Known vulnerabilities in Oracle Enterprise Repository

Vendor: Oracle
Software: Oracle Enterprise Repository
Software CPE: cpe:2.3:a:oracle:oracle_enterprise_repository:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 15
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle Enterprise Repository Oracle Enterprise Repository is affected by 15 known vulnerabilities: 3 high, 7 medium, 5 low Critical High Medium Low

Vulnerabilities (15)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU54856 - Resource exhaustion
CVE-2021-36374		 CWE-400 Medium
No
No
 - 14.07.2021 SB2021071409
SB2021072011
SB2021101927
and 43 more
#VU52501 - Server-Side Request Forgery (SSRF)
CVE-2020-11987		 CWE-918 Medium
No
No
 - 23.04.2021 SB2021042315
SB2021042316
SB2021042514
and 32 more
#VU49792 - Improper input validation
CVE-2020-11994		 CWE-20 Medium
No
No
 - 20.01.2021 SB2021012050
SB2021042519
SB2020090140
#VU46680 - Improper Authentication
CVE-2020-11998		 CWE-287 High
No
No
 - 14.09.2020 SB2020091416
SB2021012050
SB2021042523
and 2 more
#VU29068 - Server-Side Request Forgery (SSRF)
CVE-2019-17566		 CWE-918 Medium
No
No
 - 16.06.2020 SB2020061613
SB2020062304
SB2020072310
and 23 more
#VU27953 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-1941		 CWE-79 Low
No
No
 - 17.05.2020 SB2020051701
SB2020071609
SB2020071610
and 5 more
#VU27924 - Incorrect Default Permissions
CVE-2020-1945		 CWE-276 Low
No
No
 - 15.05.2020 SB2020051501
SB2020052114
SB2020060205
and 48 more
#VU47428 - Permissions, Privileges, and Access Controls
CVE-2020-11979		 CWE-264 Low
No
No
 - 14.05.2020 SB2020100804
SB2020100815
SB2020111614
and 51 more
#VU27043 - Improper input validation
CVE-2018-1000180		 CWE-20 Medium
No
No
 - 21.04.2020 SB2020042107
SB2018092415
SB2021042531
and 17 more
#VU24597 - Improper input validation
CVE-2019-2904		 CWE-20 High
No
No
 - 25.01.2020 SB2020011463
SB2020042108
SB2020042109
and 20 more
#VU22545 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2019-12415		 CWE-611 High
No
No
 - 06.11.2019 SB2019110635
SB2020012308
SB2020012309
and 42 more
#VU19300 - Resource exhaustion
CVE-2019-0222		 CWE-400 Medium
No
No
 - 22.07.2019 SB2019032820
SB2020032710
SB2020042107
and 7 more
#VU18570 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2019-0188		 CWE-611 Medium
No
No
 - 22.05.2019 SB2019052202
SB2019101556
SB2020071664
and 1 more
#VU14741 - Improper Validation of Certificate with Host Mismatch
CVE-2018-11775		 CWE-297 Low
No
No
 - 11.09.2018 SB2018091104
SB2019112016
SB2022060812
and 4 more
#VU12842 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2017-12626		 CWE-835 Low
No
No
 - 18.05.2018 SB2018050312
SB2020011463
SB2020011481
and 24 more