Known vulnerabilities in Oracle Enterprise Manager Ops Center

Vendor: Oracle
Software: Oracle Enterprise Manager Ops Center
Software CPE: cpe:2.3:a:oracle:oracle_enterprise_manager_ops_center:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 39
Public exploits: 10
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle Enterprise Manager Ops Center Oracle Enterprise Manager Ops Center is affected by 39 known vulnerabilities: 9 high, 15 medium, 15 low Critical High Medium Low

Vulnerabilities (39)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU75431 - Uncontrolled Recursion
CVE-2023-1436		 CWE-674 Medium
No
No
 - 24.04.2023 SB2023042409
SB2023042411
SB2023050111
and 86 more
#VU73107 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2023-25690		 CWE-113 Medium
Available
No
 - 07.03.2023 SB2023030731
SB2023030862
SB2023030942
and 54 more
#VU72335 - Cleartext Transmission of Sensitive Information
CVE-2023-23914		 CWE-319 Medium
No
No
 - 16.02.2023 SB2023021668
SB2023021671
SB2023021672
and 29 more
#VU70527 - Improper input validation
CVE-2022-41966		 CWE-20 Medium
Available
No
 - 28.12.2022 SB2022122822
SB2023011211
SB2023020616
and 53 more
#VU64089 - Improper Authentication
CVE-2022-31813		 CWE-287 Medium
No
No
 - 08.06.2022 SB2022060817
SB2022060901
SB2022061611
and 49 more
#VU62765 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-1292		 CWE-78 Medium
Available
No
 - 03.05.2022 SB2022050315
SB2022050436
SB2022050503
and 141 more
#VU61285 - Integer overflow
CVE-2022-22721		 CWE-190 High
No
No
 - 14.03.2022 SB2022031416
SB2022031504
SB2022031724
and 39 more
#VU60834 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-23450		 CWE-94 High
No
No
 - 23.02.2022 SB2022022311
SB2022022312
SB2022031011
and 41 more
#VU59098 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-44832		 CWE-94 Medium
No
No
 - 28.12.2021 SB2021122816
SB2021123002
SB2022010601
and 197 more
#VU56678 - Server-Side Request Forgery (SSRF)
CVE-2021-40438		 CWE-918 High
Available
Exploited
 - 17.09.2021 SB2021091706
SB2021091707
SB2021092301
and 42 more
#VU55044 - Improper input validation
CVE-2021-2351		 CWE-20 High
No
No
 - 20.07.2021 SB2021072053
SB2022011824
SB2022011825
and 110 more
#VU49973 - Memory corruption
CVE-2021-3177		 CWE-119 High
No
No
 - 19.01.2021 SB2021012516
SB2021012517
SB2021022418
and 54 more
#VU48896 - NULL Pointer Dereference
CVE-2020-1971		 CWE-476 Medium
Available
No
 - 08.12.2020 SB2020120852
SB2020120903
SB2020120905
and 91 more
#VU35713 - Memory corruption
CVE-2020-11984		 CWE-119 High
Available
No
 - 08.08.2020 SB2020080806
SB2020080807
SB2020082904
and 22 more
#VU27924 - Incorrect Default Permissions
CVE-2020-1945		 CWE-276 Low
No
No
 - 15.05.2020 SB2020051501
SB2020052114
SB2020060205
and 48 more
#VU27052 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11022		 CWE-79 Low
Available
No
 - 21.04.2020 SB2020042126
SB2020052033
SB2020052103
and 181 more
#VU26528 - Use of Uninitialized Variable
CVE-2020-1934		 CWE-457 Medium
No
No
 - 02.04.2020 SB2020040204
SB2020041511
SB2020050202
and 20 more
#VU23451 - Cryptographic Issues
CVE-2019-1551		 CWE-310 Low
No
No
 - 08.12.2019 SB2019120802
SB2019122101
SB2019122807
and 24 more
#VU19595 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2019-13990		 CWE-611 Medium
No
No
 - 01.08.2019 SB2019080104
SB2020042114
SB2020042350
and 26 more
#VU86 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2015-4000		 CWE-300 Medium
Available
No
 - 04.07.2016 SB2015071003
SB2015070202
SB2015072201
and 36 more


Showing elements 1 - 20 out of 39