Known vulnerabilities in Oracle Communications Session Report Manager - page 3

Vendor: Oracle

Software CPE: cpe:2.3:a:oracle:oracle_communications_session_report_manager:*:*:*:*:*:*:*:*

Website: https://www.oracle.com

Total vulnerabilities: 53

Public exploits: 20

Known exploited (KEV): 3

Highest CVSSv4 Score: 9.3

Vulnerabilities (53)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU35713 - Memory corruption CVE-2020-11984	CWE-119	High	Available	No	-	08.08.2020	-
#VU34161 - Operation on a Resource after Expiration or Release CVE-2019-17638	CWE-672	High	No	No	-	09.07.2020	-
#VU27953 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-1941	CWE-79	Low	No	No	-	17.05.2020	-
#VU27701 - Insufficiently Protected Credentials CVE-2019-12423	CWE-522	Medium	No	No	-	12.05.2020	-
#VU27264 - Improper input validation CVE-2020-5398	CWE-20	Medium	Available	No	-	23.04.2020	-
#VU27052 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-11022	CWE-79	Low	Available	No	-	21.04.2020	-
#VU26528 - Use of Uninitialized Variable CVE-2020-1934	CWE-457	Medium	No	No	-	02.04.2020	-
#VU25067 - Improper input validation CVE-2019-10247	CWE-20	Medium	No	No	-	07.02.2020	-
#VU24468 - Improper input validation CVE-2019-0227	CWE-20	Medium	Available	No	-	21.01.2020	-
#VU20992 - Resource Management Errors CVE-2019-10072	CWE-399	Medium	No	No	-	10.09.2019	-
#VU18110 - Permissions, Privileges, and Access Controls CVE-2019-0211	CWE-264	Low	Available	Exploited	-	02.04.2019	-
#VU15467 - Improper input validation CVE-2018-15756	CWE-20	Low	No	No	-	22.10.2018	-
#VU13523 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle') CVE-2018-8039	CWE-300	Low	No	No	-	28.06.2018	-

Showing elements 41 - 60 out of 53