Known vulnerabilities in Oracle Access Manager - page 2

Vendor: Oracle
Software: Oracle Access Manager
Software CPE: cpe:2.3:a:oracle:oracle_access_manager:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 36
Public exploits: 4
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle Access Manager Oracle Access Manager is affected by 36 known vulnerabilities: 7 high, 17 medium, 12 low Critical High Medium Low

Vulnerabilities (36)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU55366 - Improper input validation
CVE-2021-2358		 CWE-20 Medium
No
No
 - 27.07.2021 SB2021072735
#VU28433 - Improper input validation
CVE-2020-2747		 CWE-20 Medium
No
No
 - 01.06.2020 SB2020041473
#VU28438 - Improper input validation
CVE-2020-2740		 CWE-20 Medium
No
No
 - 01.06.2020 SB2020041473
#VU28439 - Improper input validation
CVE-2020-2745		 CWE-20 Low
No
No
 - 01.06.2020 SB2020041473
#VU25048 - Improper input validation
CVE-2020-2555		 CWE-20 High
Available
Exploited
 - 07.02.2020 SB2020011477
SB2020102703
SB2020102939
and 4 more
#VU21465 - Out-of-bounds read
CVE-2018-11058		 CWE-125 Medium
No
No
 - 01.10.2019 SB2018091402
SB2020012202
SB2020011462
and 12 more
#VU11932 - Permissions, Privileges, and Access Controls
CVE-2018-2879		 CWE-264 High
Available
No
 - 19.04.2018 SB2018041914
#VU11922 - Permissions, Privileges, and Access Controls
CVE-2018-2739		 CWE-264 Low
No
No
 - 19.04.2018 SB2018041914
#VU11921 - Permissions, Privileges, and Access Controls
CVE-2018-2587		 CWE-264 Low
No
No
 - 19.04.2018 SB2018041914
SB2021012040
#VU10088 - Exposure of sensitive information to an unauthorized actor
CVE-2017-10262		 CWE-200 Low
No
No
 - 18.01.2018 SB2018011808
#VU8910 - Exposure of sensitive information to an unauthorized actor
CVE-2017-10154		 CWE-200 Low
No
No
 - 20.10.2017 SB2017101713
#VU8909 - Exposure of sensitive information to an unauthorized actor
CVE-2017-10259		 CWE-200 Low
No
No
 - 20.10.2017 SB2017101713
#VU642 - Buffer over-read
CVE-2016-2176		 CWE-126 Low
No
No
 - 23.09.2016 SB2016050507
SB2016091934
SB2016050404
and 2 more
#VU641 - Improper input validation
CVE-2016-2109		 CWE-119 Low
No
No
 - 23.09.2016 SB2016050506
SB2016051903
SB2016051204
and 17 more
#VU640 - Improper input validation
CVE-2016-2105		 CWE-20 Low
No
No
 - 23.09.2016 SB2016050505
SB2016061413
SB2016051903
and 22 more
#VU639 - Improper Access Control
CVE-2016-2107		 CWE-284 High
Available
No
 - 23.09.2016 SB2016050504
SB2016061413
SB2016050514
and 19 more


Showing elements 21 - 40 out of 36