Known vulnerabilities in Oracle Healthcare Master Person Index
Vendor:
Oracle
Software:
Oracle Healthcare Master Person Index
Software CPE:
cpe:2.3:a:oracle:oracle_healthcare_master_person_index:*:*:*:*:*:*:*:*
Website:
https://www.oracle.com
Total vulnerabilities:
16
Public exploits:
5
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
Vulnerabilities (16)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU120231 - Improper Validation of Certificate with Host Mismatch CVE-2025-68161 |
CWE-297 | Medium | - | 22.12.2025 | - | ||
| #VU115573 - Protection Mechanism Failure CVE-2025-41249 |
CWE-693 | Medium | - | 16.09.2025 | - | ||
| #VU113607 - Uncontrolled Recursion CVE-2025-48924 |
CWE-674 | Medium | - | 04.08.2025 | - | ||
| #VU111165 - Improper Access Control CVE-2025-48734 |
CWE-284 | Medium | - | 16.06.2025 | - | ||
| #VU101974 - Deserialization of Untrusted Data CVE-2024-52046 |
CWE-502 | High | - | 28.12.2024 | - | ||
| #VU98796 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2024-38819 |
CWE-22 | Medium | - | 17.10.2024 | - | ||
| #VU89801 - Server-Side Request Forgery (SSRF) CVE-2024-22262 |
CWE-918 | Medium | - | 24.05.2024 | - | ||
| #VU75409 - Improper input validation CVE-2023-20863 |
CWE-20 | Medium | - | 21.04.2023 | - | ||
| #VU68307 - Improper Control of Generation of Code ('Code Injection') CVE-2022-42889 |
CWE-94 | High | - | 14.10.2022 | - | ||
| #VU64152 - Deserialization of Untrusted Data CVE-2022-25647 |
CWE-502 | Medium | - | 10.06.2022 | - | ||
| #VU63085 - Improper input validation CVE-2022-22971 |
CWE-20 | Medium | - | 12.05.2022 | - | ||
| #VU59098 - Improper Control of Generation of Code ('Code Injection') CVE-2021-44832 |
CWE-94 | Medium | - | 28.12.2021 | - | ||
| #VU49739 - Improper input validation CVE-2020-5421 |
CWE-20 | Medium | - | 20.01.2021 | - | ||
| #VU27264 - Improper input validation CVE-2020-5398 |
CWE-20 | Medium | - | 23.04.2020 | - | ||
| #VU15467 - Improper input validation CVE-2018-15756 |
CWE-20 | Low | - | 22.10.2018 | - | ||
| #VU12651 - Missing Authorization CVE-2018-1258 |
CWE-862 | Low | - | 15.05.2018 | - |