Known vulnerabilities in Oracle Healthcare Data Repository

Known vulnerabilities in Oracle Healthcare Data Repository

Vendor: Oracle

Software: Oracle Healthcare Data Repository

Software CPE: cpe:2.3:a:oracle:oracle_healthcare_data_repository:*:*:*:*:*:*:*:*

Website: https://www.oracle.com

Total vulnerabilities: 18

Public exploits: 5

Known exploited (KEV): 3

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (18)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU120231 - Improper Validation of Certificate with Host Mismatch CVE-2025-68161	CWE-297	Medium	No	No	-	22.12.2025	SB2025122245 SB2026012084 SB2026012087 and 101 more
#VU113607 - Uncontrolled Recursion CVE-2025-48924	CWE-674	Medium	No	No	-	04.08.2025	SB2025080422 SB2025080423 SB2025080427 and 182 more
#VU98796 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2024-38819	CWE-22	Medium	Available	No	-	17.10.2024	SB2024101781 SB2024112849 SB2024120331 and 54 more
#VU89801 - Server-Side Request Forgery (SSRF) CVE-2024-22262	CWE-918	Medium	No	No	-	24.05.2024	SB2024052420 SB2024052423 SB2024052708 and 76 more
#VU86625 - Resource exhaustion CVE-2024-26308	CWE-400	Medium	No	No	-	20.02.2024	SB2024022033 SB2024022937 SB2024031520 and 138 more
#VU77107 - Incorrect Default Permissions CVE-2023-2976	CWE-276	Low	No	No	-	08.06.2023	SB2023060849 SB2023071712 SB2023072512 and 157 more
#VU75409 - Improper input validation CVE-2023-20863	CWE-20	Medium	No	No	-	21.04.2023	SB2023042131 SB2023042132 SB2023050511 and 88 more
#VU68307 - Improper Control of Generation of Code ('Code Injection') CVE-2022-42889	CWE-94	High	Available	Exploited	-	14.10.2022	SB2022101405 SB2022102709 SB2022110306 and 91 more
#VU64152 - Deserialization of Untrusted Data CVE-2022-25647	CWE-502	Medium	No	No	-	10.06.2022	SB2021120221 SB2022061003 SB2022061421 and 94 more
#VU63085 - Improper input validation CVE-2022-22971	CWE-20	Medium	Available	No	-	12.05.2022	SB2022051201 SB2022060620 SB2022062223 and 52 more
#VU59691 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2022-23305	CWE-89	Medium	No	No	-	18.01.2022	SB2022011818 SB2022012640 SB2022012641 and 94 more
#VU59098 - Improper Control of Generation of Code ('Code Injection') CVE-2021-44832	CWE-94	Medium	No	No	-	28.12.2021	SB2021122816 SB2021123002 SB2022010601 and 197 more
#VU55044 - Improper input validation CVE-2021-2351	CWE-20	High	No	No	-	20.07.2021	SB2021072053 SB2022011824 SB2022011825 and 110 more
#VU54853 - Resource exhaustion CVE-2021-36090	CWE-400	Medium	No	No	-	14.07.2021	SB2021071408 SB2021080809 SB2021100411 and 70 more
#VU52252 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2021-29425	CWE-22	Low	No	No	-	15.04.2021	SB2021041510 SB2021081922 SB2021093016 and 121 more
#VU25048 - Improper input validation CVE-2020-2555	CWE-20	High	Available	Exploited	-	07.02.2020	SB2020011477 SB2020102703 SB2020102939 and 4 more
#VU24469 - Improper input validation CVE-2019-17091	CWE-20	Medium	No	No	-	21.01.2020	SB2020012203 SB2020012405 SB2020042311 and 13 more
#VU11918 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') CVE-2018-1273	CWE-113	High	Available	Exploited	-	18.04.2018	SB2018041815 SB2022072013 SB2023011758 and 2 more