Oracle Financial Services Applications

Name: Oracle Financial Services Applications
Brand: Oracle

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

1critical2high1medium0low

updated 2026-10-27

vulnerabilities (31)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-27636US	—	97.1% (100th)	Exploit	no fix	2025-03-09	3 versions
CVE-2025-27817US	—	68.8% (99th)	Exploit	no fix	2025-06-10	3 versions
CVE-2026-22010US	—	0.31% (23rd)	Exploit	no fix	2026-04-21	3 versions
CVE-2026-21978US	—	0.29% (22nd)	Exploit	no fix	2026-01-20	2 versions
CVE-2020-11988US	high8.2	6.65% (94th)	—	no fix	2021-02-24	3 versions
CVE-2023-44981US	critical9.1	2.22% (83rd)	—	no fix	2023-10-11	3 versions
CVE-2025-27821US	—	0.91% (60th)	—	no fix	2026-01-26	3 versions
CVE-2026-33557US	—	0.90% (59th)	—	no fix	2026-04-20	≤ vers:unknown/*
CVE-2021-28168US	medium5.5	0.87% (59th)	—	no fix	2021-04-22	3 versions
CVE-2025-1948US	—	0.78% (56th)	—	no fix	2025-05-08	3 versions
CVE-2026-33929US	—	0.71% (53rd)	—	no fix	2026-04-14	≤ vers:unknown/*
CVE-2026-34481US	high7.5	0.69% (53rd)	—	no fix	2026-04-10	≤ vers:unknown/*
CVE-2025-66566US	—	0.60% (49th)	—	no fix	2025-12-05	3 versions
CVE-2025-53037US	—OT elevated	0.47% (40th)	—	no fix	2025-10-21	3 versions
CVE-2026-70922US	—	0.43% (37th)	—	no fix	2026-08-18	≤ vers:unknown/*
CVE-2025-53036US	—	0.41% (35th)	—	no fix	2025-10-21	3 versions
CVE-2025-50074US	—	0.40% (34th)	—	no fix	2025-10-21	3 versions
CVE-2025-61751US	—OT elevated	0.33% (26th)	—	no fix	2025-10-21	3 versions
CVE-2025-53035US	—	0.33% (26th)	—	no fix	2025-10-21	3 versions
CVE-2025-50075US	—	0.33% (26th)	—	no fix	2025-10-21	3 versions
CVE-2025-61756US	—OT elevated	0.32% (25th)	—	no fix	2025-10-21	3 versions
CVE-2026-35231US	—	0.31% (24th)	—	no fix	2026-04-21	3 versions
CVE-2026-21973US	—	0.31% (24th)	—	no fix	2026-01-20	2 versions
CVE-2026-34320US	—	0.31% (23rd)	—	no fix	2026-04-21	3 versions
CVE-2026-34310US	—	0.31% (23rd)	—	no fix	2026-04-21	3 versions
CVE-2025-53031US	—	0.31% (23rd)	—	no fix	2025-07-15	≤ 14.7.0.0.0
CVE-2026-34313US	—	0.29% (22nd)	—	no fix	2026-04-21	3 versions
CVE-2025-53034US	—OT elevated	0.24% (15th)	—	no fix	2025-10-21	3 versions
CVE-2026-34314US	—	0.22% (13th)	—	no fix	2026-04-21	3 versions
CVE-2026-34321US	—	0.20% (9th)	—	no fix	2026-04-21	3 versions
CVE-2026-34325US	—	0.11% (1st)	—	no fix	2026-04-21	3 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-284Improper Access Control7 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor3 CVEs
CWE-306Missing Authentication for Critical Function3 CVEs
CWE-20Improper Input Validation2 CVEs
CWE-285Improper Authorization2 CVEs
CWE-918Server-Side Request Forgery (SSRF)2 CVEs
CWE-116Improper Encoding or Escaping of Output1 CVEs
CWE-1285Improper Validation of Specified Index, Position, or Offset in Input1 CVEs

sources (2)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)27 CVEs
NLNCSC-NL (CSAF)4 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan