Known vulnerabilities in Oracle Business Intelligence Enterprise Edition - page 6

Vendor: Oracle
Software: Oracle Business Intelligence Enterprise Edition
Software CPE: cpe:2.3:a:oracle:oracle_business_intelligence_enterprise_edition:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 191
Public exploits: 27
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle Business Intelligence Enterprise Edition Oracle Business Intelligence Enterprise Edition is affected by 191 known vulnerabilities: 38 high, 114 medium, 39 low Critical High Medium Low

Vulnerabilities (191)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU78721 - Improper Privilege Management
CVE-2023-22946		 CWE-269 High
No
No
 - 27.07.2023 SB2023072730
SB2023090130
SB2023091827
and 5 more
#VU78400 - Improper input validation
CVE-2023-30535		 CWE-20 High
No
No
 - 19.07.2023 SB2023071978
SB2023101795
SB2023101856
and 1 more
#VU78401 - Improper input validation
CVE-2023-22011		 CWE-20 Medium
No
No
 - 19.07.2023 SB2023071977
#VU78402 - Improper input validation
CVE-2023-22020		 CWE-20 Medium
No
No
 - 19.07.2023 SB2023071977
#VU78403 - Improper input validation
CVE-2023-22061		 CWE-20 Medium
No
No
 - 19.07.2023 SB2023071977
#VU78404 - Improper input validation
CVE-2023-22013		 CWE-20 Low
No
No
 - 19.07.2023 SB2023071977
#VU78405 - Improper input validation
CVE-2023-22012		 CWE-20 Low
No
No
 - 19.07.2023 SB2023071977
#VU78406 - Improper input validation
CVE-2023-22021		 CWE-20 Low
No
No
 - 19.07.2023 SB2023071977
#VU78407 - Improper input validation
CVE-2023-22027		 CWE-20 Low
No
No
 - 19.07.2023 SB2023071977
#VU78394 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-28439		 CWE-79 Low
No
No
 - 19.07.2023 SB2023071950
SB2023071977
SB20230719111
and 13 more
#VU73970 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-48285		 CWE-22 Medium
No
No
 - 23.03.2023 SB2023032314
SB2023032315
SB2023042510
and 22 more
#VU72427 - Allocation of Resources Without Limits or Throttling
CVE-2023-24998		 CWE-770 Medium
Available
No
 - 20.02.2023 SB2023022046
SB2023022047
SB2023030917
and 202 more
#VU70441 - Insufficient Verification of Data Authenticity
CVE-2021-37533		 CWE-345 Low
No
No
 - 20.12.2022 SB2022122007
SB2022123001
SB2023011876
and 82 more
#VU68906 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-31777		 CWE-79 Medium
No
No
 - 01.11.2022 SB2022110151
SB2023020922
SB2023050803
and 3 more
#VU68635 - Deserialization of Untrusted Data
CVE-2022-42003		 CWE-502 Medium
No
No
 - 25.10.2022 SB2022102509
SB2022102510
SB2022103117
and 208 more
#VU62082 - Security Features
CVE-2022-26612		 CWE-254 Medium
No
No
 - 12.04.2022 SB2022041216
SB2022103132
SB2022112334
and 8 more
#VU58270 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-41183		 CWE-79 Medium
No
No
 - 20.11.2021 SB2021112002
SB2022011943
SB2022011944
and 33 more
#VU54291 - Server-Side Request Forgery (SSRF)
CVE-2020-11988		 CWE-918 Medium
No
No
 - 21.06.2021 SB2021062143
SB2021062144
SB2021062145
and 15 more
#VU24468 - Improper input validation
CVE-2019-0227		 CWE-20 Medium
Available
No
 - 21.01.2020 SB2020012205
SB2020012308
SB2020012309
and 40 more
#VU11627 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2018-1282		 CWE-89 Low
No
No
 - 09.04.2018 SB2018041006
SB2023071977


Showing elements 101 - 120 out of 191