VDB

GCVE-110-NCSC-2024-416

GCVE-110-NCSC-2024-416
Advisory PublishedCVSS 6.1/10
Vulnetix · Advisory published October 17, 2024
Oracle heeft kwetsbaarheden verholpen in Financial Services Applications.

Weaknesses (CWE)

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')CWE-400Uncontrolled Resource ConsumptionCWE-295Improper Certificate ValidationCWE-77Improper Neutralization of Special Elements used in a Command ('Command Injection')CWE-416Use After FreeCWE-404Improper Resource Shutdown or ReleaseCWE-200Exposure of Sensitive Information to an Unauthorized ActorCWE-601URL Redirection to Untrusted Site ('Open Redirect')CWE-770Allocation of Resources Without Limits or ThrottlingCWE-306Missing Authentication for Critical Function

Risk Scores

CVSS 3.1
6.1/10
Medium · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Affected Products

VendorProductVersionsPlatforms
oraclefinancial_services_regulatory_reporting_with_agilereporter
oraclefinancial_services_cash_flow_engine
oraclefinancial_services_funds_transfer_pricing
oraclebanking_virtual_account_management
oraclebanking_apis
oraclefinancial_services_data_governance_for_us_regulatory_reporting
oraclefinancial_services_lending_and_leasing
oraclebanking_party_management
oraclebanking_digital_experience
oraclebanking_credit_facilities_process_management
oraclefinancial_services_deposit_insurance_calculations_for_liquidity_risk_management
oraclefinancial_services_retail_performance_analytics
oraclebanking_deposits_and_lines_of_credit_servicing
oraclebanking_corporate_lending_process_management
oraclefinancial_services_analytical_applications_infrastructure
oraclefinancial_services_loan_loss_forecasting_and_provisioning
oraclefinancial_services_regulatory_reporting
oraclebanking_extensibility_workbench
oraclebanking_supply_chain_finance
oraclebanking_trade_finance
oraclefinancial_services_currency_transaction_reporting
oraclebanking_liquidity_management
oraclebanking_treasury_management
oraclefinancial_services_compliance_studio
oraclefinancial_services_analytical_applications_reconciliation_framework
oraclebanking_origination
oraclebanking_enterprise_default_management
oraclefinancial_services_behavior_detection_platform
oraclebanking_branch
oraclefinancial_services_revenue_management_and_billing
oraclefinancial_services_enterprise_case_management
oraclebanking_trade_finance_process_management
oraclefinancial_services_profitability_management
oraclebanking_payments
oraclefinancial_services_asset_liability_management
oraclefinancial_services_basel_regulatory_capital_internal_ratings_based_approach
oraclefinancial_services_institutional_performance_analytics
oraclebanking_collections_and_recovery
oraclefinancial_services_crime_and_compliance_management_studio
oraclefinancial_services_liquidity_risk_measurement_and_management
oraclefinancial_services_data_integration_hub
oraclebanking_platform
oraclefinancial_services_balance_computation_engine
oraclefinancial_services_enterprise_financial_performance_analytics
oraclefinancial_services_model_management_and_governance
oraclebanking_loans_servicing
oraclefinancial_services_applications
oraclebanking_cash_management
oraclefinancial_services_basel_regulatory_capital_basic
oraclebanking_electronic_data_exchange_for_corporates
oraclefinancial_services_balance_sheet_planning
oraclebanking_corporate_lending

References

advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory
advisory

Browse GCVE Records

74,147 records in the GCVE database · Updated July 21, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 100/wk Open console ›