Known vulnerabilities in Oracle Healthcare Translational Research

Known vulnerabilities in Oracle Healthcare Translational Research

Vendor: Oracle

Software: Oracle Healthcare Translational Research

Software CPE: cpe:2.3:a:oracle:oracle_healthcare_translational_research:*:*:*:*:*:*:*:*

Website: https://www.oracle.com

Total vulnerabilities: 16

Public exploits: 5

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (16)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU72335 - Cleartext Transmission of Sensitive Information CVE-2023-23914	CWE-319	Medium	No	No	-	16.02.2023	SB2023021668 SB2023021671 SB2023021672 and 29 more
#VU71771 - Double Free CVE-2023-25136	CWE-415	High	Available	No	-	02.02.2023	SB2023020247 SB2023020304 SB2023021660 and 11 more
#VU70528 - Security Features CVE-2022-46908	CWE-254	Low	No	No	-	28.12.2022	SB2022122824 SB2022122826 SB2022122827 and 24 more
#VU70385 - Deserialization of Untrusted Data CVE-2022-1471	CWE-502	High	Available	No	-	15.12.2022	SB2022121539 SB2022121540 SB2022121928 and 124 more
#VU69337 - Integer overflow CVE-2022-42898	CWE-190	Medium	No	No	-	15.11.2022	SB2022111530 SB2022111610 SB2022111621 and 123 more
#VU69293 - Improper input validation CVE-2022-3171	CWE-20	Medium	No	No	-	14.11.2022	SB2022111433 SB2022111440 SB2022112934 and 105 more
#VU68967 - Stack-based buffer overflow CVE-2022-3479	CWE-121	Medium	No	No	-	04.11.2022	SB2022110401 SB2022110406 SB2022121901 and 18 more
#VU68635 - Deserialization of Untrusted Data CVE-2022-42003	CWE-502	Medium	No	No	-	25.10.2022	SB2022102509 SB2022102510 SB2022103117 and 208 more
#VU63085 - Improper input validation CVE-2022-22971	CWE-20	Medium	Available	No	-	12.05.2022	SB2022051201 SB2022060620 SB2022062223 and 52 more
#VU61938 - Deserialization of Untrusted Data CVE-2022-23221	CWE-502	High	No	No	-	06.04.2022	SB2022040618 SB2022040619 SB2022042260 and 7 more
#VU61799 - Out-of-bounds write CVE-2020-36518	CWE-787	Medium	No	No	-	01.04.2022	SB2022040113 SB2022040114 SB2022040115 and 147 more
#VU59098 - Improper Control of Generation of Code ('Code Injection') CVE-2021-44832	CWE-94	Medium	No	No	-	28.12.2021	SB2021122816 SB2021123002 SB2022010601 and 197 more
#VU55423 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2021-33037	CWE-444	Medium	No	No	-	29.07.2021	SB2021072907 SB2021080807 SB2021080808 and 30 more
#VU55044 - Improper input validation CVE-2021-2351	CWE-20	High	No	No	-	20.07.2021	SB2021072053 SB2022011824 SB2022011825 and 110 more
#VU27052 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-11022	CWE-79	Low	Available	No	-	21.04.2020	SB2020042126 SB2020052033 SB2020052103 and 181 more
#VU18092 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\') CVE-2019-11358	CWE-1321	Low	Available	No	-	28.03.2019	SB2019032804 SB2019041026 SB2019041801 and 155 more