Known vulnerabilities in Oracle Communications Billing and Revenue Management - page 3

Vendor: Oracle
Software: Oracle Communications Billing and Revenue Management
Software CPE: cpe:2.3:a:oracle:oracle_communications_billing_and_revenue_management:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 61
Public exploits: 6
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle Communications Billing and Revenue Management Oracle Communications Billing and Revenue Management is affected by 61 known vulnerabilities: 21 high, 28 medium, 12 low Critical High Medium Low

Vulnerabilities (61)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU59933 - Improper input validation
CVE-2022-21267		 CWE-20 Low
No
No
 - 23.01.2022 SB2022012326
#VU59934 - Improper input validation
CVE-2022-21268		 CWE-20 Low
No
No
 - 23.01.2022 SB2022012326
#VU59926 - Improper input validation
CVE-2022-21275		 CWE-20 High
No
No
 - 23.01.2022 SB2022012326
#VU59927 - Improper input validation
CVE-2022-21389		 CWE-20 High
No
No
 - 23.01.2022 SB2022012326
#VU59928 - Improper input validation
CVE-2022-21390		 CWE-20 High
No
No
 - 23.01.2022 SB2022012326
#VU59929 - Improper input validation
CVE-2022-21276		 CWE-20 High
No
No
 - 23.01.2022 SB2022012326
#VU59930 - Improper input validation
CVE-2022-21391		 CWE-20 High
No
No
 - 23.01.2022 SB2022012326
#VU50150 - Heap-based Buffer Overflow
CVE-2021-3345		 CWE-122 High
Available
No
 - 29.01.2021 SB2021013004
SB2021013005
SB2021072122
#VU48895 - Improper Check for Certificate Revocation
CVE-2020-8286		 CWE-299 Medium
No
No
 - 09.12.2020 SB2020120902
SB2020120915
SB2020120929
and 30 more
#VU48979 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2020-25649		 CWE-611 Medium
No
No
 - 03.12.2020 SB2020121510
SB2021020321
SB2021042112
and 68 more
#VU41989 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-8203		 CWE-94 Medium
No
No
 - 10.08.2020 SB2020071548
SB2020122111
SB2021042308
and 31 more
#VU32872 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-7017		 CWE-79 Low
No
No
 - 28.07.2020 SB2020072815
SB2021072122
SB2021072765
#VU29015 - Integer overflow
CVE-2020-10878		 CWE-190 High
No
No
 - 15.06.2020 SB2020061513
SB2020061514
SB2020062302
and 49 more
#VU27487 - Improper Certificate Validation
CVE-2020-9488		 CWE-295 Low
No
No
 - 04.05.2020 SB2020050406
SB2020071606
SB2020071620
and 67 more
#VU27052 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11022		 CWE-79 Low
Available
No
 - 21.04.2020 SB2020042126
SB2020052033
SB2020052103
and 181 more
#VU21593 - Improper input validation
CVE-2019-16943		 CWE-20 Medium
No
No
 - 07.10.2019 SB2019100711
SB2019100716
SB2019120206
and 34 more
#VU20844 - Protection Mechanism Failure
CVE-2019-10086		 CWE-693 Low
No
No
 - 04.09.2019 SB2019090405
SB2019090406
SB2019121902
and 112 more
#VU19941 - Exposure of sensitive information to an unauthorized actor
CVE-2019-12086		 CWE-200 Medium
No
No
 - 06.08.2019 SB2019052407
SB2019092703
SB2019100116
and 30 more
#VU18092 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2019-11358		 CWE-1321 Low
Available
No
 - 28.03.2019 SB2019032804
SB2019041026
SB2019041801
and 155 more
#VU16183 - Heap-based Buffer Overflow
CVE-2018-18311		 CWE-190 High
No
No
 - 30.11.2018 SB2018113006
SB2018122304
SB2019010202
and 17 more


Showing elements 41 - 60 out of 61