Known vulnerabilities in Instantis EnterpriseTrack - page 2

Vendor: Oracle
Software CPE: cpe:2.3:a:oracle:instantis_enterprisetrack:*:*:*:*:*:*:*:*
Total vulnerabilities: 29
Public exploits: 7
Known exploited (KEV): 2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Instantis EnterpriseTrack Instantis EnterpriseTrack is affected by 29 known vulnerabilities: 1 critical, 8 high, 14 medium, 6 low Critical High Medium Low

Vulnerabilities (29)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU28634 - Improper input validation
CVE-2017-6056
CWE-20 High
No
No
- 04.06.2020 SB2019101584
SB2023022235
SB2017050819
and 1 more
#VU25002 - Session Fixation
CVE-2019-17563
CWE-384 Low
No
No
- 06.02.2020 SB2019121315
SB2020011492
SB2020011519
and 17 more
#VU24496 - Improper input validation
CVE-2012-1695
CWE-20 Medium
No
No
- 22.01.2020 SB2020012225
#VU24468 - Improper input validation
CVE-2019-0227
CWE-20 Medium
Available
No
- 21.01.2020 SB2020012205
SB2020012308
SB2020012309
and 40 more
#VU22545 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2019-12415
CWE-611 High
No
No
- 06.11.2019 SB2019110635
SB2020012308
SB2020012309
and 42 more
#VU20386 - Use After Free
CVE-2019-10082
CWE-416 Medium
No
No
- 23.08.2019 SB2019082303
SB2019082610
SB2019090202
and 17 more
#VU18236 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2019-0232
CWE-78 High
Available
Exploited
- 11.04.2019 SB2019041101
SB2019052003
SB2020012015
and 5 more
#VU18110 - Permissions, Privileges, and Access Controls
CVE-2019-0211
CWE-264 Low
Available
Exploited
- 02.04.2019 SB2019040201
SB2019040301
SB2019040407
and 21 more
#VU12127 - Deserialization of Untrusted Data
CVE-2017-5645
CWE-502 High
No
No
- 24.04.2018 SB2017040201
SB2019011707
SB2017090512
and 40 more


Showing elements 21 - 40 out of 29