oracle financial services revenue management and billing

Name: oracle financial services revenue management and billing
Brand: oracle

productUS

cpe:2.3:a:oracle:financial_services_revenue_management_and_billing:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

2critical2high8medium0low

updated 2026-10-28

vulnerabilities (16)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-48795US	medium5.9OT high	93.5% (100th)	Exploit	no fix	2023-12-18	—
CVE-2019-11358US	medium6.1	86.8% (100th)	Exploit	no fix	2019-04-20	2 versions
CVE-2022-34169US	high7.5	81.8% (100th)	Exploit	no fix	2022-07-19	—
CVE-2023-47248US	critical9.8	14.5% (97th)	Exploit	no fix	2023-11-09	—
CVE-2022-36944US	critical9.8	11.0% (96th)	Exploit	no fix	2022-09-23	—
CVE-2022-31160US	medium6.1	2.69% (86th)	Exploit	no fix	2022-07-20	—
CVE-2023-39410US	high7.5	2.22% (83rd)	—	no fix	2023-09-29	—
CVE-2023-44483US	medium6.5	1.55% (75th)	—	no fix	2023-10-20	—
CVE-2023-34055US	medium6.5	1.22% (69th)	—	no fix	2023-11-28	—
CVE-2021-2113US	medium4.0	0.81% (57th)	—	no fix	2021-01-20	2 versions
CVE-2023-33201US	medium5.3	0.77% (56th)	—	no fix	2023-07-05	—
CVE-2022-21580US	—	0.52% (44th)	—	no fix	2022-07-19	4 versions
CVE-2025-21573US	—	0.43% (37th)	—	no fix	2025-04-15	3 versions
CVE-2025-50074US	—	0.40% (34th)	—	no fix	2025-10-21	2.9.0.0.0 → 7.2.0.0.0
CVE-2025-50075US	—	0.33% (26th)	—	no fix	2025-10-21	2.9.0.0.0 → 7.2.0.0.0
CVE-2024-21188US	medium6.1	0.26% (18th)	—	no fix	2024-07-16	2 versions

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation4 CVEs
CWE-502Deserialization of Untrusted Data3 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs
CWE-284Improper Access Control2 CVEs
CWE-1321Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')1 CVEs
CWE-192Integer Coercion Error1 CVEs
CWE-222Truncation of Security-relevant Information1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.