Financial Services Enterprise Case Management vulnerabilities

3 known vulnerabilities in Financial Services Enterprise Case Management from Oracle. 3 are rated high or critical, and 2 have been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Oracle Financial Services Enterprise Case…: Improper Authentication

  CVE-2026-70922Aug 18, 2026Oracle

  Vulnerability in the Oracle Financial Services Enterprise Case Management product of Oracle Financial Services Applications (component: Web UI). Supported versions that are affected are 8.0.8.2 and 8.1.2.11. Easily exploitable vulnerability allows low privileg

• 9.8 Critical severity

  Spring Framework JDK 9+ Remote Code Execution Exploited

  CVE-2022-22965Apr 1, 2022Spring FrameworkEPSS 99.6%

  A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific exploit requires the application to run on Tomcat as a WAR deployment. If the application is deployed as a Spring Boot

• 9.8 Critical severity

  VMware Tanzu Spring Cloud Function Remote Code Execution Exploited

  CVE-2022-22963Apr 1, 2022Spring Cloud FunctionEPSS 99.9%

  In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is possible for a user to provide a specially crafted SpEL as a routing-expression that may result in remote code execution and access to local r