Known vulnerabilities in Oracle BI Publisher - page 2

Vendor: Oracle
Software: Oracle BI Publisher
Software CPE: cpe:2.3:a:oracle:oracle_bi_publisher:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 66
Public exploits: 4
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle BI Publisher Oracle BI Publisher is affected by 66 known vulnerabilities: 18 high, 40 medium, 8 low Critical High Medium Low

Vulnerabilities (66)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU85556 - Improper input validation
CVE-2024-20987		 CWE-20 Medium
No
No
 - 18.01.2024 SB2024011801
#VU82135 - Improper input validation
CVE-2023-22105		 CWE-20 Medium
No
No
 - 17.10.2023 SB2023101794
#VU78400 - Improper input validation
CVE-2023-30535		 CWE-20 High
No
No
 - 19.07.2023 SB2023071978
SB2023101795
SB2023101856
and 1 more
#VU75562 - Improper input validation
CVE-2023-20861		 CWE-20 Medium
No
No
 - 27.04.2023 SB2023042742
SB2023042746
SB2023042832
and 61 more
#VU75248 - Improper input validation
CVE-2023-21970		 CWE-20 Medium
No
No
 - 18.04.2023 SB20230418156
#VU75251 - Improper input validation
CVE-2023-21941		 CWE-20 Low
No
No
 - 18.04.2023 SB20230418156
#VU71586 - Out-of-bounds write
CVE-2022-40152		 CWE-787 Medium
No
No
 - 26.01.2023 SB2023012669
SB2023012670
SB2023013124
and 52 more
#VU71312 - Improper input validation
CVE-2023-21832		 CWE-20 High
No
No
 - 18.01.2023 SB2023011840
#VU71311 - Improper input validation
CVE-2023-21846		 CWE-20 High
No
No
 - 18.01.2023 SB2023011840
#VU70444 - Server-Side Request Forgery (SSRF)
CVE-2022-46364		 CWE-918 Medium
No
No
 - 20.12.2022 SB2022122009
SB2023011329
SB2023011707
and 67 more
#VU68528 - Improper input validation
CVE-2022-21590		 CWE-20 Medium
No
No
 - 20.10.2022 SB2022102030
#VU65834 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-31160		 CWE-79 Low
No
No
 - 27.07.2022 SB2022072727
SB2022100608
SB2022121119
and 44 more
#VU65493 - Improper input validation
CVE-2022-21523		 CWE-20 Low
No
No
 - 20.07.2022 SB2022072033
#VU64152 - Deserialization of Untrusted Data
CVE-2022-25647		 CWE-502 Medium
No
No
 - 10.06.2022 SB2021120221
SB2022061003
SB2022061421
and 94 more
#VU63480 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-24891		 CWE-79 Low
No
No
 - 20.05.2022 SB2022052008
SB2022052009
SB2022052010
and 5 more
#VU59702 - Improper input validation
CVE-2022-21346		 CWE-20 Medium
No
No
 - 18.01.2022 SB2022011831
#VU58198 - Exposure of sensitive information to an unauthorized actor
CVE-2021-40690		 CWE-200 Medium
No
No
 - 16.11.2021 SB2021111622
SB2021111712
SB2022012032
and 37 more
#VU55345 - Improper input validation
CVE-2021-2391		 CWE-20 High
No
No
 - 27.07.2021 SB2021072745
#VU27519 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11023		 CWE-79 Low
Available
Exploited
 - 05.05.2020 SB2020042126
SB2020052033
SB2020052103
and 180 more
#VU24468 - Improper input validation
CVE-2019-0227		 CWE-20 Medium
Available
No
 - 21.01.2020 SB2020012205
SB2020012308
SB2020012309
and 40 more


Showing elements 21 - 40 out of 66