Summary
Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle Financial Services Applications ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.
Product
Oracle Financial Services ist eine Zusammenstellung von Anwendungen für den Finanzsektor und eine Technologiebasis zur Erfüllung von IT- und Geschäftsanforderungen.
Vulnerabilities 6
-
High 8.0
Vulnerability in the Oracle Banking Corporate Lending product of Oracle Financial Services Applications (component: Cor…
-
High 8.0
Vulnerability in the Oracle Banking Branch product of Oracle Financial Services Applications (component: Reports). Supp…
-
High 7.5
Vulnerability in the Oracle Banking Origination product of Oracle Financial Services Applications (component: Onboardin…
-
High 7.1
Vulnerability in the Oracle Banking Branch product of Oracle Financial Services Applications (component: Reports). Supp…
-
High 7.1
Vulnerability in the Oracle Banking Corporate Lending Process Management product of Oracle Financial Services Applicati…
-
Medium 6.9
Apache Log4j Core: Silent log event loss in XmlLayout due to unescaped XML 1.0 forbidden characters
Apache Log4j Core's XmlLayout https://logging.apache.org/log4j/2.x/manual/layouts.html#XmlLayout , in versions up to and including 2.25.3, fails to sanitize characters forbidden by the XML 1.0 specification https://www.w3.org/TR/xml/#charsets producing invali…
Revision history
-
#1
Initiale Fassung
References
-
Oracle Critical Security Patch Update Advisory - September 2026 - Appendix Oracle Financial Services Applications vom 2026-09-15
https://www.oracle.com/security-alerts/cspusep2026.html#AppendixIFLX