What’s Vulnerable › Products

Oracle Financial Services Crime And Compliance Management Studio vulnerabilities

22 known vulnerabilities, 1 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Check whether your Oracle Financial Services Crime And Compliance Management Studio version is affected

Exploited Oracle Financial Services Crime And Compliance Management Studio vulnerabilities

• CVE-2018-1273 — VMware Tanzu Spring Data Commons Property Binder Vulnerability

Latest Oracle Financial Services Crime And Compliance Management Studio vulnerabilities

• CVE-2022-22976 — (CVSS 5.3)
• CVE-2022-22978 — (CVSS 9.8)
• CVE-2022-22971 — (CVSS 6.5)
• CVE-2022-22970 — Denial of service in Spring Framework (CVSS 5.3)
• CVE-2022-24823 — Local Information Disclosure Vulnerability in io.netty:netty-codec-http (CVSS 5.5)
• CVE-2022-25647 — Deserialization of Untrusted Data (CVSS 7.5)
• CVE-2020-36518 — Deeply nested json in jackson-databind (CVSS 7.5)
• CVE-2021-38296 — Apache Spark Key Negotiation Vulnerability (CVSS 7.5)
• CVE-2022-23181 — Local privilege escalation with FileStore (CVSS 7.0)
• CVE-2022-23437 — Infinite loop within Apache XercesJ xml parser (CVSS 6.5)
• CVE-2021-41303 — Apache Shiro before 1.8.0, when using Apache Shiro with Spring Boot, a specially crafted HTTP request may cause an authentication bypass (CVSS 9.8)
• CVE-2021-37714 — Crafted input may cause the jsoup HTML and XML parser to get stuck, timeout, or throw unchecked exceptions (CVSS 7.5)
• CVE-2021-34429 — (CVSS 5.3)
• CVE-2021-36090 — Apache Commons Compress 1.0 to 1.20 denial of service vulnerability (CVSS 7.5)
• CVE-2021-35517 — Apache Commons Compress 1.1 to 1.20 denial of service vulnerability (CVSS 7.5)
• CVE-2021-35516 — Apache Commons Compress 1.6 to 1.20 denial of service vulnerability (CVSS 7.5)
• CVE-2021-35515 — Apache Commons Compress 1.6 to 1.20 denial of service vulnerability (CVSS 7.5)
• CVE-2021-23337 — Command Injection (CVSS 7.2)
• CVE-2020-28500 — Regular Expression Denial of Service (ReDoS) (CVSS 5.3)
• CVE-2020-9492 — (CVSS 8.8)
• CVE-2020-7712 — Command Injection (CVSS 7.2)
• CVE-2018-1273 — VMware Tanzu Spring Data Commons Property Binder Vulnerability (CVSS 9.8) — exploited