oracle banking supply chain finance

Name: oracle banking supply chain finance
Brand: oracle

productUS

cpe:2.3:a:oracle:banking_supply_chain_finance:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

3critical19high6medium0low

updated 2026-10-27

vulnerabilities (28)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2022-22963US	critical9.8OT critical	99.9% (100th)	KEV	no fix	2022-04-01	= 14.5
CVE-2020-26217US	high8.8	82.7% (100th)	Exploit	no fix	2020-11-16	3 versions
CVE-2021-29505US	high8.8	77.2% (100th)	Exploit	no fix	2021-05-28	= 14.2.0
CVE-2021-23337US	high7.2	21.3% (98th)	Exploit	no fix	2021-02-15	3 versions
CVE-2020-36179US	high8.1	17.1% (97th)	Exploit	no fix	2021-01-07	3 versions
CVE-2020-35728US	high8.1	12.5% (96th)	Exploit	no fix	2020-12-27	3 versions
CVE-2020-36188US	high8.1	8.79% (95th)	Exploit	no fix	2021-01-06	3 versions
CVE-2020-36184US	high8.1	8.36% (95th)	Exploit	no fix	2021-01-06	3 versions
CVE-2020-24616US	high8.1	7.61% (95th)	Exploit	no fix	2020-08-25	3 versions
CVE-2020-24750US	high8.1	7.33% (94th)	Exploit	no fix	2020-09-17	3 versions
CVE-2020-28052US	high8.1	7.22% (94th)	Exploit	no fix	2020-12-18	3 versions
CVE-2020-8203US	high7.4	5.21% (92nd)	Exploit	no fix	2020-07-15	3 versions
CVE-2020-36180US	high8.1	4.09% (91st)	Exploit	no fix	2021-01-07	3 versions
CVE-2022-31160US	medium6.1	2.69% (86th)	Exploit	no fix	2022-07-20	—
CVE-2019-0228US	critical9.8	9.45% (95th)	—	no fix	2019-04-17	3 versions
CVE-2020-28500US	medium5.3	7.34% (94th)	—	no fix	2021-02-15	3 versions
CVE-2020-36183US	high8.1	4.97% (92nd)	—	no fix	2021-01-07	3 versions
CVE-2020-5413US	critical9.8	4.41% (91st)	—	no fix	2020-07-31	3 versions
CVE-2020-36187US	high8.1	4.24% (91st)	—	no fix	2021-01-06	3 versions
CVE-2020-36186US	high8.1	4.24% (91st)	—	no fix	2021-01-06	3 versions
CVE-2020-36185US	high8.1	4.24% (91st)	—	no fix	2021-01-06	3 versions
CVE-2020-36182US	high8.1	4.09% (91st)	—	no fix	2021-01-07	3 versions
CVE-2020-36181US	high8.1	4.09% (91st)	—	no fix	2021-01-06	3 versions
CVE-2019-12399US	high7.5OT elevated	3.91% (90th)	—	no fix	2020-01-14	14.2.0 → 14.4.0
CVE-2021-31811US	medium5.5	3.57% (89th)	—	no fix	2021-06-12	3 versions
CVE-2021-27906US	medium5.5	3.34% (89th)	—	no fix	2021-03-19	3 versions
CVE-2021-31812US	medium5.5	3.05% (88th)	—	no fix	2021-06-12	3 versions
CVE-2023-34055US	medium6.5	1.22% (68th)	—	no fix	2023-11-28	—

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-502Deserialization of Untrusted Data15 CVEs
CWE-94Improper Control of Generation of Code ('Code Injection')4 CVEs
CWE-770Allocation of Resources Without Limits or Throttling3 CVEs
CWE-400Uncontrolled Resource Consumption2 CVEs
CWE-74Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')2 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')2 CVEs
CWE-789Memory Allocation with Excessive Size Value2 CVEs
CWE-1321Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')1 CVEs

sources (2)

Which sources assert this record, and when.

USNVD / CVE26 CVEs
NLNCSC-NL (CSAF)2 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan