Known vulnerabilities in Oracle Healthcare Master Person Index

Known vulnerabilities in Oracle Healthcare Master Person Index

Vendor: Oracle

Software: Oracle Healthcare Master Person Index

Software CPE: cpe:2.3:a:oracle:oracle_healthcare_master_person_index:*:*:*:*:*:*:*:*

Website: https://www.oracle.com

Total vulnerabilities: 16

Public exploits: 5

Known exploited (KEV): 1

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (16)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU120231 - Improper Validation of Certificate with Host Mismatch CVE-2025-68161	CWE-297	Medium	No	No	-	22.12.2025	SB2025122245 SB2026012084 SB2026012087 and 101 more
#VU115573 - Protection Mechanism Failure CVE-2025-41249	CWE-693	Medium	No	No	-	16.09.2025	SB20250916314 SB2025100741 SB20251008143 and 62 more
#VU113607 - Uncontrolled Recursion CVE-2025-48924	CWE-674	Medium	No	No	-	04.08.2025	SB2025080422 SB2025080423 SB2025080427 and 182 more
#VU111165 - Improper Access Control CVE-2025-48734	CWE-284	Medium	No	No	-	16.06.2025	SB2025061643 SB2025061644 SB2025061645 and 141 more
#VU101974 - Deserialization of Untrusted Data CVE-2024-52046	CWE-502	High	No	No	-	28.12.2024	SB2024122801 SB20250117140 SB2025020549 and 23 more
#VU98796 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2024-38819	CWE-22	Medium	Available	No	-	17.10.2024	SB2024101781 SB2024112849 SB2024120331 and 54 more
#VU89801 - Server-Side Request Forgery (SSRF) CVE-2024-22262	CWE-918	Medium	No	No	-	24.05.2024	SB2024052420 SB2024052423 SB2024052708 and 76 more
#VU75409 - Improper input validation CVE-2023-20863	CWE-20	Medium	No	No	-	21.04.2023	SB2023042131 SB2023042132 SB2023050511 and 88 more
#VU68307 - Improper Control of Generation of Code ('Code Injection') CVE-2022-42889	CWE-94	High	Available	Exploited	-	14.10.2022	SB2022101405 SB2022102709 SB2022110306 and 91 more
#VU64152 - Deserialization of Untrusted Data CVE-2022-25647	CWE-502	Medium	No	No	-	10.06.2022	SB2021120221 SB2022061003 SB2022061421 and 94 more
#VU63085 - Improper input validation CVE-2022-22971	CWE-20	Medium	Available	No	-	12.05.2022	SB2022051201 SB2022060620 SB2022062223 and 52 more
#VU59098 - Improper Control of Generation of Code ('Code Injection') CVE-2021-44832	CWE-94	Medium	No	No	-	28.12.2021	SB2021122816 SB2021123002 SB2022010601 and 197 more
#VU49739 - Improper input validation CVE-2020-5421	CWE-20	Medium	Available	No	-	20.01.2021	SB2021012002 SB2021012008 SB2021012015 and 39 more
#VU27264 - Improper input validation CVE-2020-5398	CWE-20	Medium	Available	No	-	23.04.2020	SB2020042353 SB2020071609 SB2020071610 and 21 more
#VU15467 - Improper input validation CVE-2018-15756	CWE-20	Low	No	No	-	22.10.2018	SB2018102305 SB2020012203 SB2020032701 and 28 more
#VU12651 - Missing Authorization CVE-2018-1258	CWE-862	Low	No	No	-	15.05.2018	SB2018051507 SB2019011705 SB2019080913 and 11 more