oracle banking trade finance process management

Name: oracle banking trade finance process management
Brand: oracle

productUS

cpe:2.3:a:oracle:banking_trade_finance_process_management:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

2critical5high9medium0low

updated 2026-10-28

vulnerabilities (17)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2022-22963US	critical9.8OT critical	99.9% (100th)	KEV	no fix	2022-04-01	= 14.5
CVE-2020-26217US	high8.8	82.7% (100th)	Exploit	no fix	2020-11-16	3 versions
CVE-2021-29505US	high8.8	77.2% (100th)	Exploit	no fix	2021-05-28	= 14.5.0
CVE-2021-23337US	high7.2	21.3% (98th)	Exploit	no fix	2021-02-15	3 versions
CVE-2020-8203US	high7.4	5.21% (92nd)	Exploit	no fix	2020-07-15	3 versions
CVE-2022-31160US	medium6.1	2.69% (86th)	Exploit	no fix	2022-07-20	—
CVE-2019-0228US	critical9.8	9.45% (95th)	—	no fix	2019-04-17	3 versions
CVE-2020-28500US	medium5.3	7.34% (94th)	—	no fix	2021-02-15	3 versions
CVE-2021-21409US	medium5.9	4.93% (92nd)	—	no fix	2021-03-30	3 versions
CVE-2021-41973US	medium6.5	4.63% (92nd)	—	no fix	2021-11-01	= 14.5
CVE-2019-12399US	high7.5OT elevated	3.91% (90th)	—	no fix	2020-01-14	3 versions
CVE-2021-27906US	medium5.5	3.34% (89th)	—	no fix	2021-03-19	3 versions
CVE-2021-27807US	medium5.5	2.99% (87th)	—	no fix	2021-03-19	3 versions
CVE-2021-21290US	medium5.5	1.78% (78th)	—	no fix	2021-02-08	3 versions
CVE-2023-34055US	medium6.5	1.22% (68th)	—	no fix	2023-11-28	—
CVE-2022-21474US	medium4.6	0.63% (50th)	—	no fix	2022-04-19	= 14.5
CVE-2026-61097US	—	0.19% (8th)	—	no fix	2026-07-21	14.6.0 → 14.8.0

The flaw types (CWEs) most of these CVEs share.

CWE-94Improper Control of Generation of Code ('Code Injection')3 CVEs
CWE-400Uncontrolled Resource Consumption2 CVEs
CWE-74Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')2 CVEs
CWE-770Allocation of Resources Without Limits or Throttling2 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')2 CVEs
CWE-1321Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')1 CVEs
CWE-1333Inefficient Regular Expression Complexity1 CVEs
CWE-17CWE-171 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.