Known vulnerabilities in Oracle Enterprise Command Center Framework

Known vulnerabilities in Oracle Enterprise Command Center Framework

Vendor: Oracle

Software: Oracle Enterprise Command Center Framework

Software CPE: cpe:2.3:a:oracle:oracle_enterprise_command_center_framework:*:*:*:*:*:*:*:*

Website: https://www.oracle.com

Total vulnerabilities: 10

Public exploits: 0

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (10)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU120231 - Improper Validation of Certificate with Host Mismatch CVE-2025-68161	CWE-297	Medium	No	No	-	22.12.2025	SB2025122245 SB2026012084 SB2026012087 and 99 more
#VU114761 - Resource exhaustion CVE-2025-58057	CWE-400	Medium	No	No	-	03.09.2025	SB2025090340 SB2025090949 SB2025101530 and 45 more
#VU114067 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2025-41242	CWE-22	Medium	No	No	-	14.08.2025	SB2025081411 SB2025100743 SB2025110336 and 18 more
#VU112257 - Improper input validation CVE-2025-31672	CWE-20	Medium	No	No	-	04.07.2025	SB20250704104 SB2025070708 SB2025071664 and 23 more
#VU100680 - Improper input validation CVE-2024-38828	CWE-20	Medium	No	No	-	20.11.2024	SB2024112009 SB2025021262 SB2025040424 and 15 more
#VU99975 - Authentication Bypass by Spoofing CVE-2024-51504	CWE-290	High	No	No	-	06.11.2024	SB2024110667 SB2024121231 SB2024122015 and 12 more
#VU98622 - Improper input validation CVE-2024-21206	CWE-20	Low	No	No	-	15.10.2024	SB20241015184
#VU82214 - Improper input validation CVE-2023-22107	CWE-20	Medium	No	No	-	18.10.2023	SB2023101895
#VU82126 - Improper input validation CVE-2023-22106	CWE-20	Medium	No	No	-	17.10.2023	SB2023101895
#VU59098 - Improper Control of Generation of Code ('Code Injection') CVE-2021-44832	CWE-94	Medium	No	No	-	28.12.2021	SB2021122816 SB2021123002 SB2022010601 and 197 more