oracle banking digital experience

Name: oracle banking digital experience
Brand: oracle

productUS

cpe:2.3:a:oracle:banking_digital_experience:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

3critical18high9medium1low

updated 2026-10-23

vulnerabilities (31)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2020-11022US	medium6.1	99.2% (100th)	Exploit	no fix	2020-04-29	7 versions
CVE-2019-11358US	medium6.1	86.8% (100th)	Exploit	no fix	2019-04-20	6 versions
CVE-2021-28164US	medium5.3OT high	82.4% (100th)	Exploit	no fix	2021-04-01	2 versions
CVE-2020-9548US	critical9.8	18.9% (97th)	Exploit	no fix	2020-03-02	6 versions
CVE-2021-29425US	medium4.8	10.5% (96th)	Exploit	no fix	2021-04-13	7 versions
CVE-2020-10673US	high8.8	8.03% (95th)	Exploit	no fix	2020-03-18	6 versions
CVE-2020-11113US	high8.8	6.28% (94th)	Exploit	no fix	2020-03-31	6 versions
CVE-2019-17495US	critical9.8	5.73% (93rd)	Exploit	no fix	2019-10-10	5 versions
CVE-2020-14195US	high8.1	4.55% (92nd)	Exploit	no fix	2020-06-16	6 versions
CVE-2019-10219US	medium6.1	2.16% (82nd)	Exploit	no fix	2019-11-08	7 versions
CVE-2020-11987US	high8.2	13.3% (96th)	—	no fix	2021-02-24	5 versions
CVE-2021-36090US	high7.5	12.9% (96th)	—	no fix	2021-07-13	5 versions
CVE-2021-35516US	high7.5	12.4% (96th)	—	no fix	2021-07-13	5 versions
CVE-2021-35515US	high7.5	11.6% (96th)	—	no fix	2021-07-13	4 versions
CVE-2021-35517US	high7.5	10.6% (96th)	—	no fix	2021-07-13	5 versions
CVE-2020-14060US	high8.1	8.54% (95th)	—	no fix	2020-06-14	6 versions
CVE-2020-14062US	high8.1	8.11% (95th)	—	no fix	2020-06-14	6 versions
CVE-2021-37137US	high7.5	6.57% (94th)	—	no fix	2021-10-19	7 versions
CVE-2021-37136US	high7.5	5.91% (93rd)	—	no fix	2021-10-19	7 versions
CVE-2020-9546US	critical9.8	4.58% (92nd)	—	no fix	2020-03-02	6 versions
CVE-2020-14061US	high8.1	4.46% (91st)	—	no fix	2020-06-14	6 versions
CVE-2021-28163US	low2.7	4.18% (91st)	—	no fix	2021-04-01	2 versions
CVE-2020-10968US	high8.8	3.66% (90th)	—	no fix	2020-03-26	6 versions
CVE-2020-11112US	high8.8	3.64% (90th)	—	no fix	2020-03-31	6 versions
CVE-2020-11111US	high8.8	3.61% (89th)	—	no fix	2020-03-31	6 versions
CVE-2020-10969US	high8.8	3.56% (89th)	—	no fix	2020-03-26	6 versions
CVE-2020-10672US	high8.8	3.06% (88th)	—	no fix	2020-03-18	6 versions
CVE-2021-2351US	medium5.1OT elevated	2.43% (84th)	—	no fix	2021-07-21	6 versions
CVE-2021-41165US	medium5.4	1.57% (75th)	—	no fix	2021-11-17	5 versions
CVE-2021-41164US	medium5.4	1.35% (71st)	—	no fix	2021-11-17	5 versions
CVE-2019-3019US	medium5.4OT elevated	0.73% (54th)	—	no fix	2019-10-16	4 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-502Deserialization of Untrusted Data13 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')6 CVEs
CWE-96Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection')5 CVEs
CWE-130Improper Handling of Length Parameter Inconsistency3 CVEs
CWE-20Improper Input Validation3 CVEs
CWE-770Allocation of Resources Without Limits or Throttling3 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs
CWE-400Uncontrolled Resource Consumption2 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE31 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan