Known vulnerabilities in Management Cloud Engine

Known vulnerabilities in Management Cloud Engine

Vendor: Oracle

Software: Management Cloud Engine

Software CPE: cpe:2.3:a:oracle:management_cloud_engine:*:*:*:*:*:*:*:*

Website: https://www.oracle.com

Total vulnerabilities: 17

Public exploits: 4

Known exploited (KEV): 1

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (17)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU114024 - Resource exhaustion CVE-2025-48989	CWE-400	Medium	No	No	-	13.08.2025	SB2025081375 SB2025081376 SB20250820127 and 49 more
#VU101974 - Deserialization of Untrusted Data CVE-2024-52046	CWE-502	High	No	No	-	28.12.2024	SB2024122801 SB20250117140 SB2025020549 and 22 more
#VU101893 - Permissions, Privileges, and Access Controls CVE-2024-56337	CWE-264	High	No	No	-	20.12.2024	SB2024122063 SB2025011311 SB2025011801 and 45 more
#VU93732 - Resource Management Errors CVE-2024-34750	CWE-399	Medium	No	No	-	03.07.2024	SB2024070346 SB20240711245 SB2024071542 and 56 more
#VU89801 - Server-Side Request Forgery (SSRF) CVE-2024-22262	CWE-918	Medium	No	No	-	24.05.2024	SB2024052420 SB2024052423 SB2024052708 and 76 more
#VU87671 - Cryptographic Issues CVE-2024-28834	CWE-310	Medium	No	No	-	20.03.2024	SB2024032057 SB2024032058 SB2024032059 and 111 more
#VU85304 - Excessive Iteration CVE-2023-4043	CWE-834	Medium	No	No	-	11.01.2024	SB2024011123 SB2024012646 SB2024020506 and 15 more
#VU84537 - Inadequate Encryption Strength CVE-2023-48795	CWE-326	Low	Available	No	-	19.12.2023	SB2023121903 SB2023121905 SB2023121906 and 343 more
#VU83582 - Improper input validation CVE-2023-34053	CWE-20	Medium	No	No	-	29.11.2023	SB2023112966 SB2023112967 SB2024011661 and 13 more
#VU83533 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2023-46589	CWE-444	Medium	No	No	-	28.11.2023	SB2023112846 SB2023121851 SB2023122831 and 78 more
#VU77622 - Exposure of sensitive information to an unauthorized actor CVE-2023-34981	CWE-200	Medium	No	No	-	22.06.2023	SB2023062241 SB2023070714 SB2023071901 and 24 more
#VU70530 - Deserialization of Untrusted Data CVE-2022-45047	CWE-502	High	Available	No	-	28.12.2022	SB2022122828 SB2022122920 SB2023011148 and 49 more
#VU68859 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2022-42252	CWE-444	Medium	No	No	-	31.10.2022	SB2022103146 SB2022112324 SB2022112533 and 43 more
#VU68635 - Deserialization of Untrusted Data CVE-2022-42003	CWE-502	Medium	No	No	-	25.10.2022	SB2022102509 SB2022102510 SB2022103117 and 208 more
#VU68307 - Improper Control of Generation of Code ('Code Injection') CVE-2022-42889	CWE-94	High	Available	Exploited	-	14.10.2022	SB2022101405 SB2022102709 SB2022110306 and 91 more
#VU64627 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2022-34305	CWE-79	Medium	Available	No	-	23.06.2022	SB2022062338 SB2022071177 SB2022071801 and 26 more
#VU59098 - Improper Control of Generation of Code ('Code Injection') CVE-2021-44832	CWE-94	Medium	No	No	-	28.12.2021	SB2021122816 SB2021123002 SB2022010601 and 197 more