Known vulnerabilities in Oracle Business Activity Monitoring

Known vulnerabilities in Oracle Business Activity Monitoring

Vendor: Oracle

Software: Oracle Business Activity Monitoring

Software CPE: cpe:2.3:a:oracle:oracle_bam_business_activity_monitoring:*:*:*:*:*:*:*:*

Website: https://www.oracle.com

Total vulnerabilities: 13

Public exploits: 3

Known exploited (KEV): 1

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (13)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU100095 - Memory corruption CVE-2024-47072	CWE-119	Medium	No	No	-	07.11.2024	SB20241107102 SB20241115126 SB2024112531 and 37 more
#VU98025 - Resource exhaustion CVE-2024-47554	CWE-400	Medium	No	No	-	03.10.2024	SB2024100352 SB2024100421 SB2024101007 and 133 more
#VU97244 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\') CVE-2024-38999	CWE-1321	High	No	No	-	13.09.2024	SB2024091339 SB2024091626 SB20241015165 and 13 more
#VU69809 - Out-of-bounds write CVE-2022-42920	CWE-787	High	No	No	-	01.12.2022	SB2022120151 SB2022120154 SB2022120628 and 56 more
#VU64152 - Deserialization of Untrusted Data CVE-2022-25647	CWE-502	Medium	No	No	-	10.06.2022	SB2021120221 SB2022061003 SB2022061421 and 94 more
#VU60527 - Resource exhaustion CVE-2021-43859	CWE-400	Medium	No	No	-	11.02.2022	SB2022021102 SB2022021103 SB2022042250 and 26 more
#VU59701 - Improper input validation CVE-2021-39154	CWE-20	High	No	No	-	18.01.2022	SB2022011835 SB2023032239 SB2023050815 and 12 more
#VU58976 - Improper Control of Generation of Code ('Code Injection') CVE-2021-45046	CWE-94	High	Available	Exploited	-	15.12.2021	SB2021121504 SB2021121511 SB2021121512 and 178 more
#VU54675 - Deserialization of Untrusted Data CVE-2021-29505	CWE-502	Medium	Available	No	-	12.07.2021	SB2021071217 SB2021071218 SB2021071389 and 19 more
#VU52562 - Deserialization of Untrusted Data CVE-2021-21345	CWE-502	High	No	No	-	26.04.2021	SB2021042607 SB2021042608 SB2021043019 and 28 more
#VU49039 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2020-26217	CWE-78	Medium	Available	No	-	16.11.2020	SB2020111622 SB2020121624 SB20210120118 and 14 more
#VU47481 - Improper input validation CVE-2020-13956	CWE-20	Medium	No	No	-	09.10.2020	SB2020100902 SB2020101604 SB2021042104 and 77 more
#VU22875 - Deserialization of Untrusted Data CVE-2019-10173	CWE-502	High	No	No	-	20.11.2019	SB2019072308 SB2019112016 SB2019121922 and 11 more