Known vulnerabilities in Oracle Access Manager

Vendor: Oracle

Software: Oracle Access Manager

Software CPE: cpe:2.3:a:oracle:oracle_access_manager:*:*:*:*:*:*:*:*

Website: https://www.oracle.com

Total vulnerabilities: 36

Public exploits: 4

Known exploited (KEV): 2

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (36)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU113607 - Uncontrolled Recursion CVE-2025-48924	CWE-674	Medium	No	No	-	04.08.2025	SB2025080422 SB2025080423 SB2025080427 and 180 more
#VU103646 - Integer overflow CVE-2025-0725	CWE-190	High	No	No	-	05.02.2025	SB2025020531 SB2025020601 SB2025020658 and 25 more
#VU101974 - Deserialization of Untrusted Data CVE-2024-52046	CWE-502	High	No	No	-	28.12.2024	SB2024122801 SB20250117140 SB2025020549 and 22 more
#VU86623 - Use After Free CVE-2024-23807	CWE-416	High	No	No	-	20.02.2024	SB2024022032 SB2024062836 SB2024071042 and 24 more
#VU83515 - Integer overflow CVE-2023-37536	CWE-190	Medium	No	No	-	27.11.2023	SB2023112767 SB2023112803 SB2023112809 and 28 more
#VU80783 - Incorrect Conversion between Numeric Types CVE-2023-3635	CWE-681	Medium	No	No	-	14.09.2023	SB2023091430 SB2023091528 SB2023100937 and 47 more
#VU74270 - Improper Verification of Cryptographic Signature CVE-2023-22899	CWE-347	Medium	No	No	-	31.03.2023	SB2023033140 SB2023040471 SB2023041871 and 6 more
#VU72323 - Improper Certificate Validation CVE-2021-0341	CWE-295	Medium	No	No	-	16.02.2023	SB2023021628 SB2023051043 SB2023051044 and 14 more
#VU71324 - Improper input validation CVE-2023-21859	CWE-20	Low	No	No	-	18.01.2023	SB2023011837
#VU70994 - Memory corruption CVE-2022-41342	CWE-119	Low	No	No	-	10.01.2023	SB2023011066 SB20260120110 SB20260120113 and 2 more
#VU69673 - Out-of-bounds write CVE-2022-40149	CWE-787	Medium	No	No	-	29.11.2022	SB2022112909 SB2022112941 SB2022121101 and 41 more
#VU68529 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2022-39412	CWE-22	Medium	No	No	-	20.10.2022	SB2022102029
#VU68535 - Out-of-bounds read CVE-2022-39405	CWE-125	Medium	No	No	-	20.10.2022	SB2022102029
#VU63127 - Resource exhaustion CVE-2021-37136	CWE-400	Medium	No	No	-	12.05.2022	SB2021101948 SB2022051235 SB2022060838 and 36 more
#VU61799 - Out-of-bounds write CVE-2020-36518	CWE-787	Medium	No	No	-	01.04.2022	SB2022040113 SB2022040114 SB2022040115 and 147 more
#VU60367 - Security Features CVE-2022-24329	CWE-254	Medium	No	No	-	08.02.2022	SB2022020805 SB2022042218 SB2022071957 and 13 more
#VU59699 - Improper input validation CVE-2021-35587	CWE-20	High	Available	Exploited	-	18.01.2022	SB2022011839
#VU47481 - Improper input validation CVE-2020-13956	CWE-20	Medium	No	No	-	09.10.2020	SB2020100902 SB2020101604 SB2021042104 and 77 more
#VU48600 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2019-20916	CWE-22	Medium	No	No	-	04.09.2020	SB2020090420 SB2020112328 SB2020122208 and 29 more
#VU26209 - Cleartext Transmission of Sensitive Information CVE-2019-0231	CWE-319	Low	No	No	-	19.03.2020	SB2019100129 SB2020031901 SB2022080805 and 3 more

Showing elements 1 - 20 out of 36

Known vulnerabilities in Oracle Access Manager

Breakdown by Severity Chart

Vulnerabilities (36)

Please verify you're human