Known vulnerabilities in Oracle Enterprise Manager Ops Center

Vendor: Oracle
Software: Oracle Enterprise Manager Ops Center
Software CPE: cpe:2.3:a:oracle:oracle_enterprise_manager_ops_center:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 39
Public exploits: 10
Known exploited (KEV): 2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle Enterprise Manager Ops Center Oracle Enterprise Manager Ops Center is affected by 39 known vulnerabilities: 9 high, 15 medium, 15 low Critical High Medium Low

Vulnerabilities (39)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU75431 - Uncontrolled Recursion
CVE-2023-1436		 CWE-674 Medium
No
No
 - 24.04.2023 SB2023042409
SB2023042411
SB2023050111
and 86 more
#VU73107 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2023-25690		 CWE-113 Medium
Available
No
 - 07.03.2023 SB2023030731
SB2023030862
SB2023030942
and 54 more
#VU72335 - Cleartext Transmission of Sensitive Information
CVE-2023-23914		 CWE-319 Medium
No
No
 - 16.02.2023 SB2023021668
SB2023021671
SB2023021672
and 29 more
#VU70527 - Improper input validation
CVE-2022-41966		 CWE-20 Medium
Available
No
 - 28.12.2022 SB2022122822
SB2023011211
SB2023020616
and 53 more
#VU64089 - Improper Authentication
CVE-2022-31813		 CWE-287 Medium
No
No
 - 08.06.2022 SB2022060817
SB2022060901
SB2022061611
and 49 more
#VU62765 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-1292		 CWE-78 Medium
Available
No
 - 03.05.2022 SB2022050315
SB2022050436
SB2022050503
and 141 more
#VU61285 - Integer overflow
CVE-2022-22721		 CWE-190 High
No
No
 - 14.03.2022 SB2022031416
SB2022031504
SB2022031724
and 39 more
#VU60834 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-23450		 CWE-94 High
No
No
 - 23.02.2022 SB2022022311
SB2022022312
SB2022031011
and 42 more
#VU59098 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-44832		 CWE-94 Medium
No
No
 - 28.12.2021 SB2021122816
SB2021123002
SB2022010601
and 197 more
#VU56678 - Server-Side Request Forgery (SSRF)
CVE-2021-40438		 CWE-918 High
Available
Exploited
 - 17.09.2021 SB2021091706
SB2021091707
SB2021092301
and 42 more
#VU55044 - Improper input validation
CVE-2021-2351		 CWE-20 High
No
No
 - 20.07.2021 SB2021072053
SB2022011824
SB2022011825
and 110 more
#VU49973 - Memory corruption
CVE-2021-3177		 CWE-119 High
No
No
 - 19.01.2021 SB2021012516
SB2021012517
SB2021022418
and 54 more
#VU48896 - NULL Pointer Dereference
CVE-2020-1971		 CWE-476 Medium
Available
No
 - 08.12.2020 SB2020120852
SB2020120903
SB2020120905
and 91 more
#VU109712 - Improper input validation
CVE-2019-2728		 CWE-20 Low
No
No
 - 16.07.2019 SB2019071699
#VU18110 - Permissions, Privileges, and Access Controls
CVE-2019-0211		 CWE-264 Low
Available
Exploited
 - 02.04.2019 SB2019040201
SB2019040301
SB2019040407
and 21 more
#VU17860 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2019-1559		 CWE-327 Low
No
No
 - 26.02.2019 SB2019022607
SB2019022802
SB2019022809
and 50 more
#VU17456 - Stack-based buffer overflow
CVE-2019-3822		 CWE-121 High
No
No
 - 11.02.2019 SB2019021102
SB2019020715
SB2019020716
and 17 more
#VU14150 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2015-9251		 CWE-79 Low
No
No
 - 31.07.2018 SB2018080106
SB2019011705
SB2019100301
and 63 more
#VU13325 - Improper input validation
CVE-2018-0732		 CWE-20 Low
No
No
 - 12.06.2018 SB2018061305
SB2018070906
SB2018073005
and 54 more
#VU12799 - Heap-based Buffer Overflow
CVE-2018-1000300		 CWE-122 High
No
No
 - 17.05.2018 SB2018051707
SB2018051809
SB2018051810
and 12 more


Showing elements 1 - 20 out of 39