Known vulnerabilities in Oracle Communications Design Studio

Known vulnerabilities in Oracle Communications Design Studio

Vendor: Oracle

Software: Oracle Communications Design Studio

Software CPE: cpe:2.3:a:oracle:design_studio:*:*:*:*:*:*:*:*

Website: https://www.oracle.com

Total vulnerabilities: 16

Public exploits: 4

Known exploited (KEV): 1

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (16)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU68307 - Improper Control of Generation of Code ('Code Injection') CVE-2022-42889	CWE-94	High	Available	Exploited	-	14.10.2022	SB2022101405 SB2022102709 SB2022110306 and 91 more
#VU65835 - Incorrect Regular Expression CVE-2022-31129	CWE-185	Medium	No	No	-	27.07.2022	SB2022072729 SB2022072901 SB2022081048 and 102 more
#VU62849 - Creation of Temporary File With Insecure Permissions CVE-2022-24823	CWE-378	Low	No	No	-	09.05.2022	SB2022050902 SB2022063002 SB2022072013 and 56 more
#VU62472 - Resource exhaustion CVE-2022-22969	CWE-400	Medium	No	No	-	21.04.2022	SB2022042129 SB2022042903 SB2022071933 and 2 more
#VU61810 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2021-43797	CWE-444	Medium	No	No	-	02.04.2022	SB2021120923 SB2022040202 SB2022042223 and 50 more
#VU59965 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2022-23437	CWE-835	Medium	No	No	-	25.01.2022	SB2022012503 SB2022041946 SB2022042249 and 92 more
#VU55044 - Improper input validation CVE-2021-2351	CWE-20	High	No	No	-	20.07.2021	SB2021072053 SB2022011824 SB2022011825 and 110 more
#VU53202 - Command injection CVE-2021-23337	CWE-77	Medium	No	No	-	12.05.2021	SB2021021525 SB2021051230 SB2021062703 and 60 more
#VU52252 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2021-29425	CWE-22	Low	No	No	-	15.04.2021	SB2021041510 SB2021081922 SB2021093016 and 121 more
#VU51837 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2021-21409	CWE-444	Medium	No	No	-	01.04.2021	SB2021040116 SB2021040626 SB2021050706 and 33 more
#VU51835 - Cleartext Storage of Sensitive Information CVE-2021-21290	CWE-312	Low	No	No	-	01.04.2021	SB2021020813 SB2021040626 SB2021050706 and 43 more
#VU49739 - Improper input validation CVE-2020-5421	CWE-20	Medium	Available	No	-	20.01.2021	SB2021012002 SB2021012008 SB2021012015 and 39 more
#VU27513 - Resource exhaustion CVE-2020-11612	CWE-400	Medium	No	No	-	04.05.2020	SB2020050435 SB2020073033 SB2021012210 and 35 more
#VU24468 - Improper input validation CVE-2019-0227	CWE-20	Medium	Available	No	-	21.01.2020	SB2020012205 SB2020012308 SB2020012309 and 40 more
#VU23188 - Divide By Zero CVE-2019-16168	CWE-369	Low	Available	No	-	02.12.2019	SB2019120212 SB2019100934 SB2019100935 and 25 more
#VU20844 - Protection Mechanism Failure CVE-2019-10086	CWE-693	Low	No	No	-	04.09.2019	SB2019090405 SB2019090406 SB2019121902 and 112 more