Known vulnerabilities in Oracle Healthcare Foundation

Vendor: Oracle

Software: Oracle Healthcare Foundation

Software CPE: cpe:2.3:a:oracle:oracle_healthcare_foundation:*:*:*:*:*:*:*:*

Website: https://www.oracle.com

Total vulnerabilities: 12

Public exploits: 4

Known exploited (KEV): 1

Highest CVSSv4 Score: 9.3

Vulnerabilities (12)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU77107 - Incorrect Default Permissions CVE-2023-2976	CWE-276	Low	No	No	-	08.06.2023	-
#VU68307 - Improper Control of Generation of Code ('Code Injection') CVE-2022-42889	CWE-94	High	Available	Exploited	-	14.10.2022	-
#VU64957 - Improper Control of Generation of Code ('Code Injection') CVE-2022-33980	CWE-94	High	Available	No	-	06.07.2022	-
#VU64724 - Incorrect Regular Expression CVE-2022-33879	CWE-185	Medium	No	No	-	28.06.2022	-
#VU61721 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2021-33813	CWE-611	Medium	No	No	-	29.03.2022	-
#VU59098 - Improper Control of Generation of Code ('Code Injection') CVE-2021-44832	CWE-94	Medium	No	No	-	28.12.2021	-
#VU55044 - Improper input validation CVE-2021-2351	CWE-20	High	No	No	-	20.07.2021	-
#VU27052 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-11022	CWE-79	Low	Available	No	-	21.04.2020	-
#VU26146 - Improper Control of Generation of Code ('Code Injection') CVE-2020-1953	CWE-94	Medium	No	No	-	17.03.2020	-
#VU20844 - Protection Mechanism Failure CVE-2019-10086	CWE-693	Low	No	No	-	04.09.2019	-
#VU18092 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\') CVE-2019-11358	CWE-1321	Low	Available	No	-	28.03.2019	-
#VU14150 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2015-9251	CWE-79	Low	No	No	-	31.07.2018	-