Oracle Corporation Oracle Financial Services Enterprise Case Management vulnerabilities

12 known vulnerabilities, 2 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Exploited Oracle Corporation Oracle Financial Services Enterprise Case Management vulnerabilities

CVE-2022-22963 — VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability
CVE-2022-22965 — Spring Framework JDK 9+ Remote Code Execution Vulnerability

CVE-2026-70922 — (CVSS 8.8)
CVE-2022-22965 — Spring Framework JDK 9+ Remote Code Execution Vulnerability (CVSS 9.8) — exploited
CVE-2022-22963 — VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability (CVSS 9.8) — exploited
CVE-2020-36518 — Deeply nested json in jackson-databind (CVSS 7.5)
CVE-2022-23437 — Infinite loop within Apache XercesJ xml parser (CVSS 6.5)
CVE-2021-38153 — Timing Attack Vulnerability for Apache Kafka Connect and Clients (CVSS 5.9)
CVE-2021-2351 — (CVSS 5.1)
CVE-2021-36090 — Apache Commons Compress 1.0 to 1.20 denial of service vulnerability (CVSS 7.5)
CVE-2021-35517 — Apache Commons Compress 1.1 to 1.20 denial of service vulnerability (CVSS 7.5)
CVE-2021-35516 — Apache Commons Compress 1.6 to 1.20 denial of service vulnerability (CVSS 7.5)
CVE-2021-35515 — Apache Commons Compress 1.6 to 1.20 denial of service vulnerability (CVSS 7.5)
CVE-2019-10219 — (CVSS 6.1)