Known vulnerabilities in Oracle Health Sciences Empirica Signal

Known vulnerabilities in Oracle Health Sciences Empirica Signal

Vendor: Oracle

Software: Oracle Health Sciences Empirica Signal

Software CPE: cpe:2.3:a:oracle:oracle_health_sciences_empirica_signal:*:*:*:*:*:*:*:*

Website: https://www.oracle.com

Total vulnerabilities: 7

Public exploits: 1

Known exploited (KEV): 1

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (7)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU68635 - Deserialization of Untrusted Data CVE-2022-42003	CWE-502	Medium	No	No	-	25.10.2022	SB2022102509 SB2022102510 SB2022103117 and 208 more
#VU63479 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2022-23457	CWE-22	High	No	No	-	20.05.2022	SB2022052008 SB2022052009 SB2022052010 and 11 more
#VU61799 - Out-of-bounds write CVE-2020-36518	CWE-787	Medium	No	No	-	01.04.2022	SB2022040113 SB2022040114 SB2022040115 and 147 more
#VU59098 - Improper Control of Generation of Code ('Code Injection') CVE-2021-44832	CWE-94	Medium	No	No	-	28.12.2021	SB2021122816 SB2021123002 SB2022010601 and 197 more
#VU48979 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2020-25649	CWE-611	Medium	No	No	-	03.12.2020	SB2020121510 SB2021020321 SB2021042112 and 68 more
#VU28238 - Exposed Dangerous Method or Function CVE-2020-10683	CWE-749	Medium	No	No	-	26.05.2020	SB2020050106 SB2020052616 SB2020071632 and 43 more
#VU25502 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2020-1938	CWE-22	High	Available	Exploited	-	21.02.2020	SB2020022111 SB2020031401 SB2020031402 and 31 more