Known vulnerabilities in Instantis EnterpriseTrack
Vendor:
Oracle
Software:
Instantis EnterpriseTrack
Software CPE:
cpe:2.3:a:oracle:instantis_enterprisetrack:*:*:*:*:*:*:*:*
Website:
https://www.oracle.com
Total vulnerabilities:
29
Public exploits:
7
Known exploited (KEV):
2
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
Vulnerabilities (29)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU59098 - Improper Control of Generation of Code ('Code Injection') CVE-2021-44832 |
CWE-94 | Medium | - | 28.12.2021 | - | ||
| #VU59056 - Memory corruption CVE-2021-44790 |
CWE-119 | Critical | - | 20.12.2021 | - | ||
| #VU59051 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2021-45105 |
CWE-835 | Medium | - | 18.12.2021 | - | ||
| #VU55423 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2021-33037 |
CWE-444 | Medium | - | 29.07.2021 | - | ||
| #VU55044 - Improper input validation CVE-2021-2351 |
CWE-20 | High | - | 20.07.2021 | - | ||
| #VU53776 - NULL Pointer Dereference CVE-2021-26691 |
CWE-476 | Low | - | 03.06.2021 | - | ||
| #VU52501 - Server-Side Request Forgery (SSRF) CVE-2020-11987 |
CWE-918 | Medium | - | 23.04.2021 | - | ||
| #VU51014 - Resource Management Errors CVE-2021-25122 |
CWE-399 | Medium | - | 01.03.2021 | - | ||
| #VU48779 - Resource Management Errors CVE-2020-17527 |
CWE-399 | Medium | - | 03.12.2020 | - | ||
| #VU35713 - Memory corruption CVE-2020-11984 |
CWE-119 | High | - | 08.08.2020 | - | ||
| #VU29723 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2020-13935 |
CWE-835 | Medium | - | 14.07.2020 | - | ||
| #VU29068 - Server-Side Request Forgery (SSRF) CVE-2019-17566 |
CWE-918 | Medium | - | 16.06.2020 | - | ||
| #VU28158 - Deserialization of Untrusted Data CVE-2020-9484 |
CWE-502 | High | - | 21.05.2020 | - | ||
| #VU27487 - Improper Certificate Validation CVE-2020-9488 |
CWE-295 | Low | - | 04.05.2020 | - | ||
| #VU26528 - Use of Uninitialized Variable CVE-2020-1934 |
CWE-457 | Medium | - | 02.04.2020 | - | ||
| #VU25002 - Session Fixation CVE-2019-17563 |
CWE-384 | Low | - | 06.02.2020 | - | ||
| #VU24399 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2019-0219 |
CWE-79 | Low | - | 20.01.2020 | - | ||
| #VU22545 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2019-12415 |
CWE-611 | High | - | 06.11.2019 | - | ||
| #VU20386 - Use After Free CVE-2019-10082 |
CWE-416 | Medium | - | 23.08.2019 | - | ||
| #VU12127 - Deserialization of Untrusted Data CVE-2017-5645 |
CWE-502 | High | - | 24.04.2018 | - |
Showing elements 1 - 20 out of 29