Known vulnerabilities in Oracle Business Process Management Suite - page 2

Vendor: Oracle
Software: Oracle Business Process Management Suite
Software CPE: cpe:2.3:a:oracle:oracle_business_process_management_suite:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 42
Public exploits: 8
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle Business Process Management Suite Oracle Business Process Management Suite is affected by 42 known vulnerabilities: 8 high, 27 medium, 7 low Critical High Medium Low

Vulnerabilities (42)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU70530 - Deserialization of Untrusted Data
CVE-2022-45047		 CWE-502 High
Available
No
 - 28.12.2022 SB2022122828
SB2022122920
SB2023011148
and 49 more
#VU68827 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-42890		 CWE-94 Low
No
No
 - 30.10.2022 SB2022103004
SB2022103009
SB2023030742
and 34 more
#VU68635 - Deserialization of Untrusted Data
CVE-2022-42003		 CWE-502 Medium
No
No
 - 25.10.2022 SB2022102509
SB2022102510
SB2022103117
and 208 more
#VU66756 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-36033		 CWE-79 Low
No
No
 - 25.08.2022 SB2022082508
SB2022101893
SB2022111644
and 44 more
#VU59965 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-23437		 CWE-835 Medium
No
No
 - 25.01.2022 SB2022012503
SB2022041946
SB2022042249
and 92 more
#VU59691 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-23305		 CWE-89 Medium
No
No
 - 18.01.2022 SB2022011818
SB2022012640
SB2022012641
and 94 more
#VU58271 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-41184		 CWE-79 Medium
Available
No
 - 20.11.2021 SB2021112002
SB2022030804
SB2022041935
and 74 more
#VU58176 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-37714		 CWE-835 Medium
No
No
 - 16.11.2021 SB2021111606
SB2021111715
SB2022012314
and 24 more
#VU56964 - Improper Access Control
CVE-2021-34429		 CWE-284 Medium
Available
No
 - 30.09.2021 SB2021093014
SB2021093016
SB2022012745
and 25 more
#VU54856 - Resource exhaustion
CVE-2021-36374		 CWE-400 Medium
No
No
 - 14.07.2021 SB2021071409
SB2021072011
SB2021101927
and 43 more
#VU54853 - Resource exhaustion
CVE-2021-36090		 CWE-400 Medium
No
No
 - 14.07.2021 SB2021071408
SB2021080809
SB2021100411
and 70 more
#VU49086 - Comparison using wrong factors
CVE-2020-28052		 CWE-1025 High
Available
No
 - 18.12.2020 SB2020121801
SB2021031707
SB2021042112
and 16 more
#VU48792 - Incorrect Default Permissions
CVE-2020-17521		 CWE-276 Low
No
No
 - 06.12.2020 SB2020120601
SB2021012082
SB2021012083
and 31 more
#VU28238 - Exposed Dangerous Method or Function
CVE-2020-10683		 CWE-749 Medium
No
No
 - 26.05.2020 SB2020050106
SB2020052616
SB2020071632
and 43 more
#VU27924 - Incorrect Default Permissions
CVE-2020-1945		 CWE-276 Low
No
No
 - 15.05.2020 SB2020051501
SB2020052114
SB2020060205
and 48 more
#VU26470 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2020-1951		 CWE-835 Medium
No
No
 - 31.03.2020 SB2020033108
SB2020071605
SB2020102927
and 3 more
#VU24597 - Improper input validation
CVE-2019-2904		 CWE-20 High
No
No
 - 25.01.2020 SB2020011463
SB2020042108
SB2020042109
and 20 more
#VU24494 - Improper input validation
CVE-2019-10088		 CWE-20 High
No
No
 - 22.01.2020 SB2020012309
SB2020042111
SB2020041458
and 1 more
#VU22272 - Missing release of memory after effective lifetime
CVE-2019-17359		 CWE-401 Medium
No
No
 - 24.10.2019 SB2019102418
SB2020011478
SB2020042338
and 14 more
#VU18092 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2019-11358		 CWE-1321 Low
Available
No
 - 28.03.2019 SB2019032804
SB2019041026
SB2019041801
and 155 more


Showing elements 21 - 40 out of 42