[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fUZfCTvY5sGcWTSbgh_Cl7p1N6236P63Uhn9O9zXeAUw":3,"g5a-ex:oracle\u002Fflexcube_private_banking@*":155,"g5a-family:oracle\u002Fflexcube_private_banking":157},{"success":4,"data":5},true,{"product":6,"versions":57,"topVulnerabilitiesByEpss":74,"kevVulnerabilities":133,"seoMetadata":134,"meta":153},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":56},"oracle","flexcube_private_banking",16,75,0,"2022-02-01",[14,18,21,24,27,29,31,34,36,39,41,43,45,48,51,54],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"12.0.0",42,false,{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},"12.0.1",27,{"version":22,"cve_count":23,"kev_count":11,"has_kev":17},"12.0.1.0",3,{"version":25,"cve_count":26,"kev_count":11,"has_kev":17},"12.0.2",2,{"version":28,"cve_count":26,"kev_count":11,"has_kev":17},"12.0.3",{"version":30,"cve_count":23,"kev_count":11,"has_kev":17},"12.0.3.0",{"version":32,"cve_count":33,"kev_count":11,"has_kev":17},"12.1.0",46,{"version":35,"cve_count":23,"kev_count":11,"has_kev":17},"12.1.0.0",{"version":37,"cve_count":38,"kev_count":11,"has_kev":17},"1.7",1,{"version":40,"cve_count":38,"kev_count":11,"has_kev":17},"2.0",{"version":42,"cve_count":9,"kev_count":11,"has_kev":17},"2.0.0",{"version":44,"cve_count":23,"kev_count":11,"has_kev":17},"2.0.0.0",{"version":46,"cve_count":47,"kev_count":11,"has_kev":17},"2.0.1",25,{"version":49,"cve_count":50,"kev_count":11,"has_kev":17},"2.2.0",19,{"version":52,"cve_count":53,"kev_count":11,"has_kev":17},"2.2.0.1",9,{"version":55,"cve_count":38,"kev_count":11,"has_kev":17},"3.0","Flexcube Private Banking by Oracle is a technology product with 16 tracked versions and 75 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},{"version":22,"cve_count":23,"kev_count":11,"has_kev":17},{"version":25,"cve_count":26,"kev_count":11,"has_kev":17},{"version":28,"cve_count":26,"kev_count":11,"has_kev":17},{"version":30,"cve_count":23,"kev_count":11,"has_kev":17},{"version":32,"cve_count":33,"kev_count":11,"has_kev":17},{"version":35,"cve_count":23,"kev_count":11,"has_kev":17},{"version":37,"cve_count":38,"kev_count":11,"has_kev":17},{"version":40,"cve_count":38,"kev_count":11,"has_kev":17},{"version":42,"cve_count":9,"kev_count":11,"has_kev":17},{"version":44,"cve_count":23,"kev_count":11,"has_kev":17},{"version":46,"cve_count":47,"kev_count":11,"has_kev":17},{"version":49,"cve_count":50,"kev_count":11,"has_kev":17},{"version":52,"cve_count":53,"kev_count":11,"has_kev":17},{"version":55,"cve_count":38,"kev_count":11,"has_kev":17},[75,83,90,95,102,108,113,118,123,128],{"cveId":76,"description":77,"publishedDate":78,"cvssScore":79,"cvssVersion":80,"severity":81,"isKev":17,"epssScore":82},"CVE-2021-44832","Apache Log4j2 versions 2.0-beta7 through 2.17.0 (excluding security fix releases 2.3.2 and 2.12.4) are vulnerable to a remote code execution (RCE) attack when a configuration uses a JDBC Appender with a JNDI LDAP data source URI when an attacker has control of the target LDAP server. This issue is fixed by limiting JNDI data source names to the java protocol in Log4j2 versions 2.17.1, 2.12.4, and 2.3.2.","2021-12-28",6.6,"v3.1","Medium",0.97906,{"cveId":84,"description":85,"publishedDate":86,"cvssScore":87,"cvssVersion":80,"severity":88,"isKev":17,"epssScore":89},"CVE-2019-0227","A Server Side Request Forgery (SSRF) vulnerability affected the Apache Axis 1.4 distribution that was last released in 2006. Security and bug commits commits continue in the projects Axis 1.x Subversion repository, legacy users are encouraged to build from source. The successor to Axis 1.x is Axis2, the latest version is 1.7.9 and is not vulnerable to this issue.","2019-05-01",7.5,"High",0.9194,{"cveId":91,"description":92,"publishedDate":93,"cvssScore":87,"cvssVersion":80,"severity":88,"isKev":17,"epssScore":94},"CVE-2020-5398","In Spring Framework, versions 5.2.x prior to 5.2.3, versions 5.1.x prior to 5.1.13, and versions 5.0.x prior to 5.0.16, an application is vulnerable to a reflected file download (RFD) attack when it sets a \"Content-Disposition\" header in the response where the filename attribute is derived from user supplied input.","2020-01-17",0.88768,{"cveId":96,"description":97,"publishedDate":98,"cvssScore":99,"cvssVersion":80,"severity":100,"isKev":17,"epssScore":101},"CVE-2020-11998","A regression has been introduced in the commit preventing JMX re-bind. By passing an empty environment map to RMIConnectorServer, instead of the map that contains the authentication credentials, it leaves ActiveMQ open to the following attack: https:\u002F\u002Fdocs.oracle.com\u002Fjavase\u002F8\u002Fdocs\u002Ftechnotes\u002Fguides\u002Fmanagement\u002Fagent.html \"A remote client could create a javax.management.loading.MLet MBean and use it to create new MBeans from arbitrary URLs, at least if there is no security manager. In other words, a rogue remote client could make your Java application execute arbitrary code.