Known vulnerabilities in Oracle Communications Element Manager - page 2

Vendor: Oracle
Software: Oracle Communications Element Manager
Software CPE: cpe:2.3:a:oracle:oracle_communications_element_manager:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 58
Public exploits: 22
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle Communications Element Manager Oracle Communications Element Manager is affected by 58 known vulnerabilities: 3 critical, 9 high, 38 medium, 8 low Critical High Medium Low

Vulnerabilities (58)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU80791 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-40167		 CWE-444 Medium
No
No
 - 14.09.2023 -
#VU78328 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
CVE-2023-33201		 CWE-90 Medium
No
No
 - 17.07.2023 -
#VU75409 - Improper input validation
CVE-2023-20863		 CWE-20 Medium
No
No
 - 21.04.2023 -
#VU73107 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2023-25690		 CWE-113 Medium
Available
No
 - 07.03.2023 -
#VU72427 - Allocation of Resources Without Limits or Throttling
CVE-2023-24998		 CWE-770 Medium
Available
No
 - 20.02.2023 -
#VU70666 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-45143		 CWE-94 Medium
No
No
 - 03.01.2023 -
#VU70530 - Deserialization of Untrusted Data
CVE-2022-45047		 CWE-502 High
Available
No
 - 28.12.2022 -
#VU70444 - Server-Side Request Forgery (SSRF)
CVE-2022-46364		 CWE-918 Medium
No
No
 - 20.12.2022 -
#VU70441 - Insufficient Verification of Data Authenticity
CVE-2021-37533		 CWE-345 Low
No
No
 - 20.12.2022 -
#VU68866 - Improper Authorization
CVE-2022-31692		 CWE-285 High
No
No
 - 01.11.2022 -
#VU68635 - Deserialization of Untrusted Data
CVE-2022-42003		 CWE-502 Medium
No
No
 - 25.10.2022 -
#VU65830 - Resource Management Errors
CVE-2022-2048		 CWE-399 Medium
No
No
 - 27.07.2022 -
#VU64089 - Improper Authentication
CVE-2022-31813		 CWE-287 Medium
No
No
 - 08.06.2022 -
#VU63345 - Improper Authorization
CVE-2022-22978		 CWE-285 High
Available
No
 - 17.05.2022 -
#VU63225 - Data Handling
CVE-2022-29885		 CWE-19 Low
Available
No
 - 16.05.2022 -
#VU63085 - Improper input validation
CVE-2022-22971		 CWE-20 Medium
Available
No
 - 12.05.2022 -
#VU59965 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-23437		 CWE-835 Medium
No
No
 9.0 25.01.2022 SB2022012503
SB2022041946
SB2022042249
and 92 more
#VU59098 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-44832		 CWE-94 Medium
No
No
 9.0 28.12.2021 SB2021122816
SB2021123002
SB2022010601
and 197 more
#VU59056 - Memory corruption
CVE-2021-44790		 CWE-119 Critical
Available
No
 9.0 20.12.2021 SB2021122005
SB2021122021
SB2022010513
and 50 more
#VU57389 - Resource exhaustion
CVE-2021-42340		 CWE-400 Medium
No
No
 9.0 15.10.2021 SB2021101507
SB2021110507
SB2021111711
and 28 more


Showing elements 21 - 40 out of 58