Known vulnerabilities in Oracle Business Intelligence Enterprise Edition - page 8

Vendor: Oracle
Software: Oracle Business Intelligence Enterprise Edition
Software CPE: cpe:2.3:a:oracle:oracle_business_intelligence_enterprise_edition:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 191
Public exploits: 27
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle Business Intelligence Enterprise Edition Oracle Business Intelligence Enterprise Edition is affected by 191 known vulnerabilities: 38 high, 114 medium, 39 low Critical High Medium Low

Vulnerabilities (191)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU68534 - Out-of-bounds read
CVE-2022-21609		 CWE-125 Medium
No
No
 - 20.10.2022 SB2022102042
#VU68307 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-42889		 CWE-94 High
Available
Exploited
 - 14.10.2022 SB2022101405
SB2022102709
SB2022110306
and 91 more
#VU64957 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-33980		 CWE-94 High
Available
No
 - 06.07.2022 SB2022070645
SB2022072604
SB2022081517
and 31 more
#VU62526 - Out-of-bounds read
CVE-2022-21492		 CWE-125 Medium
No
No
 - 22.04.2022 SB2022042298
#VU62527 - Out-of-bounds read
CVE-2022-21419		 CWE-125 Medium
No
No
 - 22.04.2022 SB2022042298
#VU62528 - Out-of-bounds read
CVE-2022-21448		 CWE-125 Medium
No
No
 - 22.04.2022 SB2022042298
#VU62524 - Improper input validation
CVE-2022-21421		 CWE-20 Medium
No
No
 - 22.04.2022 SB2022042298
#VU61799 - Out-of-bounds write
CVE-2020-36518		 CWE-787 Medium
No
No
 - 01.04.2022 SB2022040113
SB2022040114
SB2022040115
and 147 more
#VU61427 - Incorrect Regular Expression
CVE-2022-24729		 CWE-185 Low
No
No
 - 17.03.2022 SB2022031702
SB2022031703
SB2022031704
and 24 more
#VU59691 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-23305		 CWE-89 Medium
No
No
 - 18.01.2022 SB2022011818
SB2022012640
SB2022012641
and 94 more
#VU59051 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-45105		 CWE-835 Medium
Available
No
 - 18.12.2021 SB2021121802
SB2021121903
SB2021122011
and 169 more
#VU56019 - Resource exhaustion
CVE-2021-30468		 CWE-400 Medium
No
No
 - 20.08.2021 SB2021082016
SB2021101933
SB2022042254
and 8 more
#VU55339 - Improper input validation
CVE-2021-2456		 CWE-20 High
Available
No
 - 27.07.2021 SB2021072749
#VU54853 - Resource exhaustion
CVE-2021-36090		 CWE-400 Medium
No
No
 - 14.07.2021 SB2021071408
SB2021080809
SB2021100411
and 70 more
#VU52542 - Improper input validation
CVE-2021-2191		 CWE-20 Medium
No
No
 - 25.04.2021 SB2021042543
#VU52546 - Improper input validation
CVE-2021-2152		 CWE-20 Low
No
No
 - 25.04.2021 SB2021042543
#VU50740 - NULL Pointer Dereference
CVE-2021-23841		 CWE-476 Medium
No
No
 - 17.02.2021 SB2021021702
SB2021021817
SB2021022420
and 66 more
#VU48815 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-17530		 CWE-94 High
Available
Exploited
 - 08.12.2020 SB2020120801
SB2020122202
SB2021042111
and 9 more
#VU29068 - Server-Side Request Forgery (SSRF)
CVE-2019-17566		 CWE-918 Medium
No
No
 - 16.06.2020 SB2020061613
SB2020062304
SB2020072310
and 23 more
#VU27519 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11023		 CWE-79 Low
Available
Exploited
 - 05.05.2020 SB2020042126
SB2020052033
SB2020052103
and 180 more


Showing elements 141 - 160 out of 191