Known vulnerabilities in Oracle Communications Session Report Manager - page 2

Vendor: Oracle
Software: Oracle Communications Session Report Manager
Software CPE: cpe:2.3:a:oracle:oracle_communications_session_report_manager:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 53
Public exploits: 20
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle Communications Session Report Manager Oracle Communications Session Report Manager is affected by 53 known vulnerabilities: 3 critical, 6 high, 35 medium, 9 low Critical High Medium Low

Vulnerabilities (53)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU80791 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-40167		 CWE-444 Medium
No
No
 - 14.09.2023 -
#VU78328 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
CVE-2023-33201		 CWE-90 Medium
No
No
 - 17.07.2023 -
#VU73107 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2023-25690		 CWE-113 Medium
Available
No
 - 07.03.2023 -
#VU72427 - Allocation of Resources Without Limits or Throttling
CVE-2023-24998		 CWE-770 Medium
Available
No
 - 20.02.2023 -
#VU70666 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-45143		 CWE-94 Medium
No
No
 - 03.01.2023 -
#VU70530 - Deserialization of Untrusted Data
CVE-2022-45047		 CWE-502 High
Available
No
 - 28.12.2022 -
#VU70444 - Server-Side Request Forgery (SSRF)
CVE-2022-46364		 CWE-918 Medium
No
No
 - 20.12.2022 -
#VU68866 - Improper Authorization
CVE-2022-31692		 CWE-285 High
No
No
 - 01.11.2022 -
#VU68635 - Deserialization of Untrusted Data
CVE-2022-42003		 CWE-502 Medium
No
No
 - 25.10.2022 -
#VU64627 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-34305		 CWE-79 Medium
Available
No
 - 23.06.2022 -
#VU59965 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-23437		 CWE-835 Medium
No
No
 9.0 25.01.2022 SB2022012503
SB2022041946
SB2022042249
and 92 more
#VU59098 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-44832		 CWE-94 Medium
No
No
 9.0 28.12.2021 SB2021122816
SB2021123002
SB2022010601
and 197 more
#VU59056 - Memory corruption
CVE-2021-44790		 CWE-119 Critical
Available
No
 9.0 20.12.2021 SB2021122005
SB2021122021
SB2022010513
and 50 more
#VU57389 - Resource exhaustion
CVE-2021-42340		 CWE-400 Medium
No
No
 9.0 15.10.2021 SB2021101507
SB2021110507
SB2021111711
and 28 more
#VU49739 - Improper input validation
CVE-2020-5421		 CWE-20 Medium
Available
No
 - 20.01.2021 -
#VU29128 - Deserialization of Untrusted Data
CVE-2020-14195		 CWE-502 High
Available
No
 - 18.06.2020 -
#VU28463 - Use of Insufficiently Random Values
CVE-2020-5408		 CWE-330 Medium
No
No
 - 01.06.2020 -
#VU28158 - Deserialization of Untrusted Data
CVE-2020-9484		 CWE-502 High
Available
No
 - 21.05.2020 -
#VU26530 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2020-1954		 CWE-300 Low
No
No
 - 02.04.2020 -
#VU22185 - Resource Management Errors
CVE-2019-12402		 CWE-399 Medium
No
No
 - 23.10.2019 -


Showing elements 21 - 40 out of 53