Oracle Flexcube Direct Banking vulnerabilities

17 CVEs affecting Oracle Flexcube Direct Banking, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-2141, published 2021-04-22.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2016-0699, published 2016-04-21. Critical severity, CVSS 9.1. EPSS: 2.8% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 12.0.2 and 12.0.3 allows remote attackers to affect confidentiality and integrity via…
CVE-2020-14897, published 2020-10-21. Medium severity, CVSS 6.5. EPSS: 2% chance of exploitation in the next 30 days. Vulnerability in the Oracle FLEXCUBE Direct Banking product of Oracle Financial Services Applications (component: Pre Login). Supported versions that are affected are 12.0.1, 12.0.2 and 12.0.3.…
CVE-2020-14890, published 2020-10-21. Medium severity, CVSS 6.5. EPSS: 1.9% chance of exploitation in the next 30 days. Vulnerability in the Oracle FLEXCUBE Direct Banking product of Oracle Financial Services Applications (component: Pre Login). Supported versions that are affected are 12.0.1, 12.0.2 and 12.0.3.…
CVE-2019-2980, published 2019-10-16. Medium severity, CVSS 6.5. EPSS: 1.7% chance of exploitation in the next 30 days. Vulnerability in the Oracle FLEXCUBE Direct Banking product of Oracle Financial Services Applications (component: eMail). Supported versions that are affected are 12.0.2 and 12.0.3. Easily…
CVE-2016-3589, published 2016-07-21. Medium severity, CVSS 6.1. EPSS: 1.7% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Applications 12.0.1, 12.0.2, and 12.0.3 allows remote attackers to affect confidentiality and…
CVE-2017-3495, published 2017-04-24. Medium severity, CVSS 4.7. EPSS: 1.6% chance of exploitation in the next 30 days. Vulnerability in the Oracle FLEXCUBE Direct Banking component of Oracle Financial Services Applications (subcomponent: Pre-Login). Supported versions that are affected are 12.0.2 and 12.0.3. Easily…
CVE-2017-3245, published 2017-01-27. Medium severity, CVSS 4.7. EPSS: 1.6% chance of exploitation in the next 30 days. Vulnerability in the Oracle FLEXCUBE Direct Banking component of Oracle Financial Services Applications (subcomponent: Pre-Login). Supported versions that are affected are 12.0.2 and 12.0.3. Easily…
CVE-2016-3464, published 2016-04-21. Medium severity, CVSS 5.7. EPSS: 1.4% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 12.0.3 allows remote authenticated users to affect confidentiality via vectors related…
CVE-2017-3297, published 2017-01-27. Medium severity, CVSS 5.3. EPSS: 1.2% chance of exploitation in the next 30 days. Vulnerability in the Oracle FLEXCUBE Direct Banking component of Oracle Financial Services Applications (subcomponent: Framework). Supported versions that are affected are 12.0.2 and 12.0.3.…
CVE-2016-3463, published 2016-04-21. Medium severity, CVSS 6.1. EPSS: 1.2% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 12.0.3 allows remote attackers to affect confidentiality and integrity via vectors…

Latest

CVE-2021-2141, published 2021-04-22. Low severity, CVSS 2.0. EPSS: 0.6% chance of exploitation in the next 30 days. Vulnerability in the Oracle FLEXCUBE Direct Banking product of Oracle Financial Services Applications (component: Pre Login). Supported versions that are affected are 12.0.2 and 12.0.3. Difficult to…
CVE-2019-2979, published 2019-10-16. Medium severity, CVSS 5.7. EPSS: 1.1% chance of exploitation in the next 30 days. Vulnerability in the Oracle FLEXCUBE Direct Banking product of Oracle Financial Services Applications (component: Payments). Supported versions that are affected are 12.0.2 and 12.0.3. Easily…
CVE-2019-2550, published 2019-01-16. Medium severity, CVSS 4.3. EPSS: 1.2% chance of exploitation in the next 30 days. Vulnerability in the Oracle FLEXCUBE Direct Banking component of Oracle Financial Services Applications (subcomponent: Logoff Page). The supported version that is affected is 12.0.2. Easily…
CVE-2019-2549, published 2019-01-16. Medium severity, CVSS 6.1. EPSS: 1.1% chance of exploitation in the next 30 days. Vulnerability in the Oracle FLEXCUBE Direct Banking component of Oracle Financial Services Applications (subcomponent: Logoff Page). The supported version that is affected is 12.0.2. Easily…
CVE-2018-2674, published 2018-01-18. Medium severity, CVSS 6.1. EPSS: 1.1% chance of exploitation in the next 30 days. Vulnerability in the Oracle FLEXCUBE Direct Banking component of Oracle Financial Services Applications (subcomponent: Logoff). Supported versions that are affected are 12.0.2 and 12.0.3. Easily…
CVE-2017-10181, published 2017-08-08. Medium severity, CVSS 6.8. EPSS: 1.1% chance of exploitation in the next 30 days. Vulnerability in the Oracle FLEXCUBE Direct Banking component of Oracle Financial Services Applications (subcomponent: Forgot Password). Supported versions that are affected are 12.0.2 and 12.0.3.…