Known vulnerabilities in Oracle Communications Order and Service Management - page 2

Vendor: Oracle

Software CPE: cpe:2.3:a:oracle:oracle_communications_order_and_service_management:*:*:*:*:*:*:*:*

Website: https://www.oracle.com

Total vulnerabilities: 30

Public exploits: 4

Known exploited (KEV): 1

Highest CVSSv4 Score: 9.3

Vulnerabilities (30)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU71249 - Improper input validation CVE-2022-39271	CWE-20	Medium	No	No	-	17.01.2023	SB2023011770 SB20230418137 SB2022101035
#VU68307 - Improper Control of Generation of Code ('Code Injection') CVE-2022-42889	CWE-94	High	Available	Exploited	-	14.10.2022	SB2022101405 SB2022102709 SB2022110306 and 91 more
#VU65457 - Cryptographic Issues CVE-2022-23632	CWE-310	Medium	No	No	-	19.07.2022	SB2022071937 SB20221018109 SB2022071981
#VU59965 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2022-23437	CWE-835	Medium	No	No	-	25.01.2022	SB2022012503 SB2022041946 SB2022042249 and 92 more
#VU59098 - Improper Control of Generation of Code ('Code Injection') CVE-2021-44832	CWE-94	Medium	No	No	-	28.12.2021	SB2021122816 SB2021123002 SB2022010601 and 197 more
#VU54856 - Resource exhaustion CVE-2021-36374	CWE-400	Medium	No	No	-	14.07.2021	SB2021071409 SB2021072011 SB2021101927 and 43 more
#VU52252 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2021-29425	CWE-22	Low	No	No	-	15.04.2021	SB2021041510 SB2021081922 SB2021093016 and 121 more
#VU27924 - Incorrect Default Permissions CVE-2020-1945	CWE-276	Low	No	No	-	15.05.2020	SB2020051501 SB2020052114 SB2020060205 and 48 more
#VU24468 - Improper input validation CVE-2019-0227	CWE-20	Medium	Available	No	-	21.01.2020	SB2020012205 SB2020012308 SB2020012309 and 40 more
#VU11991 - Permissions, Privileges, and Access Controls CVE-2018-2756	CWE-264	Low	No	No	-	19.04.2018	SB2018041909

Showing elements 21 - 40 out of 30