Known vulnerabilities in Oracle Data Integrator
Vendor:
Oracle
Software:
Oracle Data Integrator
Software CPE:
cpe:2.3:a:oracle:oracle_data_integrator:*:*:*:*:*:*:*:*
Website:
https://www.oracle.com
Total vulnerabilities:
45
Public exploits:
7
Known exploited (KEV):
2
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
Vulnerabilities (45)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU120231 - Improper Validation of Certificate with Host Mismatch CVE-2025-68161 |
CWE-297 | Medium | - | 22.12.2025 | - | ||
| #VU116142 - Uncontrolled Recursion CVE-2025-53864 |
CWE-674 | Medium | - | 26.09.2025 | - | ||
| #VU114059 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2025-4949 |
CWE-611 | High | - | 14.08.2025 | - | ||
| #VU114026 - Resource exhaustion CVE-2025-55163 |
CWE-400 | Medium | - | 13.08.2025 | - | ||
| #VU111165 - Improper Access Control CVE-2025-48734 |
CWE-284 | Medium | - | 16.06.2025 | - | ||
| #VU106082 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2025-27553 |
CWE-22 | Medium | - | 27.03.2025 | - | ||
| #VU98517 - Resource exhaustion CVE-2024-8184 |
CWE-400 | Medium | - | 14.10.2024 | - | ||
| #VU86624 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2024-25710 |
CWE-835 | Medium | - | 20.02.2024 | - | ||
| #VU84537 - Inadequate Encryption Strength CVE-2023-48795 |
CWE-326 | Low | - | 19.12.2023 | - | ||
| #VU82122 - Improper input validation CVE-2023-35116 |
CWE-20 | Low | - | 17.10.2023 | - | ||
| #VU81948 - Improper Link Resolution Before File Access ('Link Following') CVE-2023-4759 |
CWE-59 | Medium | - | 12.10.2023 | - | ||
| #VU81728 - Resource exhaustion CVE-2023-44487 |
CWE-400 | High | - | 10.10.2023 | - | ||
| #VU81427 - UNIX Symbolic Link (Symlink) Following CVE-2023-35887 |
CWE-61 | Low | - | 03.10.2023 | - | ||
| #VU77107 - Incorrect Default Permissions CVE-2023-2976 |
CWE-276 | Low | - | 08.06.2023 | - | ||
| #VU75217 - Improper input validation CVE-2023-26049 |
CWE-20 | Low | - | 18.04.2023 | - | ||
| #VU75044 - Uncontrolled Recursion CVE-2023-1370 |
CWE-674 | Medium | - | 12.04.2023 | - | ||
| #VU72427 - Allocation of Resources Without Limits or Throttling CVE-2023-24998 |
CWE-770 | Medium | - | 20.02.2023 | - | ||
| #VU71109 - Out-of-bounds write CVE-2022-45693 |
CWE-787 | Medium | - | 11.01.2023 | - | ||
| #VU70441 - Insufficient Verification of Data Authenticity CVE-2021-37533 |
CWE-345 | Low | - | 20.12.2022 | - | ||
| #VU59148 - Deserialization of Untrusted Data CVE-2021-46877 |
CWE-502 | Medium | - | 03.01.2022 | - |
Showing elements 1 - 20 out of 45