Known vulnerabilities in Oracle Endeca Information Discovery Studio

Known vulnerabilities in Oracle Endeca Information Discovery Studio

Vendor: Oracle

Software: Oracle Endeca Information Discovery Studio

Software CPE: cpe:2.3:a:oracle:oracle_endeca_information_discovery_studio:*:*:*:*:*:*:*:*

Website: https://www.oracle.com

Total vulnerabilities: 8

Public exploits: 2

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (8)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU49039 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2020-26217	CWE-78	Medium	Available	No	-	16.11.2020	SB2020111622 SB2020121624 SB20210120118 and 14 more
#VU27924 - Incorrect Default Permissions CVE-2020-1945	CWE-276	Low	No	No	-	15.05.2020	SB2020051501 SB2020052114 SB2020060205 and 48 more
#VU47428 - Permissions, Privileges, and Access Controls CVE-2020-11979	CWE-264	Low	No	No	-	14.05.2020	SB2020100804 SB2020100815 SB2020111614 and 51 more
#VU24468 - Improper input validation CVE-2019-0227	CWE-20	Medium	Available	No	-	21.01.2020	SB2020012205 SB2020012308 SB2020012309 and 40 more
#VU22875 - Deserialization of Untrusted Data CVE-2019-10173	CWE-502	High	No	No	-	20.11.2019	SB2019072308 SB2019112016 SB2019121922 and 11 more
#VU22545 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2019-12415	CWE-611	High	No	No	-	06.11.2019	SB2019110635 SB2020012308 SB2020012309 and 41 more
#VU12842 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2017-12626	CWE-835	Low	No	No	-	18.05.2018	SB2018050312 SB2020011463 SB2020011481 and 24 more
#VU12127 - Deserialization of Untrusted Data CVE-2017-5645	CWE-502	High	No	No	-	24.04.2018	SB2017040201 SB2019011707 SB2017090512 and 40 more