Known vulnerabilities in Oracle Business Intelligence Enterprise Edition - page 7

Vendor: Oracle
Software: Oracle Business Intelligence Enterprise Edition
Software CPE: cpe:2.3:a:oracle:oracle_business_intelligence_enterprise_edition:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 191
Public exploits: 27
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle Business Intelligence Enterprise Edition Oracle Business Intelligence Enterprise Edition is affected by 191 known vulnerabilities: 38 high, 114 medium, 39 low Critical High Medium Low

Vulnerabilities (191)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU77540 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-29361		 CWE-444 High
Available
No
 - 20.06.2023 SB2023062257
SB2023071977
SB2023111619
and 1 more
#VU75247 - Improper input validation
CVE-2023-21910		 CWE-20 Medium
No
No
 - 18.04.2023 SB20230418157
#VU75249 - Improper input validation
CVE-2023-21952		 CWE-20 Medium
No
No
 - 18.04.2023 SB20230418157
#VU75250 - Improper input validation
CVE-2023-21965		 CWE-20 Medium
No
No
 - 18.04.2023 SB20230418157
#VU71322 - Improper input validation
CVE-2023-21892		 CWE-20 Medium
No
No
 - 18.01.2023 SB2023011848
#VU71323 - Improper input validation
CVE-2023-21861		 CWE-20 Medium
No
No
 - 18.01.2023 SB2023011848
#VU71321 - Improper input validation
CVE-2023-21891		 CWE-20 Medium
No
No
 - 18.01.2023 SB2023011848
#VU70385 - Deserialization of Untrusted Data
CVE-2022-1471		 CWE-502 High
Available
No
 - 15.12.2022 SB2022121539
SB2022121540
SB2022121928
and 124 more
#VU69295 - Out-of-bounds read
CVE-2021-4048		 CWE-125 Medium
No
No
 - 14.11.2022 SB2021120825
SB2022111436
SB2022032140
and 11 more
#VU66153 - Heap-based Buffer Overflow
CVE-2022-37434		 CWE-122 High
Available
No
 - 07.08.2022 SB2022080705
SB2022081833
SB2022081851
and 154 more
#VU65553 - Out-of-bounds read
CVE-2022-1587		 CWE-125 Medium
No
No
 - 20.07.2022 SB2022060210
SB20220720108
SB2022072733
and 24 more
#VU65495 - Improper input validation
CVE-2022-34169		 CWE-20 High
Available
No
 - 20.07.2022 SB2022072046
SB2022072047
SB2022072140
and 137 more
#VU65282 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-32215		 CWE-444 Medium
No
No
 - 13.07.2022 SB2022071338
SB2022071610
SB2022071611
and 54 more
#VU60367 - Security Features
CVE-2022-24329		 CWE-254 Medium
No
No
 - 08.02.2022 SB2022020805
SB2022042218
SB2022071957
and 13 more
#VU58198 - Exposure of sensitive information to an unauthorized actor
CVE-2021-40690		 CWE-200 Medium
No
No
 - 16.11.2021 SB2021111622
SB2021111712
SB2022012032
and 37 more
#VU55372 - Improper input validation
CVE-2021-27568		 CWE-20 High
No
No
 - 27.07.2021 SB2021072765
SB2021081922
SB2022011837
and 11 more
#VU49086 - Comparison using wrong factors
CVE-2020-28052		 CWE-1025 High
Available
No
 - 18.12.2020 SB2020121801
SB2021031707
SB2021042112
and 16 more
#VU21750 - Improper input validation
CVE-2019-17531		 CWE-20 Medium
No
No
 - 13.10.2019 SB2019100711
SB2019120206
SB2019121120
and 24 more
#VU19595 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2019-13990		 CWE-611 Medium
No
No
 - 01.08.2019 SB2019080104
SB2020042114
SB2020042350
and 26 more
#VU18150 - Improper input validation
CVE-2018-1000656		 CWE-20 Medium
No
No
 - 08.04.2019 SB2019040802
SB2019040213
SB2020060113
and 4 more


Showing elements 121 - 140 out of 191