Known vulnerabilities in Oracle Commerce Platform - page 2

Vendor: Oracle
Software: Oracle Commerce Platform
Software CPE: cpe:2.3:a:oracle:commerce_platform:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 43
Public exploits: 5
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle Commerce Platform Oracle Commerce Platform is affected by 43 known vulnerabilities: 1 critical, 5 high, 29 medium, 8 low Critical High Medium Low

Vulnerabilities (43)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU78394 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-28439		 CWE-79 Low
No
No
 - 19.07.2023 SB2023071950
SB2023071977
SB20230719111
and 13 more
#VU72427 - Allocation of Resources Without Limits or Throttling
CVE-2023-24998		 CWE-770 Medium
Available
No
 - 20.02.2023 SB2023022046
SB2023022047
SB2023030917
and 202 more
#VU65456 - Improper input validation
CVE-2022-21559		 CWE-20 Low
No
No
 - 19.07.2022 SB2022071931
#VU63085 - Improper input validation
CVE-2022-22971		 CWE-20 Medium
Available
No
 - 12.05.2022 SB2022051201
SB2022060620
SB2022062223
and 52 more
#VU61799 - Out-of-bounds write
CVE-2020-36518		 CWE-787 Medium
No
No
 - 01.04.2022 SB2022040113
SB2022040114
SB2022040115
and 147 more
#VU61756 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-22965		 CWE-94 Critical
Available
Exploited
 - 31.03.2022 SB2022033109
SB2022040109
SB2022040110
and 78 more
#VU59965 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-23437		 CWE-835 Medium
No
No
 - 25.01.2022 SB2022012503
SB2022041946
SB2022042249
and 92 more
#VU59936 - Improper input validation
CVE-2021-42575		 CWE-20 High
No
No
 - 23.01.2022 SB2022012333
SB2022072039
SB2022071971
and 5 more
#VU59925 - Improper input validation
CVE-2022-21387		 CWE-20 Medium
No
No
 - 23.01.2022 SB2022012311
#VU58198 - Exposure of sensitive information to an unauthorized actor
CVE-2021-40690		 CWE-200 Medium
No
No
 - 16.11.2021 SB2021111622
SB2021111712
SB2022012032
and 37 more
#VU55158 - Improper input validation
CVE-2021-2463		 CWE-20 High
No
No
 - 21.07.2021 SB2021072118
#VU55044 - Improper input validation
CVE-2021-2351		 CWE-20 High
No
No
 - 20.07.2021 SB2021072053
SB2022011824
SB2022011825
and 110 more
#VU48979 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2020-25649		 CWE-611 Medium
No
No
 - 03.12.2020 SB2020121510
SB2021020321
SB2021042112
and 68 more
#VU29928 - Improper input validation
CVE-2020-14532		 CWE-20 Medium
No
No
 11.3.1 15.07.2020 SB2020071601
#VU29929 - Improper input validation
CVE-2020-14533		 CWE-20 Low
No
No
 11.3.1 15.07.2020 SB2020071601
#VU28238 - Exposed Dangerous Method or Function
CVE-2020-10683		 CWE-749 Medium
No
No
 - 26.05.2020 SB2020050106
SB2020052616
SB2020071632
and 43 more
#VU25048 - Improper input validation
CVE-2020-2555		 CWE-20 High
Available
Exploited
 - 07.02.2020 SB2020011477
SB2020102703
SB2020102939
and 4 more
#VU35970 - Improper Access Control
CVE-2019-2659		 CWE-284 Medium
No
No
 - 23.04.2019 SB2019042318
#VU35974 - Improper Access Control
CVE-2019-2712		 CWE-284 Medium
No
No
 - 23.04.2019 SB2019042319
#VU39771 - Exposure of sensitive information to an unauthorized actor
CVE-2017-3296		 CWE-200 Low
No
No
 - 28.01.2017 SB2017012820


Showing elements 21 - 40 out of 43