Known vulnerabilities in Oracle GoldenGate Application Adapters

Known vulnerabilities in Oracle GoldenGate Application Adapters

Vendor: Oracle

Software: Oracle GoldenGate Application Adapters

Software CPE: cpe:2.3:a:oracle:oracle_goldengate_application_adapters:*:*:*:*:*:*:*:*

Website: https://www.oracle.com

Total vulnerabilities: 10

Public exploits: 1

Known exploited (KEV): 0

Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Vulnerabilities (10)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU55044 - Improper input validation CVE-2021-2351	CWE-20	High	No	No	23.1	20.07.2021	SB2021072053 SB2022011824 SB2022011825 and 110 more
#VU52252 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2021-29425	CWE-22	Low	No	No	-	15.04.2021	SB2021041510 SB2021081922 SB2021093016 and 121 more
#VU49739 - Improper input validation CVE-2020-5421	CWE-20	Medium	Available	No	-	20.01.2021	SB2021012002 SB2021012008 SB2021012015 and 39 more
#VU48979 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2020-25649	CWE-611	Medium	No	No	-	03.12.2020	SB2020121510 SB2021020321 SB2021042112 and 68 more
#VU27487 - Improper Certificate Validation CVE-2020-9488	CWE-295	Low	No	No	-	04.05.2020	SB2020050406 SB2020071606 SB2020071620 and 67 more
#VU21750 - Improper input validation CVE-2019-17531	CWE-20	Medium	No	No	-	13.10.2019	SB2019100711 SB2019120206 SB2019121120 and 24 more
#VU21465 - Out-of-bounds read CVE-2018-11058	CWE-125	Medium	No	No	-	01.10.2019	SB2018091402 SB2020012202 SB2020011462 and 12 more
#VU15467 - Improper input validation CVE-2018-15756	CWE-20	Low	No	No	-	22.10.2018	SB2018102305 SB2020012203 SB2020032701 and 28 more
#VU12127 - Deserialization of Untrusted Data CVE-2017-5645	CWE-502	High	No	No	-	24.04.2018	SB2017040201 SB2019011707 SB2017090512 and 40 more
#VU11301 - Improper Access Control CVE-2018-8088	CWE-284	Low	No	No	-	28.03.2018	SB2018022112 SB2018032813 SB2018032817 and 27 more