Known vulnerabilities in Oracle Blockchain Platform

Vendor: Oracle
Software: Oracle Blockchain Platform
Software CPE: cpe:2.3:a:oracle:oracle_blockchain_platform:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 32
Public exploits: 8
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle Blockchain Platform Oracle Blockchain Platform is affected by 32 known vulnerabilities: 8 high, 15 medium, 9 low Critical High Medium Low

Vulnerabilities (32)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU126388 - Uncaught Exception
CVE-2025-59465		 CWE-248 Medium
No
No
 - 17.04.2026 -
#VU119235 - Resource exhaustion
CVE-2025-61729		 CWE-400 Medium
No
No
 - 06.12.2025 -
#VU111900 - Out-of-bounds read
CVE-2025-5318		 CWE-125 Medium
No
No
 - 24.06.2025 -
#VU103225 - Missing release of memory after effective lifetime
CVE-2025-23085		 CWE-401 Medium
No
No
 - 22.01.2025 -
#VU93880 - Server-Side Request Forgery (SSRF)
CVE-2024-22020		 CWE-918 Medium
No
No
 - 09.07.2024 -
#VU88184 - Resource exhaustion
CVE-2023-45288		 CWE-400 Medium
Available
No
 - 05.04.2024 -
#VU87551 - Exposure of sensitive information to an unauthorized actor
CVE-2024-28849		 CWE-200 Low
No
No
 - 15.03.2024 -
#VU86625 - Resource exhaustion
CVE-2024-26308		 CWE-400 Medium
No
No
 - 20.02.2024 -
#VU84537 - Inadequate Encryption Strength
CVE-2023-48795		 CWE-326 Low
Available
No
 - 19.12.2023 -
#VU81728 - Resource exhaustion
CVE-2023-44487		 CWE-400 High
Available
Exploited
 - 10.10.2023 -
#VU77107 - Incorrect Default Permissions
CVE-2023-2976		 CWE-276 Low
No
No
 - 08.06.2023 -
#VU65451 - Improper input validation
CVE-2020-35169		 CWE-20 High
No
No
 21.1.3 19.07.2022 SB2022072035
SB2022072036
SB2022072037
and 5 more
#VU65282 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-32215		 CWE-444 Medium
No
No
 21.1.3 13.07.2022 SB2022071338
SB2022071610
SB2022071611
and 54 more
#VU64269 - Integer overflow
CVE-2022-28327		 CWE-190 Low
No
No
 21.1.3 14.06.2022 SB2022041004
SB2022061422
SB2022061506
and 90 more
#VU64152 - Deserialization of Untrusted Data
CVE-2022-25647		 CWE-502 Medium
No
No
 21.1.3 10.06.2022 SB2021120221
SB2022061003
SB2022061421
and 94 more
#VU61799 - Out-of-bounds write
CVE-2020-36518		 CWE-787 Medium
No
No
 21.1.3 01.04.2022 SB2022040113
SB2022040114
SB2022040115
and 147 more
#VU54853 - Resource exhaustion
CVE-2021-36090		 CWE-400 Medium
No
No
 21.1.3 14.07.2021 SB2021071408
SB2021080809
SB2021100411
and 70 more
#VU53543 - Off-by-one Error
CVE-2021-23017		 CWE-193 High
Available
No
 21.1.2, 21.1.3 25.05.2021 SB2021052543
SB2021052713
SB2021052901
and 48 more
#VU52502 - Improper input validation
CVE-2020-27218		 CWE-20 Medium
No
No
 21.1.2 23.04.2021 SB2021042305
SB2021042635
SB2021063002
and 15 more
#VU25726 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-5245		 CWE-94 High
Available
No
 21.1.2 02.03.2020 SB2020030207
SB2022041931
SB2025112459


Showing elements 1 - 20 out of 32