Known vulnerabilities in Oracle Agile PLM Framework - page 3

Vendor: Oracle
Software: Oracle Agile PLM Framework
Software CPE: cpe:2.3:a:oracle:oracle_agile_plm:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 65
Public exploits: 13
Known exploited (KEV): 5

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle Agile PLM Framework Oracle Agile PLM Framework is affected by 65 known vulnerabilities: 1 critical, 11 high, 39 medium, 14 low Critical High Medium Low

Vulnerabilities (65)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU63299 - Error Handling
CVE-2022-25762		 CWE-388 Medium
No
No
 - 17.05.2022 SB2022051715
SB2022071173
SB2022072094
and 14 more
#VU62563 - Improper input validation
CVE-2022-21467		 CWE-20 Medium
No
No
 - 25.04.2022 SB2022042532
#VU60208 - Improper input validation
CVE-2021-35043		 CWE-20 Medium
No
No
 - 01.02.2022 SB2022020144
SB2022020165
SB2022020166
and 4 more
#VU59965 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-23437		 CWE-835 Medium
No
No
 - 25.01.2022 SB2022012503
SB2022041946
SB2022042249
and 92 more
#VU59098 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-44832		 CWE-94 Medium
No
No
 - 28.12.2021 SB2021122816
SB2021123002
SB2022010601
and 197 more
#VU58219 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-41165		 CWE-79 Medium
No
No
 - 18.11.2021 SB2021111801
SB2021111802
SB2021111909
and 14 more
#VU58198 - Exposure of sensitive information to an unauthorized actor
CVE-2021-40690		 CWE-200 Medium
No
No
 - 16.11.2021 SB2021111622
SB2021111712
SB2022012032
and 37 more
#VU57389 - Resource exhaustion
CVE-2021-42340		 CWE-400 Medium
No
No
 - 15.10.2021 SB2021101507
SB2021110507
SB2021111711
and 28 more
#VU55423 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-33037		 CWE-444 Medium
No
No
 - 29.07.2021 SB2021072907
SB2021080807
SB2021080808
and 30 more
#VU55044 - Improper input validation
CVE-2021-2351		 CWE-20 High
No
No
 - 20.07.2021 SB2021072053
SB2022011824
SB2022011825
and 110 more
#VU54856 - Resource exhaustion
CVE-2021-36374		 CWE-400 Medium
No
No
 - 14.07.2021 SB2021071409
SB2021072011
SB2021101927
and 44 more
#VU52252 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-29425		 CWE-22 Low
No
No
 - 15.04.2021 SB2021041510
SB2021081922
SB2021093016
and 122 more
#VU50054 - Improper input validation
CVE-2021-26272		 CWE-20 Low
No
No
 - 26.01.2021 SB2021012719
SB2021072116
SB2021072821
and 4 more
#VU49570 - Exposure of sensitive information to an unauthorized actor
CVE-2021-24122		 CWE-200 Medium
No
No
 - 14.01.2021 SB2021011807
SB2021072821
SB2022012734
and 5 more
#VU48979 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2020-25649		 CWE-611 Medium
No
No
 - 03.12.2020 SB2020121510
SB2021020321
SB2021042112
and 68 more
#VU47770 - Improper input validation
CVE-2020-9281		 CWE-20 Medium
No
No
 - 21.10.2020 SB2020102103
SB2020102951
SB2021012078
and 8 more
#VU29128 - Deserialization of Untrusted Data
CVE-2020-14195		 CWE-502 High
Available
No
 - 18.06.2020 SB2020061806
SB2020070320
SB2020102703
and 24 more
#VU28238 - Exposed Dangerous Method or Function
CVE-2020-10683		 CWE-749 Medium
No
No
 - 26.05.2020 SB2020050106
SB2020052616
SB2020071632
and 43 more
#VU27052 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11022		 CWE-79 Low
Available
No
 - 21.04.2020 SB2020042126
SB2020052033
SB2020052103
and 181 more
#VU20844 - Protection Mechanism Failure
CVE-2019-10086		 CWE-693 Low
No
No
 - 04.09.2019 SB2019090405
SB2019090406
SB2019121902
and 113 more


Showing elements 41 - 60 out of 65