Known vulnerabilities in Oracle AutoVue

Known vulnerabilities in Oracle AutoVue

Vendor: Oracle

Software: Oracle AutoVue

Software CPE: cpe:2.3:a:oracle:oracle_autovue:*:*:*:*:*:*:*:*

Website: https://www.oracle.com

Total vulnerabilities: 16

Public exploits: 3

Known exploited (KEV): 1

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (16)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU121184 - Out-of-bounds read CVE-2026-22801	CWE-125	Medium	No	No	-	13.01.2026	SB2026011311 SB20260114154 SB2026012271 and 24 more
#VU116196 - Memory corruption CVE-2025-9900	CWE-119	High	No	No	-	30.09.2025	SB2025093033 SB2025093035 SB2025100921 and 50 more
#VU105715 - Out-of-bounds write CVE-2025-27363	CWE-787	Critical	Available	Exploited	-	14.03.2025	SB2025031402 SB2025031502 SB2025031750 and 97 more
#VU86808 - Resource exhaustion CVE-2024-22201	CWE-400	Medium	No	No	-	26.02.2024	SB2024022652 SB2024030711 SB2024030845 and 43 more
#VU68832 - Resource exhaustion CVE-2022-42004	CWE-400	Medium	No	No	-	31.10.2022	SB2022103116 SB2022103117 SB2022111404 and 122 more
#VU66153 - Heap-based Buffer Overflow CVE-2022-37434	CWE-122	High	Available	No	-	07.08.2022	SB2022080705 SB2022081833 SB2022081851 and 154 more
#VU65830 - Resource Management Errors CVE-2022-2048	CWE-399	Medium	No	No	-	27.07.2022	SB2022072723 SB2022080103 SB2022080260 and 44 more
#VU65639 - Out-of-bounds write CVE-2022-27404	CWE-787	High	No	No	-	21.07.2022	SB2022072115 SB2022072116 SB2022072122 and 48 more
#VU65495 - Improper input validation CVE-2022-34169	CWE-20	High	Available	No	-	20.07.2022	SB2022072046 SB2022072047 SB2022072140 and 137 more
#VU63450 - Access of Uninitialized Pointer CVE-2022-1122	CWE-824	Low	No	No	-	19.05.2022	SB2022051908 SB2022090705 SB2022110864 and 16 more
#VU61799 - Out-of-bounds write CVE-2020-36518	CWE-787	Medium	No	No	-	01.04.2022	SB2022040113 SB2022040114 SB2022040115 and 147 more
#VU49182 - Heap-based Buffer Overflow CVE-2020-27844	CWE-122	High	No	No	21.0.2.6	29.12.2020	SB2020122906 SB2021012622 SB2021030223 and 4 more
#VU28455 - Improper input validation CVE-2020-2592	CWE-20	Medium	No	No	-	01.06.2020	SB2020011499
#VU25067 - Improper input validation CVE-2019-10247	CWE-20	Medium	No	No	-	07.02.2020	SB2020011489 SB2020032710 SB2020042110 and 25 more
#VU22545 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2019-12415	CWE-611	High	No	No	-	06.11.2019	SB2019110635 SB2020012308 SB2020012309 and 42 more
#VU17708 - Use After Free CVE-2019-7317	CWE-416	Low	No	No	21.0.2.6	14.02.2019	SB2019011606 SB2019041812 SB2019042401 and 46 more