Known vulnerabilities in Enterprise Manager Base Platform - page 3

Vendor: Oracle
Software: Enterprise Manager Base Platform
Software CPE: cpe:2.3:a:oracle:oracle_enterprise_manager_base_platform:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 110
Public exploits: 11
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Enterprise Manager Base Platform Enterprise Manager Base Platform is affected by 110 known vulnerabilities: 23 high, 73 medium, 14 low Critical High Medium Low

Vulnerabilities (110)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU60049 - Improper input validation
CVE-2022-21392		 CWE-20 Low
Available
No
 - 26.01.2022 SB2022012655
#VU59691 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-23305		 CWE-89 Medium
No
No
 - 18.01.2022 SB2022011818
SB2022012640
SB2022012641
and 94 more
#VU55044 - Improper input validation
CVE-2021-2351		 CWE-20 High
No
No
 - 20.07.2021 SB2021072053
SB2022011824
SB2022011825
and 110 more
#VU52528 - Improper input validation
CVE-2021-2053		 CWE-20 Medium
No
No
 - 25.04.2021 SB2021042519
#VU49792 - Improper input validation
CVE-2020-11994		 CWE-20 Medium
No
No
 - 20.01.2021 SB2021012050
SB2021042519
SB2020090140
#VU48896 - NULL Pointer Dereference
CVE-2020-1971		 CWE-476 Medium
Available
No
 - 08.12.2020 SB2020120852
SB2020120903
SB2020120905
and 91 more
#VU30007 - Improper input validation
CVE-2020-2982		 CWE-20 Medium
No
No
 - 16.07.2020 SB2020071640
#VU29015 - Integer overflow
CVE-2020-10878		 CWE-190 High
No
No
 - 15.06.2020 SB2020061513
SB2020061514
SB2020062302
and 49 more
#VU28672 - Improper input validation
CVE-2019-2897		 CWE-20 Medium
No
No
 - 05.06.2020 SB2019101559
SB2020103020
SB2021072165
#VU28238 - Exposed Dangerous Method or Function
CVE-2020-10683		 CWE-749 Medium
No
No
 - 26.05.2020 SB2020050106
SB2020052616
SB2020071632
and 43 more
#VU27954 - Deserialization of Untrusted Data
CVE-2020-11973		 CWE-502 High
No
No
 - 17.05.2020 SB2020051702
SB2020102703
SB2020102927
and 1 more
#VU27264 - Improper input validation
CVE-2020-5398		 CWE-20 Medium
Available
No
 - 23.04.2020 SB2020042353
SB2020071609
SB2020071610
and 21 more
#VU26530 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2020-1954		 CWE-300 Low
No
No
 - 02.04.2020 SB2020040206
SB2020102703
SB2020102832
and 8 more
#VU24468 - Improper input validation
CVE-2019-0227		 CWE-20 Medium
Available
No
 - 21.01.2020 SB2020012205
SB2020012308
SB2020012309
and 40 more
#VU24168 - Improper input validation
CVE-2019-17195		 CWE-20 Medium
No
No
 - 09.01.2020 SB2019101519
SB2020010921
SB2020040218
and 20 more
#VU23900 - Memory corruption
CVE-2019-5064		 CWE-119 High
No
No
 - 03.01.2020 SB2020010303
SB2021042518
SB2021072111
and 1 more
#VU22545 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2019-12415		 CWE-611 High
No
No
 - 06.11.2019 SB2019110635
SB2020012308
SB2020012309
and 42 more
#VU19595 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2019-13990		 CWE-611 Medium
No
No
 - 01.08.2019 SB2019080104
SB2020042114
SB2020042350
and 26 more
#VU17056 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2017-14735		 CWE-79 Low
No
No
 - 17.01.2019 SB2019011705
SB2020011463
SB2020042337
and 11 more
#VU12312 - Deserialization of Untrusted Data
CVE-2016-1000031		 CWE-502 High
No
No
 - 01.05.2018 SB2017111432
SB2018110601
SB2019051512
and 39 more


Showing elements 41 - 60 out of 110