VendorsOraclebanking_payments14.5
Vulnerabilities

Oracle Banking Payments 14.5

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

8CVEs
CVE-2021-36090
Apache Commons Compress 1.0 to 1.20 denial of service vulnerability
Published 2021-07-13 · Modified
7.5EPSS 0.129
CVE-2021-35515
Apache Commons Compress 1.6 to 1.20 denial of service vulnerability
Published 2021-07-13 · Modified
7.5EPSS 0.116
CVE-2021-35517
Apache Commons Compress 1.1 to 1.20 denial of service vulnerability
Published 2021-07-13 · Modified
7.5EPSS 0.106
CVE-2021-41973
Apache MINA HTTP listener DOS
Published 2021-11-01 · Modified
6.5EPSS 0.046
CVE-2021-30129
DoS/OOM leak vulnerability in Apache Mina SSHD Server
Published 2021-07-12 · Modified
6.5EPSS 0.030
CVE-2021-45105
Apache Log4j2 does not always protect from infinite recursion in lookup evaluation
Published 2021-12-18 · Modified
5.9EPSS 1.000
CVE-2022-21475
Vulnerability in the Oracle Banking Payments product of Oracle Financial Services Applications (component: Infrastructure). The supported version that is affected is 14.5. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Banking Payments. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Banking Payments accessible data as well as unauthorized read access to a subset of Oracle Banking Payments accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Banking Payments. CVSS 3.1 Base Score 5.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:H/A:L).
Published 2022-04-19 · Modified
5.9EPSS 0.006
CVE-2023-21915
Vulnerability in the Oracle Banking Payments product of Oracle Financial Services Applications (component: Book/Internal Transfer). Supported versions that are affected are 14.5, 14.6 and 14.7. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Banking Payments. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Banking Payments accessible data as well as unauthorized read access to a subset of Oracle Banking Payments accessible data. CVSS 3.1 Base Score 4.6 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N).
Published 2023-04-18 · Modified
4.6EPSS 0.004