Known vulnerabilities in Oracle Business Activity Monitoring
Vendor:
Oracle
Software:
Oracle Business Activity Monitoring
Software CPE:
cpe:2.3:a:oracle:oracle_bam_business_activity_monitoring:*:*:*:*:*:*:*:*
Website:
https://www.oracle.com
Total vulnerabilities:
13
Public exploits:
3
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
Vulnerabilities (13)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU100095 - Memory corruption CVE-2024-47072 |
CWE-119 | Medium | - | 07.11.2024 | - | ||
| #VU98025 - Resource exhaustion CVE-2024-47554 |
CWE-400 | Medium | - | 03.10.2024 | - | ||
| #VU97244 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\') CVE-2024-38999 |
CWE-1321 | High | - | 13.09.2024 | - | ||
| #VU69809 - Out-of-bounds write CVE-2022-42920 |
CWE-787 | High | - | 01.12.2022 | - | ||
| #VU64152 - Deserialization of Untrusted Data CVE-2022-25647 |
CWE-502 | Medium | - | 10.06.2022 | - | ||
| #VU60527 - Resource exhaustion CVE-2021-43859 |
CWE-400 | Medium | - | 11.02.2022 | - | ||
| #VU59701 - Improper input validation CVE-2021-39154 |
CWE-20 | High | - | 18.01.2022 | - | ||
| #VU58976 - Improper Control of Generation of Code ('Code Injection') CVE-2021-45046 |
CWE-94 | High | - | 15.12.2021 | - | ||
| #VU54675 - Deserialization of Untrusted Data CVE-2021-29505 |
CWE-502 | Medium | - | 12.07.2021 | - | ||
| #VU52562 - Deserialization of Untrusted Data CVE-2021-21345 |
CWE-502 | High | - | 26.04.2021 | - | ||
| #VU49039 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2020-26217 |
CWE-78 | Medium | - | 16.11.2020 | - | ||
| #VU47481 - Improper input validation CVE-2020-13956 |
CWE-20 | Medium | - | 09.10.2020 | - | ||
| #VU22875 - Deserialization of Untrusted Data CVE-2019-10173 |
CWE-502 | High | - | 20.11.2019 | - |