Known vulnerabilities in Oracle Communications Design Studio

Vendor: Oracle
Software: Oracle Communications Design Studio
Software CPE: cpe:2.3:a:oracle:design_studio:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 16
Public exploits: 4
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle Communications Design Studio Oracle Communications Design Studio is affected by 16 known vulnerabilities: 2 high, 9 medium, 5 low Critical High Medium Low

Vulnerabilities (16)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU68307 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-42889		 CWE-94 High
Available
Exploited
 - 14.10.2022 -
#VU65835 - Incorrect Regular Expression
CVE-2022-31129		 CWE-185 Medium
No
No
 - 27.07.2022 -
#VU62849 - Creation of Temporary File With Insecure Permissions
CVE-2022-24823		 CWE-378 Low
No
No
 - 09.05.2022 -
#VU62472 - Resource exhaustion
CVE-2022-22969		 CWE-400 Medium
No
No
 - 21.04.2022 -
#VU61810 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-43797		 CWE-444 Medium
No
No
 - 02.04.2022 -
#VU59965 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-23437		 CWE-835 Medium
No
No
 - 25.01.2022 -
#VU55044 - Improper input validation
CVE-2021-2351		 CWE-20 High
No
No
 - 20.07.2021 -
#VU53202 - Command injection
CVE-2021-23337		 CWE-77 Medium
No
No
 - 12.05.2021 -
#VU52252 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-29425		 CWE-22 Low
No
No
 - 15.04.2021 -
#VU51837 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-21409		 CWE-444 Medium
No
No
 - 01.04.2021 -
#VU51835 - Cleartext Storage of Sensitive Information
CVE-2021-21290		 CWE-312 Low
No
No
 - 01.04.2021 -
#VU49739 - Improper input validation
CVE-2020-5421		 CWE-20 Medium
Available
No
 - 20.01.2021 -
#VU27513 - Resource exhaustion
CVE-2020-11612		 CWE-400 Medium
No
No
 - 04.05.2020 -
#VU24468 - Improper input validation
CVE-2019-0227		 CWE-20 Medium
Available
No
 - 21.01.2020 -
#VU23188 - Divide By Zero
CVE-2019-16168		 CWE-369 Low
Available
No
 - 02.12.2019 -
#VU20844 - Protection Mechanism Failure
CVE-2019-10086		 CWE-693 Low
No
No
 - 04.09.2019 -