[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fvxDS_OB3i39mcc6X217elgaLGvc8RfnDGTuFvxgubDA":3,"g5a-ex:oracle\u002Fflexcube_investor_servicing@*":165,"g5a-family:oracle\u002Fflexcube_investor_servicing":167},{"success":4,"data":5},true,{"product":6,"versions":62,"topVulnerabilitiesByEpss":81,"kevVulnerabilities":142,"seoMetadata":143,"meta":162},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":61},"oracle","flexcube_investor_servicing",18,44,0,"2021-07-21",[14,17,20,23,26,29,31,34,37,39,42,45,47,49,52,55,57,59],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},"12.0.0",false,{"version":18,"cve_count":19,"kev_count":11,"has_kev":16},"12.0.1",17,{"version":21,"cve_count":22,"kev_count":11,"has_kev":16},"12.0.2",11,{"version":24,"cve_count":25,"kev_count":11,"has_kev":16},"12.0.3",10,{"version":27,"cve_count":28,"kev_count":11,"has_kev":16},"12.0.4",34,{"version":30,"cve_count":11,"kev_count":11,"has_kev":16},"12.0.4.0.0",{"version":32,"cve_count":33,"kev_count":11,"has_kev":16},"12.1.0",39,{"version":35,"cve_count":36,"kev_count":11,"has_kev":16},"12.2.0",4,{"version":38,"cve_count":33,"kev_count":11,"has_kev":16},"12.3.0",{"version":40,"cve_count":41,"kev_count":11,"has_kev":16},"12.4.0",28,{"version":43,"cve_count":44,"kev_count":11,"has_kev":16},"14.0.0",12,{"version":46,"cve_count":11,"kev_count":11,"has_kev":16},"14.0.0.4.0",{"version":48,"cve_count":22,"kev_count":11,"has_kev":16},"14.1.0",{"version":50,"cve_count":51,"kev_count":11,"has_kev":16},"14.4.0",3,{"version":53,"cve_count":54,"kev_count":11,"has_kev":16},"14.5.0",2,{"version":56,"cve_count":11,"kev_count":11,"has_kev":16},"14.5.0.15.0",{"version":58,"cve_count":11,"kev_count":11,"has_kev":16},"14.7.0.8.0",{"version":60,"cve_count":11,"kev_count":11,"has_kev":16},"14.8.0.1.0","Flexcube Investor Servicing by Oracle is a technology product with 18 tracked versions and 44 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},{"version":18,"cve_count":19,"kev_count":11,"has_kev":16},{"version":21,"cve_count":22,"kev_count":11,"has_kev":16},{"version":24,"cve_count":25,"kev_count":11,"has_kev":16},{"version":27,"cve_count":28,"kev_count":11,"has_kev":16},{"version":30,"cve_count":11,"kev_count":11,"has_kev":16},{"version":32,"cve_count":33,"kev_count":11,"has_kev":16},{"version":35,"cve_count":36,"kev_count":11,"has_kev":16},{"version":38,"cve_count":33,"kev_count":11,"has_kev":16},{"version":40,"cve_count":41,"kev_count":11,"has_kev":16},{"version":43,"cve_count":44,"kev_count":11,"has_kev":16},{"version":46,"cve_count":11,"kev_count":11,"has_kev":16},{"version":48,"cve_count":22,"kev_count":11,"has_kev":16},{"version":50,"cve_count":51,"kev_count":11,"has_kev":16},{"version":53,"cve_count":54,"kev_count":11,"has_kev":16},{"version":56,"cve_count":11,"kev_count":11,"has_kev":16},{"version":58,"cve_count":11,"kev_count":11,"has_kev":16},{"version":60,"cve_count":11,"kev_count":11,"has_kev":16},[82,90,95,102,107,114,119,126,132,137],{"cveId":83,"description":84,"publishedDate":85,"cvssScore":86,"cvssVersion":87,"severity":88,"isKev":16,"epssScore":89},"CVE-2017-5645","In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that, when deserialized, can execute arbitrary code.","2017-04-17",9.8,"v3.1","Critical",0.89792,{"cveId":91,"description":92,"publishedDate":93,"cvssScore":86,"cvssVersion":87,"severity":88,"isKev":16,"epssScore":94},"CVE-2019-13990","initDocumentParser in xml\u002FXMLSchedulingDataProcessor.java in Terracotta Quartz Scheduler through 2.3.0 allows XXE attacks via a job description.","2019-07-26",0.16628,{"cveId":96,"description":97,"publishedDate":98,"cvssScore":99,"cvssVersion":87,"severity":100,"isKev":16,"epssScore":101},"CVE-2019-12402","The file name encoding algorithm used internally in Apache Commons Compress 1.15 to 1.18 can get into an infinite loop when faced with specially crafted inputs. This can lead to a denial of service attack if an attacker can choose the file names inside of an archive created by Compress.","2019-08-30",7.5,"High",0.16157,{"cveId":103,"description":104,"publishedDate":105,"cvssScore":99,"cvssVersion":87,"severity":100,"isKev":16,"epssScore":106},"CVE-2018-1000632","dom4j version prior to version 2.1.1 contains a CWE-91: XML Injection vulnerability in Class: Element. Methods: addElement, addAttribute that can result in an attacker tampering with XML documents through XML injection. This attack appear to be exploitable via an attacker specifying attributes or elements in the XML document. This vulnerability appears to have been fixed in 2.1.1 or