Oracle Banking Corporate Lending vulnerabilities

24 CVEs affecting Oracle Banking Corporate Lending, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-14894, published 2020-10-21.

More from Oracle.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2019-3778, published 2019-03-07. Medium severity, CVSS 6.5. EPSS: 16.6% chance of exploitation in the next 30 days. Spring Security OAuth, versions 2.3 prior to 2.3.5, and 2.2 prior to 2.2.4, and 2.1 prior to 2.1.4, and 2.0 prior to 2.0.17, and older unsupported versions could be susceptible to an open redirector…
• CVE-2019-11269, published 2019-06-12. Medium severity, CVSS 5.4. EPSS: 8.9% chance of exploitation in the next 30 days. Spring Security OAuth versions 2.3 prior to 2.3.6, 2.2 prior to 2.2.5, 2.1 prior to 2.1.5, and 2.0 prior to 2.0.18, as well as older unsupported versions could be susceptible to an open redirector…
• CVE-2018-3040, published 2018-07-18. Medium severity, CVSS 6.5. EPSS: 2.2% chance of exploitation in the next 30 days. Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core module). Supported versions that are affected are 12.3.0, 12.4.0, 12.5.0,…
• CVE-2018-3038, published 2018-07-18. Medium severity, CVSS 5.3. EPSS: 2% chance of exploitation in the next 30 days. Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core module). Supported versions that are affected are 12.3.0, 12.4.0, 12.5.0,…
• CVE-2018-3050, published 2018-07-18. High severity, CVSS 8.1. EPSS: 2% chance of exploitation in the next 30 days. Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core module). Supported versions that are affected are 12.3.0, 12.4.0, 12.5.0,…
• CVE-2018-2747, published 2018-04-19. Medium severity, CVSS 6.5. EPSS: 1.9% chance of exploitation in the next 30 days. Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core module). Supported versions that are affected are 12.3.0, 12.4.0, 12.5.0…
• CVE-2018-2706, published 2018-01-18. High severity, CVSS 8.8. EPSS: 1.7% chance of exploitation in the next 30 days. Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core module). Supported versions that are affected are 12.3.0 and 12.4.0.…
• CVE-2018-2707, published 2018-01-18. High severity, CVSS 8.1. EPSS: 1.6% chance of exploitation in the next 30 days. Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core module). Supported versions that are affected are 12.3.0 and 12.4.0.…
• CVE-2018-3042, published 2018-07-18. Medium severity, CVSS 5.4. EPSS: 1.6% chance of exploitation in the next 30 days. Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core module). Supported versions that are affected are 12.3.0, 12.4.0, 12.5.0,…
• CVE-2018-3046, published 2018-07-18. Medium severity, CVSS 5.3. EPSS: 1.6% chance of exploitation in the next 30 days. Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core module). Supported versions that are affected are 12.3.0, 12.4.0, 12.5.0,…

Latest

• CVE-2020-14894, published 2020-10-21. Medium severity, CVSS 6.5. EPSS: 1.5% chance of exploitation in the next 30 days. Vulnerability in the Oracle Banking Corporate Lending product of Oracle Financial Services Applications (component: Core). Supported versions that are affected are 12.3.0 and 14.0.0-14.4.0. Easily…
• CVE-2020-2719, published 2020-01-15. Medium severity, CVSS 4.3. EPSS: 0.9% chance of exploitation in the next 30 days. Vulnerability in the Oracle Banking Corporate Lending product of Oracle Financial Services Applications (component: Core). Supported versions that are affected are 12.3.0-12.4.0 and 14.0.0-14.3.0.…
• CVE-2020-2718, published 2020-01-15. High severity, CVSS 7.1. EPSS: 1.1% chance of exploitation in the next 30 days. Vulnerability in the Oracle Banking Corporate Lending product of Oracle Financial Services Applications (component: Core). Supported versions that are affected are 12.3.0-12.4.0 and 14.0.0-14.3.0.…
• CVE-2020-2717, published 2020-01-15. Medium severity, CVSS 5.4. EPSS: 1.1% chance of exploitation in the next 30 days. Vulnerability in the Oracle Banking Corporate Lending product of Oracle Financial Services Applications (component: Core). Supported versions that are affected are 12.3.0-12.4.0 and 14.0.0-14.3.0.…
• CVE-2020-2716, published 2020-01-15. Medium severity, CVSS 6.5. EPSS: 1.3% chance of exploitation in the next 30 days. Vulnerability in the Oracle Banking Corporate Lending product of Oracle Financial Services Applications (component: Core). Supported versions that are affected are 12.3.0-12.4.0 and 14.0.0-14.3.0.…
• CVE-2020-2715, published 2020-01-15. Medium severity, CVSS 5.4. EPSS: 0.8% chance of exploitation in the next 30 days. Vulnerability in the Oracle Banking Corporate Lending product of Oracle Financial Services Applications (component: Core). Supported versions that are affected are 12.3.0-12.4.0 and 14.0.0-14.3.0.…
• CVE-2018-3048, published 2018-07-18. Medium severity, CVSS 5.4. EPSS: 1.2% chance of exploitation in the next 30 days. Vulnerability in the Oracle Banking Corporate Lending component of Oracle Financial Services Applications (subcomponent: Core module). Supported versions that are affected are 12.3.0, 12.4.0, 12.5.0,…