Known vulnerabilities in Oracle Business Intelligence Enterprise Edition - page 5

Vendor: Oracle
Software: Oracle Business Intelligence Enterprise Edition
Software CPE: cpe:2.3:a:oracle:oracle_business_intelligence_enterprise_edition:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 191
Public exploits: 27
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle Business Intelligence Enterprise Edition Oracle Business Intelligence Enterprise Edition is affected by 191 known vulnerabilities: 38 high, 114 medium, 39 low Critical High Medium Low

Vulnerabilities (191)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU85557 - Improper input validation
CVE-2024-20913		 CWE-20 Medium
No
No
 - 18.01.2024 SB2024011803
#VU85558 - Improper input validation
CVE-2024-20904		 CWE-20 Medium
No
No
 - 18.01.2024 SB2024011803
#VU83219 - Deserialization of Untrusted Data
CVE-2023-39410		 CWE-502 Medium
No
No
 - 16.11.2023 SB2023111614
SB2023112014
SB2023112410
and 43 more
#VU82454 - Allocation of Resources Without Limits or Throttling
CVE-2023-43642		 CWE-770 Medium
No
No
 - 26.10.2023 SB2023102621
SB2023102628
SB2023103020
and 63 more
#VU82276 - Allocation of Resources Without Limits or Throttling
CVE-2023-5072		 CWE-770 Medium
No
No
 - 20.10.2023 SB2023102017
SB2023102018
SB2023113056
and 97 more
#VU82136 - Improper input validation
CVE-2023-22082		 CWE-20 Medium
No
No
 - 17.10.2023 SB2023101795
#VU82137 - Improper input validation
CVE-2023-22109		 CWE-20 Medium
No
No
 - 17.10.2023 SB2023101795
#VU81322 - Exposure of sensitive information to an unauthorized actor
CVE-2023-43804		 CWE-200 Low
Available
No
 - 02.10.2023 SB2023100251
SB2023100259
SB2023100260
and 112 more
#VU80018 - Server-Side Request Forgery (SSRF)
CVE-2022-44729		 CWE-918 Medium
No
No
 - 25.08.2023 SB2023082528
SB2023100208
SB2023100306
and 25 more
#VU79749 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2022-46751		 CWE-611 High
No
No
 - 21.08.2023 SB2023082105
SB2023090730
SB2023101825
and 18 more
#VU77573 - Resource exhaustion
CVE-2023-34462		 CWE-400 Medium
No
No
 - 20.06.2023 SB2023062026
SB2023072521
SB2023072539
and 99 more
#VU75664 - Exposure of sensitive information to an unauthorized actor
CVE-2023-30861		 CWE-200 Medium
No
No
 - 02.05.2023 SB2023050221
SB2023052227
SB2023052228
and 44 more
#VU72036 - Error Handling
CVE-2023-23931		 CWE-388 Low
No
No
 - 08.02.2023 SB2023020813
SB2023030952
SB2023031419
and 69 more
#VU71993 - Information Exposure Through Timing Discrepancy
CVE-2022-4304		 CWE-208 Medium
No
No
 - 07.02.2023 SB2023020742
SB2023020748
SB2023020767
and 222 more
#VU71253 - Improper input validation
CVE-2022-3510		 CWE-20 Medium
No
No
 - 17.01.2023 SB2023011753
SB2023011787
SB2023013027
and 37 more
#VU68827 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-42890		 CWE-94 Low
No
No
 - 30.10.2022 SB2022103004
SB2022103009
SB2023030742
and 34 more
#VU67591 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2021-28861		 CWE-601 Low
No
No
 - 22.09.2022 SB2022092243
SB2022092244
SB2022093032
and 76 more
#VU65834 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-31160		 CWE-79 Low
No
No
 - 27.07.2022 SB2022072727
SB2022100608
SB2022121119
and 44 more
#VU64152 - Deserialization of Untrusted Data
CVE-2022-25647		 CWE-502 Medium
No
No
 - 10.06.2022 SB2021120221
SB2022061003
SB2022061421
and 94 more
#VU20844 - Protection Mechanism Failure
CVE-2019-10086		 CWE-693 Low
No
No
 - 04.09.2019 SB2019090405
SB2019090406
SB2019121902
and 112 more


Showing elements 81 - 100 out of 191