure)
Affected: 12.0.1 through 12.4.0; 14.0.0 through 14.3.0
CVE-2018-2746
7.1
2%
Apr 19
Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core module)
Affected: 11.3.0; 11.4.0; 12.0.1; 12.0.2; 12.0.3; 12.1.0; +4 more
CVE-2017-10363
7.1
2%
Oct 19
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Security)
Affected: 11.3; 11.4.0; 12.0.1; 12.0.2; 12.0.3; 12.1.0; +3 more
CVE-2017-10085
7.1
2%
Aug 8
Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Infrastructure)
Affected: 11.3.0; 11.4.0; 12.0.1; 12.0.2; 12.0.3; 12.1.0; +2 more
Showing 20