Known vulnerabilities in Oracle Healthcare Translational Research

Vendor: Oracle
Software: Oracle Healthcare Translational Research
Software CPE: cpe:2.3:a:oracle:oracle_healthcare_translational_research:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 16
Public exploits: 5
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle Healthcare Translational Research Oracle Healthcare Translational Research is affected by 16 known vulnerabilities: 4 high, 9 medium, 3 low Critical High Medium Low

Vulnerabilities (16)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU72335 - Cleartext Transmission of Sensitive Information
CVE-2023-23914		 CWE-319 Medium
No
No
 - 16.02.2023 -
#VU71771 - Double Free
CVE-2023-25136		 CWE-415 High
Available
No
 - 02.02.2023 -
#VU70528 - Security Features
CVE-2022-46908		 CWE-254 Low
No
No
 - 28.12.2022 -
#VU70385 - Deserialization of Untrusted Data
CVE-2022-1471		 CWE-502 High
Available
No
 - 15.12.2022 -
#VU69337 - Integer overflow
CVE-2022-42898		 CWE-190 Medium
No
No
 - 15.11.2022 -
#VU69293 - Improper input validation
CVE-2022-3171		 CWE-20 Medium
No
No
 - 14.11.2022 -
#VU68967 - Stack-based buffer overflow
CVE-2022-3479		 CWE-121 Medium
No
No
 - 04.11.2022 -
#VU68635 - Deserialization of Untrusted Data
CVE-2022-42003		 CWE-502 Medium
No
No
 - 25.10.2022 -
#VU63085 - Improper input validation
CVE-2022-22971		 CWE-20 Medium
Available
No
 - 12.05.2022 -
#VU61938 - Deserialization of Untrusted Data
CVE-2022-23221		 CWE-502 High
No
No
 - 06.04.2022 -
#VU61799 - Out-of-bounds write
CVE-2020-36518		 CWE-787 Medium
No
No
 - 01.04.2022 -
#VU59098 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-44832		 CWE-94 Medium
No
No
 - 28.12.2021 -
#VU55423 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-33037		 CWE-444 Medium
No
No
 - 29.07.2021 -
#VU55044 - Improper input validation
CVE-2021-2351		 CWE-20 High
No
No
 - 20.07.2021 -
#VU27052 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11022		 CWE-79 Low
Available
No
 - 21.04.2020 -
#VU18092 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2019-11358		 CWE-1321 Low
Available
No
 - 28.03.2019 -