later.","2018-08-20",0.0657,{"cveId":108,"description":109,"publishedDate":110,"cvssScore":111,"cvssVersion":87,"severity":112,"isKev":16,"epssScore":113},"CVE-2018-10237","Unbounded memory allocation in Google Guava 11.0 through 24.x before 24.1.1 allows remote attackers to conduct denial of service attacks against servers that depend on this library and deserialize attacker-provided data, because the AtomicDoubleArray class (when serialized with Java serialization) and the CompoundOrdering class (when serialized with GWT serialization) perform eager allocation without appropriate checks on what a client has sent and whether the data size is reasonable.","2018-04-26",5.9,"Medium",0.05086,{"cveId":115,"description":116,"publishedDate":12,"cvssScore":117,"cvssVersion":87,"severity":100,"isKev":16,"epssScore":118},"CVE-2021-2351","Vulnerability in the Advanced Networking Option component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise Advanced Networking Option. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Advanced Networking Option, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Advanced Networking Option. Note: The July 2021 Critical Patch Update introduces a number of Native Network Encryption changes to deal with vulnerability CVE-2021-2351 and prevent the use of weaker ciphers. Customers should review: \"Changes in Native Network Encryption with the July 2021 Critical Patch Update\" (Doc ID 2791571.1). CVSS 3.1 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H).",8.3,0.02432,{"cveId":120,"description":121,"publishedDate":122,"cvssScore":123,"cvssVersion":124,"severity":112,"isKev":16,"epssScore":125},"CVE-2018-3030","Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.4, 12.1.0, 12.3.0 and 12.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Investor Servicing. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle FLEXCUBE Investor Servicing. CVSS 3.0 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H).","2018-07-18",6.5,"v3.0",0.02202,{"cveId":127,"description":128,"publishedDate":129,"cvssScore":130,"cvssVersion":87,"severity":112,"isKev":16,"epssScore":131},"CVE-2019-10219","A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.","2019-11-08",6.1,0.02157,{"cveId":133,"description":134,"publishedDate":122,"cvssScore":135,"cvssVersion":124,"severity":112,"isKev":16,"epssScore":136},"CVE-2018-3029","Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.4, 12.1.0, 12.3.0 and 12.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Investor Servicing. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle FLEXCUBE Investor Servicing accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N).",5.3,0.02083,{"cveId":138,"description":139,"publishedDate":122,"cvssScore":140,"cvssVersion":124,"severity":100,"isKev":16,"epssScore":141},"CVE-2018-3035","Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.4, 12.1.0, 12.3.0 and 12.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle FLEXCUBE Investor Servicing. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle FLEXCUBE Investor Servicing accessible data as well as unauthorized access to critical data or complete access to all Oracle FLEXCUBE Investor Servicing accessible data. CVSS 3.0 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N).",8.1,0.02049,[],{"title":144,"metaDescription":145,"keywords":146,"structuredData":147},"Flexcube Investor Servicing by Oracle - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Flexcube Investor Servicing by Oracle covering 18 versions with 44 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Flexcube Investor Servicing vulnerabilities, Flexcube Investor Servicing security, Flexcube Investor Servicing CVE, Oracle Flexcube Investor Servicing, Flexcube Investor Servicing threat intelligence, Oracle security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":148,"@type":149,"name":150,"description":145,"url":151,"manufacturer":152,"applicationCategory":156,"softwareVersion":157,"mainEntity":158},"https:\u002F\u002Fschema.org","SoftwareApplication","Flexcube Investor Servicing","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Foracle\u002Fflexcube_investor_servicing",{"@type":153,"name":154,"url":155},"Organization","Oracle","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Foracle","Security Software","18 versions tracked",{"@type":159,"name":160,"description":161,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Flexcube Investor Servicing Security Vulnerabilities","Security vulnerabilities affecting Flexcube Investor Servicing by Oracle",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":163,"apiVersion":164},"2026-10-17T18:01:27.663Z","3.0",{"rows":166,"total":11,"capped":16,"failed":11},[],[]]