\" Mitigation: Upgrade to Apache ActiveMQ 5.15.13","2020-09-10",9.8,"Critical",0.48885,{"cveId":103,"description":104,"publishedDate":105,"cvssScore":106,"cvssVersion":80,"severity":88,"isKev":17,"epssScore":107},"CVE-2019-10086","In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all Java objects. We, however were not using this by default characteristic of the PropertyUtilsBean.","2019-08-20",7.3,0.28384,{"cveId":109,"description":110,"publishedDate":111,"cvssScore":99,"cvssVersion":80,"severity":100,"isKev":17,"epssScore":112},"CVE-2019-13990","initDocumentParser in xml\u002FXMLSchedulingDataProcessor.java in Terracotta Quartz Scheduler through 2.3.0 allows XXE attacks via a job description.","2019-07-26",0.16628,{"cveId":114,"description":115,"publishedDate":116,"cvssScore":87,"cvssVersion":80,"severity":88,"isKev":17,"epssScore":117},"CVE-2019-12402","The file name encoding algorithm used internally in Apache Commons Compress 1.15 to 1.18 can get into an infinite loop when faced with specially crafted inputs. This can lead to a denial of service attack if an attacker can choose the file names inside of an archive created by Compress.","2019-08-30",0.16157,{"cveId":119,"description":120,"publishedDate":121,"cvssScore":99,"cvssVersion":80,"severity":100,"isKev":17,"epssScore":122},"CVE-2019-2904","Vulnerability in the Oracle JDeveloper and ADF product of Oracle Fusion Middleware (component: ADF Faces). Supported versions that are affected are 11.1.1.9.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle JDeveloper and ADF. Successful attacks of this vulnerability can result in takeover of Oracle JDeveloper and ADF. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H).","2019-10-16",0.14264,{"cveId":124,"description":125,"publishedDate":126,"cvssScore":87,"cvssVersion":80,"severity":88,"isKev":17,"epssScore":127},"CVE-2020-11971","Apache Camel's JMX is vulnerable to Rebind Flaw. Apache Camel 2.22.x, 2.23.x, 2.24.x, 2.25.x, 3.0.0 up to 3.1.0 is affected. Users should upgrade to 3.2.0.","2020-05-14",0.13959,{"cveId":129,"description":130,"publishedDate":131,"cvssScore":99,"cvssVersion":80,"severity":100,"isKev":17,"epssScore":132},"CVE-2019-12419","Apache CXF before 3.3.4 and 3.2.11 provides all of the components that are required to build a fully fledged OpenId Connect service. There is a vulnerability in the access token services, where it does not validate that the authenticated principal is equal to that of the supplied clientId parameter in the request. If a malicious client was able to somehow steal an authorization code issued to another client, then they could exploit this vulnerability to obtain an access token for the other client.","2019-11-06",0.13836,[],{"title":135,"metaDescription":136,"keywords":137,"structuredData":138},"Flexcube Private Banking by Oracle - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Flexcube Private Banking by Oracle covering 16 versions with 75 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Flexcube Private Banking vulnerabilities, Flexcube Private Banking security, Flexcube Private Banking CVE, Oracle Flexcube Private Banking, Flexcube Private Banking threat intelligence, Oracle security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":139,"@type":140,"name":141,"description":136,"url":142,"manufacturer":143,"applicationCategory":147,"softwareVersion":148,"mainEntity":149},"https:\u002F\u002Fschema.org","SoftwareApplication","Flexcube Private Banking","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Foracle\u002Fflexcube_private_banking",{"@type":144,"name":145,"url":146},"Organization","Oracle","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Foracle","Security Software","16 versions tracked",{"@type":150,"name":151,"description":152,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Flexcube Private Banking Security Vulnerabilities","Security vulnerabilities affecting Flexcube Private Banking by Oracle",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":154,"apiVersion":55},"2026-10-17T12:56:23.674Z",{"rows":156,"total":11,"capped":17,"failed":11},[],[]]