Priority LOW 29
Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Relationship Pricing).
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00295 · Published 2026-01-20 · No fix listed
Priority LOW 27
Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure).
CVSS 3.1MEDIUM 5.9· Network · Low privileges · User interaction · EPSS 0.00372 · Published 2023-10-17 · No fix listed
Priority LOW 29
Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure).
CVSS 3.1MEDIUM 6.5· Network · Low privileges · User interaction · EPSS 0.00355 · Published 2023-10-17 · No fix listed
Priority LOW 25
Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure).
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00371 · Published 2023-10-17 · No fix listed
Priority LOW 36
Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure).
CVSS 3.1MEDIUM 6.4· Network · Low privileges · User interaction · EPSS 0.00664 · Published 2022-07-19 · No fix listed
Priority LOW 33
Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure).
CVSS 3.1MEDIUM 6.7· Network · Low privileges · User interaction · EPSS 0.00659 · Published 2022-07-19 · No fix listed
Priority LOW 32
Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure).
CVSS 3.1MEDIUM 6.4· Network · Low privileges · User interaction · EPSS 0.00664 · Published 2022-07-19 · No fix listed
Priority LOW 29
Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure).
CVSS 3.1MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.00608 · Published 2022-07-19 · No fix listed
Priority LOW 35
Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure).
CVSS 3.1HIGH 7.1· Network · Low privileges · User interaction · EPSS 0.00825 · Published 2022-07-19 · No fix listed
Priority LOW 33
Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure).
CVSS 3.1MEDIUM 6.7· Network · Low privileges · User interaction · EPSS 0.00699 · Published 2022-07-19 · No fix listed
Priority LOW 27
Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure).
CVSS 3.1MEDIUM 5.9· Network · Low privileges · User interaction · EPSS 0.00634 · Published 2022-04-19 · No fix listed
Priority MEDIUM 42
There's a vulnerability within the Apache Xerces Java (XercesJ) XML parser when handling specially crafted XML document payloads.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.11615 · Published 2022-01-24 · Partial fix · 2.12.2 CWE-835
Priority HIGH 72
Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups.
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.99999 · Published 2021-12-18 · Partial fix · 2.17.0, 2.12.3 +5 CWE-20
Priority LOW 36
In Apache MINA, a specifically crafted, malformed HTTP request may cause the HTTP Header decoder to loop indefinitely.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.04634 · Published 2021-11-01 · Partial fix · 2.1.5, 2.0.22 CWE-835
Priority MEDIUM 48
jsoup is a Java library for working with HTML.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.06689 · Published 2021-08-18 · Partial fix · 1.14.2 CWE-248
Priority LOW 22
Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Loans And Deposits).
CVSS 3.1MEDIUM 4.6· Network · Low privileges · User interaction · EPSS 0.00504 · Published 2021-07-20 · No fix listed
Priority LOW 29
Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Flex-Branch).
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.01289 · Published 2021-07-20 · No fix listed
Priority MEDIUM 53
When reading a specially crafted ZIP archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.12945 · Published 2021-07-13 · Partial fix · 1.21 CWE-130
Priority MEDIUM 52
When reading a specially crafted TAR archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.10614 · Published 2021-07-13 · Partial fix · 1.21 CWE-130
Priority MEDIUM 47
When reading a specially crafted 7Z archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.12365 · Published 2021-07-13 · Partial fix · 1.21 CWE-130
Priority MEDIUM 46
When reading a specially crafted 7Z archive, the construction of the list of codecs that decompress an entry can result in an infinite loop.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.11567 · Published 2021-07-13 · Partial fix · 1.21 CWE-834
Priority LOW 34
A vulnerability in sshd-core of Apache Mina SSHD allows an attacker to overflow the server causing an OutOfMemory error.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.03049 · Published 2021-07-12 · Partial fix · 2.7.0 CWE-772
Priority LOW 31
In Apache PDFBox, a carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.03572 · Published 2021-06-12 · Partial fix · 2.0.24 CWE-789
Priority LOW 31
A carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.03337 · Published 2021-03-19 · Partial fix · 2.0.23 CWE-789
Priority LOW 30
A carefully crafted PDF file can trigger an infinite loop while loading the file.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.02993 · Published 2021-03-19 · Partial fix · 2.0.23 CWE-834
Load more
THREATIST.IORead the docs