Known vulnerabilities in Oracle Communications Interactive Session Recorder

Known vulnerabilities in Oracle Communications Interactive Session Recorder

Vendor: Oracle

Software: Oracle Communications Interactive Session Recorder

Software CPE: cpe:2.3:a:oracle:interactive_session_recorder:*:*:*:*:*:*:*:*

Website: https://www.oracle.com

Total vulnerabilities: 14

Public exploits: 5

Known exploited (KEV): 0

Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Vulnerabilities (14)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU63345 - Improper Authorization CVE-2022-22978	CWE-285	High	Available	No	-	17.05.2022	SB2022051717 SB2022052009 SB2022052010 and 20 more
#VU63085 - Improper input validation CVE-2022-22971	CWE-20	Medium	Available	No	-	12.05.2022	SB2022051201 SB2022060620 SB2022062223 and 52 more
#VU59098 - Improper Control of Generation of Code ('Code Injection') CVE-2021-44832	CWE-94	Medium	No	No	-	28.12.2021	SB2021122816 SB2021123002 SB2022010601 and 197 more
#VU58271 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2021-41184	CWE-79	Medium	Available	No	-	20.11.2021	SB2021112002 SB2022030804 SB2022041935 and 74 more
#VU50820 - Permissions, Privileges, and Access Controls CVE-2021-22112	CWE-264	Medium	No	No	-	22.02.2021	SB2021022207 SB2021022216 SB2021042314 and 8 more
#VU48979 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2020-25649	CWE-611	Medium	No	No	-	03.12.2020	SB2020121510 SB2021020321 SB2021042112 and 68 more
#VU29968 - Improper input validation CVE-2020-14574	CWE-20	Low	No	No	-	16.07.2020	SB2020071606
#VU27487 - Improper Certificate Validation CVE-2020-9488	CWE-295	Low	No	No	-	04.05.2020	SB2020050406 SB2020071606 SB2020071620 and 67 more
#VU27052 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-11022	CWE-79	Low	Available	No	-	21.04.2020	SB2020042126 SB2020052033 SB2020052103 and 181 more
#VU18092 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\') CVE-2019-11358	CWE-1321	Low	Available	No	-	28.03.2019	SB2019032804 SB2019041026 SB2019041801 and 155 more
#VU15724 - Improper input validation CVE-2018-16395	CWE-20	Low	No	No	-	06.11.2018	SB2018110603 SB2018112909 SB2018112910 and 15 more
#VU12127 - Deserialization of Untrusted Data CVE-2017-5645	CWE-502	High	No	No	-	24.04.2018	SB2017040201 SB2019011707 SB2017090512 and 40 more
#VU11129 - Exposure of sensitive information to an unauthorized actor CVE-2018-6829	CWE-200	Low	No	No	-	16.03.2018	SB2018020823 SB2020011452
#VU6950 - Improper input validation CVE-2017-5664	CWE-20	Low	No	No	-	06.06.2017	SB2017051109 SB2017060618 SB2017060619 and 23 more