What’s Vulnerable › Products
Oracle Banking Platform vulnerabilities
72 known vulnerabilities, 1 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.
Check whether your Oracle Banking Platform version is affected
Exploited Oracle Banking Platform vulnerabilities
- CVE-2020-11023 — JQuery Cross-Site Scripting (XSS) Vulnerability
Latest Oracle Banking Platform vulnerabilities
- CVE-2021-45105 — Apache Log4j2 does not always protect from infinite recursion in lookup evaluation (CVSS 5.9)
- CVE-2021-43797 — HTTP fails to validate against control chars in header names which may lead to HTTP request smuggling (CVSS 6.5)
- CVE-2021-41184 — XSS in the `of` option of the `.position()` util (CVSS 6.1)
- CVE-2021-41183 — XSS in `*Text` options of the Datepicker widget (CVSS 6.1)
- CVE-2021-41182 — XSS in the `altField` option of the Datepicker widget (CVSS 6.1)
- CVE-2021-2351 — (CVSS 5.1)
- CVE-2021-35043 — (CVSS 6.1)
- CVE-2021-36090 — Apache Commons Compress 1.0 to 1.20 denial of service vulnerability (CVSS 7.5)
- CVE-2020-6950 — (CVSS 6.5)
- CVE-2021-29425 — Possible limited path traversal vulnerabily in Apache Commons IO (CVSS 4.8)
- CVE-2021-21351 — XStream is vulnerable to an Arbitrary Code Execution attack (CVSS 9.1)
- CVE-2021-21350 — XStream is vulnerable to an Arbitrary Code Execution attack (CVSS 9.8)
- CVE-2021-21349 — A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host (CVSS 8.6)
- CVE-2021-21348 — XStream is vulnerable to an attack using Regular Expression for a Denial of Service (ReDos) (CVSS 7.5)
- CVE-2021-21347 — XStream is vulnerable to an Arbitrary Code Execution attack (CVSS 9.8)
- CVE-2021-21346 — XStream is vulnerable to an Arbitrary Code Execution attack (CVSS 9.8)
- CVE-2021-21345 — XStream is vulnerable to a Remote Command Execution attack (CVSS 9.9)
- CVE-2021-21344 — XStream is vulnerable to an Arbitrary Code Execution attack (CVSS 9.8)
- CVE-2021-21343 — XStream is vulnerable to an Arbitrary File Deletion on the local host when unmarshalling as long as the executing process has sufficient rights (CVSS 7.5)
- CVE-2021-21342 — A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host (CVSS 9.1)
- CVE-2021-21341 — XStream can cause a Denial of Service (CVSS 7.5)
- CVE-2020-13936 — Velocity Sandbox Bypass (CVSS 8.8)
- CVE-2020-36189 — (CVSS 8.1)
- CVE-2020-35491 — (CVSS 8.1)
- CVE-2020-35490 — (CVSS 8.1)