What’s Vulnerable › Products
Oracle Corporation Financial Services Analytical Applications Infrastructure vulnerabilities
90 known vulnerabilities, 3 confirmed exploited in the wild (CISA KEV), 13 published in the last 12 months.
Exploited Oracle Corporation Financial Services Analytical Applications Infrastructure vulnerabilities
- CVE-2022-22963 — VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability
- CVE-2022-22965 — Spring Framework JDK 9+ Remote Code Execution Vulnerability
- CVE-2017-12617 — Apache Tomcat Remote Code Execution Vulnerability
Latest Oracle Corporation Financial Services Analytical Applications Infrastructure vulnerabilities
- CVE-2026-34325 — (CVSS 6.8)
- CVE-2026-34321 — (CVSS 4.8)
- CVE-2026-34314 — (CVSS 6.8)
- CVE-2026-34313 — (CVSS 6.5)
- CVE-2026-34310 — (CVSS 7.5)
- CVE-2026-22010 — (CVSS 7.5)
- CVE-2025-61756 — (CVSS 7.5)
- CVE-2025-61751 — (CVSS 8.1)
- CVE-2025-53037 — (CVSS 9.8)
- CVE-2025-53036 — (CVSS 8.6)
- CVE-2025-53035 — (CVSS 6.5)
- CVE-2025-53034 — (CVSS 5.4)
- CVE-2025-53031 — (CVSS 5.3)
- CVE-2023-21901 — (CVSS 7.4)
- CVE-2022-22965 — Spring Framework JDK 9+ Remote Code Execution Vulnerability (CVSS 9.8) — exploited
- CVE-2022-22963 — VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability (CVSS 9.8) — exploited
- CVE-2022-24729 — Regular expression Denial of Service in dialog plugin (CVSS 7.5)
- CVE-2022-24728 — Cross-site Scripting in CKEditor4 (CVSS 5.4)
- CVE-2020-36518 — Deeply nested json in jackson-databind (CVSS 7.5)
- CVE-2022-23437 — Infinite loop within Apache XercesJ xml parser (CVSS 6.5)
- CVE-2021-35687 — (CVSS 5.0)
- CVE-2021-35686 — (CVSS 4.0)
- CVE-2021-45105 — Apache Log4j2 does not always protect from infinite recursion in lookup evaluation (CVSS 5.9)
- CVE-2021-38153 — Timing Attack Vulnerability for Apache Kafka Connect and Clients (CVSS 5.9)
- CVE-2021-37695 — Execution of JavaScript code using malformed HTML in ckeditor (CVSS 5.4)