Flexcube Direct Banking

Vendor:

First CVE: Apr 21, 2016 · Active for 10 years

17

Total CVEs

More Total CVEs than 93% of tracked products

2.8

Avg CVEs / Year

Higher CVE frequency than 76% of tracked products

5.8

Avg CVSS

Higher Avg CVSS than 17% of tracked products

0.0%

KEV Rate

Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Flexcube Direct Banking over time

Volume of CVEsAvg CVSS Base Score

First CVE

Apr 21, 2016

10 years ago

Most Recent CVE

Apr 22, 2021

1,920 days ago

CVE Severity & Scoring

Flexcube Direct Banking17 CVEs

88%

All CVEs352,708 CVEs

45%

40%

11%

LowMediumCritical

Attack Vector

Local0 (0.0%)

Network17 (100.0%)

Unknown0 (0.0%)

Physical0 (0.0%)

Adjacent Network0 (0.0%)

Attack Complexity

Low15 (88.2%)

High2 (11.8%)

Unknown0 (0.0%)

User Interaction

None3 (17.6%)

Unknown0 (0.0%)

Required14 (82.4%)

Privileges Required

Low5 (29.4%)

High1 (5.9%)

None11 (64.7%)

Unknown0 (0.0%)

Top CVEs

Signals from CVEs in this product scope (17 CVEs).

17 CVEs · Highest risk first

CVE	Published	CVSS	Risk	KEV	Exploit
CVE-2016-0699CRITICAL Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 12.0.2 and 12.0.3 allows remote attackers to affect confidentiality	Apr 21, 2016	9.1	23	NO	NO
CVE-2020-14897MEDIUM Vulnerability in the Oracle FLEXCUBE Direct Banking product of Oracle Financial Services Applications (component: Pre Login). Supported versions that are affected are 12.0.1, 12.0.	Oct 21, 2020	6.5	21	NO	NO
CVE-2019-2549MEDIUM Vulnerability in the Oracle FLEXCUBE Direct Banking component of Oracle Financial Services Applications (subcomponent: Logoff Page). The supported version that is affected is 12.0.	Jan 16, 2019	6.1	21	NO	NO
CVE-2016-3589MEDIUM Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Applications 12.0.1, 12.0.2, and 12.0.3 allows remote attackers to affect con	Jul 21, 2016	6.1	21	NO	NO
CVE-2019-2980MEDIUM Vulnerability in the Oracle FLEXCUBE Direct Banking product of Oracle Financial Services Applications (component: eMail). Supported versions that are affected are 12.0.2 and 12.0.3	Oct 16, 2019	6.5	20	NO	NO
CVE-2018-2674MEDIUM Vulnerability in the Oracle FLEXCUBE Direct Banking component of Oracle Financial Services Applications (subcomponent: Logoff). Supported versions that are affected are 12.0.2 and	Jan 18, 2018	6.1	20	NO	NO
CVE-2016-3463MEDIUM Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 12.0.3 allows remote attackers to affect confidentiality and integri	Apr 21, 2016	6.1	20	NO	NO
CVE-2016-0672MEDIUM Unspecified vulnerability in the Oracle FLEXCUBE Direct Banking component in Oracle Financial Services Software 12.0.2 and 12.0.3 allows remote attackers to affect confidentiality	Apr 21, 2016	6.1	20	NO	NO
CVE-2020-14890MEDIUM Vulnerability in the Oracle FLEXCUBE Direct Banking product of Oracle Financial Services Applications (component: Pre Login). Supported versions that are affected are 12.0.1, 12.0.	Oct 21, 2020	6.5	18	NO	NO
CVE-2019-2550MEDIUM Vulnerability in the Oracle FLEXCUBE Direct Banking component of Oracle Financial Services Applications (subcomponent: Logoff Page). The supported version that is affected is 12.0.	Jan 16, 2019	4.3	18	NO	NO

View all 17 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (17 CVEs).

CISA KEV

0 CVEs

0.0% of CVEs· Bottom 1%

Metasploit

0 CVEs

0.0% of CVEs· Bottom 1%

Nuclei

0 CVEs

0.0% of CVEs· Bottom 1%

ExploitDB

0 CVEs

0.0% of CVEs· Bottom 1%

Social Chatter

Signals from CVEs in this product scope (17 CVEs).

Media Mentions

Signals from CVEs in this product scope (17 CVEs).

Top CNAs Publishing CVEs For Flexcube Direct Banking

Top CWEs

Versions

Version	CVE Count	Avg CVSS	Avg EPSS
12.0.3	15	5.9	1.5%
12.0.2	15	5.8	1.5%
12.0.1	3	6.4	1.9%