Known vulnerabilities in Oracle Global Lifecycle Management OPatch

Vendor: Oracle
Software: Oracle Global Lifecycle Management OPatch
Software CPE: cpe:2.3:a:oracle:oracle_global_lifecycle_management_opatch:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 4
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle Global Lifecycle Management OPatch Oracle Global Lifecycle Management OPatch is affected by 4 known vulnerabilities: 1 high, 2 medium, 1 low Critical High Medium Low

Vulnerabilities (4)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU59965 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-23437		 CWE-835 Medium
No
No
 12.2.0.1.30 25.01.2022 SB2022012503
SB2022041946
SB2022042249
and 92 more
#VU48048 - Improper input validation
CVE-2019-3740		 CWE-20 Medium
No
No
 12.2.0.1.22 30.10.2020 SB2020103018
SB2020103032
SB2020103033
and 11 more
#VU25830 - Deserialization of Untrusted Data
CVE-2020-9546		 CWE-502 High
No
No
 12.2.0.1.20 09.03.2020 SB2020030909
SB2020071523
SB2020071620
and 31 more
#VU24272 - Improper Access Control
CVE-2019-20330		 CWE-284 Low
No
No
 11.2.0.3.23, 12.2.0.1.19, 13.9.4.2.1 14.01.2020 SB2020010309
SB2020032709
SB2020042101
and 18 more