CVE-2026-70689

Vulnerability in Oracle Essbase component: Infrastructure. The supported version that is affected is 21.8.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Essbase. Successful attacks of this vulnerability can result in...

EUVD-2026-61644

Vulnerability in Oracle Essbase component: Infrastructure. The supported version that is affected is 21.8.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Essbase. Successful attacks of this vulnerability can result in...

PT-2026-77688

Name of the Vulnerable Software and Affected Versions Oracle Essbase version 21.8.1.0.0 Description An issue in the Infrastructure component allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation can lead to a complete takeover of the...

CVE-2025-61756

Vulnerability in the Oracle Financial Services Analytical Applications Infrastructure product of Oracle Financial Services Applications component: System Configuration. Supported versions that are affected are 8.0.7.9, 8.0.8.7 and 8.1.2.5. Easily exploitable vulnerability allows unauthenticated...

CVE-2022-21583

Vulnerability in the Oracle Banking Trade Finance product of Oracle Financial Services Applications component: Infrastructure. The supported version that is affected is 14.5. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Bankin...

OFSAAI Component Data Access

The vulnerability of the Infrastructure component of the Oracle Financial Services Analytical Applications Infrastructure OFSAAI business analytics platform is related to insufficient validation of input data. Exploitation of this vulnerability could allow a malicious actor to gain read, modify, ...

Infrastructure Component Data Compromise

The vulnerability of the Infrastructure component of the Oracle Banking Trade Finance software exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality and integrity of the protected information...

Infrastructure Component Data Compromise

The vulnerability of the Infrastructure component of the Oracle Banking Trade Finance software exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality and integrity of the protected information...

Infrastructure Component Data Compromise

The vulnerability of the Infrastructure component of the Oracle Banking Trade Finance software exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality and integrity of the protected information...

CVE-2023-22121

Vulnerability in the Oracle Banking Trade Finance product of Oracle Financial Services Applications component: Infrastructure. Supported versions that are affected are 14.5-14.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2023-22122

Vulnerability in the Oracle Banking Trade Finance product of Oracle Financial Services Applications component: Infrastructure. Supported versions that are affected are 14.5-14.7. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

Buffer overflow

Vulnerability in the Oracle Banking Trade Finance product of Oracle Financial Services Applications component: Infrastructure. Supported versions that are affected are 14.5-14.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

PT-2023-6342 · Oracle · Oracle Banking Trade Finance

Name of the Vulnerable Software and Affected Versions: Oracle Banking Trade Finance versions 14.5 through 14.7 Description: The issue is related to insufficient input validation in the Infrastructure component of Oracle Banking Trade Finance, allowing a low-privileged attacker with network access...

PT-2023-6638 · Oracle · Oracle Flexcube Universal Banking

Name of the Vulnerable Software and Affected Versions: Oracle FLEXCUBE Universal Banking versions 12.3, 12.3 through 12.4, 14.0 through 14.3, 14.5 through 14.7 Description: The issue is related to insufficient input validation in the Infrastructure component of Oracle FLEXCUBE Universal Banking,...

Infrastructure Component DoS

The vulnerability of Oracle Banking Trade Finance software’s Infrastructure component exists due to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

Infrastructure Component Data Read Modify

The vulnerability of the Infrastructure component of the Oracle Banking Trade Finance software exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to read, modify, add, or delete data using the HTTP protoco...

Oracle FLEXCUBE Universal Banking Simulation Model Data Read Modify

The vulnerability of the Infrastructure sub-component of the Oracle FLEXCUBE Universal Banking banking analytics system’s simulation model exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to read, modify...

Oracle FLEXCUBE Universal Banking Infrastructure Data Compromise

The vulnerability of the Infrastructure sub-component of the Oracle FLEXCUBE Universal Banking banking analytics system’s simulation model application relates to code errors. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of...

Oracle FLEXCUBE Universal Banking Simulation Model Data Read Modify

The vulnerability of the Infrastructure sub-component of the Oracle FLEXCUBE Universal Banking banking analytics system’s simulation model exists due to insufficient validation of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain access to read, modify...

CVE-2022-21583

Vulnerability in the Oracle Banking Trade Finance product of Oracle Financial Services Applications component: Infrastructure. The supported version that is affected is 14.5. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Bankin...