Oracle Flexcube Investor Servicing vulnerabilities

45 CVEs affecting Oracle Flexcube Investor Servicing, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-21973, published 2026-01-20.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2017-5645, published 2017-04-17. Critical severity, CVSS 9.8. EPSS: 89.8% chance of exploitation in the next 30 days. In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that,…
CVE-2019-13990, published 2019-07-26. Critical severity, CVSS 9.8. EPSS: 16.6% chance of exploitation in the next 30 days. initDocumentParser in xml/XMLSchedulingDataProcessor.java in Terracotta Quartz Scheduler through 2.3.0 allows XXE attacks via a job description.
CVE-2019-12402, published 2019-08-30. High severity, CVSS 7.5. EPSS: 16.2% chance of exploitation in the next 30 days. The file name encoding algorithm used internally in Apache Commons Compress 1.15 to 1.18 can get into an infinite loop when faced with specially crafted inputs. This can lead to a denial of service…
CVE-2018-1000632, published 2018-08-20. High severity, CVSS 7.5. EPSS: 6.6% chance of exploitation in the next 30 days. dom4j version prior to version 2.1.1 contains a CWE-91: XML Injection vulnerability in Class: Element. Methods: addElement, addAttribute that can result in an attacker tampering with XML documents…
CVE-2018-10237, published 2018-04-26. Medium severity, CVSS 5.9. EPSS: 5.1% chance of exploitation in the next 30 days. Unbounded memory allocation in Google Guava 11.0 through 24.x before 24.1.1 allows remote attackers to conduct denial of service attacks against servers that depend on this library and deserialize…
CVE-2021-2351, published 2021-07-21. High severity, CVSS 8.3. EPSS: 2.4% chance of exploitation in the next 30 days. Vulnerability in the Advanced Networking Option component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c. Difficult to exploit vulnerability allows…
CVE-2018-3030, published 2018-07-18. Medium severity, CVSS 6.5. EPSS: 2.2% chance of exploitation in the next 30 days. Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.4, 12.1.0,…
CVE-2019-10219, published 2019-11-08. Medium severity, CVSS 6.1. EPSS: 2.2% chance of exploitation in the next 30 days. A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions.…
CVE-2018-3029, published 2018-07-18. Medium severity, CVSS 5.3. EPSS: 2.1% chance of exploitation in the next 30 days. Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.4, 12.1.0,…
CVE-2018-3035, published 2018-07-18. High severity, CVSS 8.1. EPSS: 2% chance of exploitation in the next 30 days. Vulnerability in the Oracle FLEXCUBE Investor Servicing component of Oracle Financial Services Applications (subcomponent: Infrastructure). Supported versions that are affected are 12.0.4, 12.1.0,…

Latest

CVE-2026-21973, published 2026-01-20. High severity, CVSS 8.1. EPSS: 0.3% chance of exploitation in the next 30 days. Vulnerability in the Oracle FLEXCUBE Investor Servicing product of Oracle Financial Services Applications (component: Security Management System). Supported versions that are affected are…
CVE-2020-14569, published 2020-07-15. High severity, CVSS 8.1. EPSS: 1.4% chance of exploitation in the next 30 days. Vulnerability in the Oracle FLEXCUBE Investor Servicing product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are affected are 12.1.0, 12.3.0, 12.4.0,…
CVE-2020-1945, published 2020-05-14. Medium severity, CVSS 6.3. EPSS: 1.8% chance of exploitation in the next 30 days. Apache Ant 1.1 to 1.9.14 and 1.10.0 to 1.10.7 uses the default temporary directory identified by the Java system property java.io.tmpdir for several tasks and may thus leak sensitive information. The…
CVE-2020-2724, published 2020-01-15. Medium severity, CVSS 4.3. EPSS: 1% chance of exploitation in the next 30 days. Vulnerability in the Oracle FLEXCUBE Investor Servicing product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are affected are 12.1.0-12.4.0 and…
CVE-2020-2723, published 2020-01-15. High severity, CVSS 7.1. EPSS: 1.1% chance of exploitation in the next 30 days. Vulnerability in the Oracle FLEXCUBE Investor Servicing product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are affected are 12.1.0-12.4.0 and…
CVE-2020-2722, published 2020-01-15. Medium severity, CVSS 5.4. EPSS: 1% chance of exploitation in the next 30 days. Vulnerability in the Oracle FLEXCUBE Investor Servicing product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are affected are 12.1.0-12.4.0 and…
CVE-2020-2721, published 2020-01-15. Medium severity, CVSS 6.5. EPSS: 1.3% chance of exploitation in the next 30 days. Vulnerability in the Oracle FLEXCUBE Investor Servicing product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are affected are 12.1.0-12.4.0 and…
CVE-2020-2720, published 2020-01-15. Medium severity, CVSS 5.4. EPSS: 0.8% chance of exploitation in the next 30 days. Vulnerability in the Oracle FLEXCUBE Investor Servicing product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are affected are 12.1.0-12.4.0 and…