Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

Vulnerabilities fixed in Oracle Financial Services

🗓️ 16 Apr 2025 15:00:12Reported by NCSCType 
ncsc
 ncsc🔗 advisories.ncsc.nl👁 9 Views

Oracle Financial Services fixes unauthenticated web access flaws enabling data access, escalation, DoS and remote code execution.

Related
Refs
ReporterTitlePublishedViews
Family
IBM Security Bulletins		Security Bulletin: Multiple Vulnerabilities have been identified in IBM Db2 shipped with IBM WebSphere Remote Server
7 Aug 202515:41
–ibm
IBM Security Bulletins		Security Bulletin: A security issue was found in Netplex Json-smart 2.5.0 through 2.5.1, affects watsonx.data
12 Jun 202510:50
–ibm
IBM Security Bulletins		Security Bulletin: Vulnerability in Apache Commons IO affects IBM watsonx Assistant for IBM Cloud Pak for Data
5 Feb 202520:46
–ibm
IBM Security Bulletins		Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a security restrictions bypass in Psf Requests [CVE-2024-35195]
27 Feb 202515:00
–ibm
IBM Security Bulletins		Security Bulletin: Multiple vulnerabilities in Spring may affect IBM Business Automation Workflow - CVE-2024-38820, CVE-2025-22233
8 Oct 202515:13
–ibm
IBM Security Bulletins		Security Bulletin: Denial of Service vulnerability in Apache Commons IO affects IBM Business Automation Workflow - CVE-2024-47554
7 Feb 202516:25
–ibm
IBM Security Bulletins		Security Bulletin: IBM Security QRadar EDR Software contains multiple vulnerabilities
8 Jul 202409:49
–ibm
IBM Security Bulletins		Security Bulletin: IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) is susceptible to Denial of Service vulnerability in Json-smart (CVE-2024-57699)
27 Mar 202500:18
–ibm
IBM Security Bulletins		Security Bulletin: IBM Maximo Application Suite - IoT uses multiple third party dependencies which is vulnerable to CVEs.
7 Apr 202519:17
–ibm
IBM Security Bulletins		Security Bulletin: IBM Engineering Lifecycle Optimization - Engineering Publishing Apache Commons IO is vulnerable to a denial of service, caused by an uncontrolled resource consumption flaw in the org.apache.commons.io.input.XmlStreamReader class.
3 Jan 202511:04
–ibm
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
16 Apr 2025 15:00Current
7.8High risk
Vulners AI Score7.8
CVSS 49.2
CVSS 25
CVSS 3.17.5 - 9.8
CVSS 34.7
EPSS0.54862
SSVC
oracle financial servicesunauthenticated accessweb accessdata access riskprivilege escalationdenial of serviceremote code execution
9