Known vulnerabilities in Identity Manager - page 2

Known vulnerabilities in Identity Manager - page 2

Vendor: Oracle

Software: Identity Manager

Software CPE: cpe:2.3:a:oracle:oracle_identity_manager:*:*:*:*:*:*:*:*

Website: https://www.oracle.com

Total vulnerabilities: 36

Public exploits: 7

Known exploited (KEV): 2

Breakdown by Severity Chart

Vulnerabilities (36)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU75561 - Improper input validation CVE-2023-20860	CWE-20	Medium	No	No	-	27.04.2023	SB2023042742 SB2023042746 SB2023050518 and 34 more
#VU75431 - Uncontrolled Recursion CVE-2023-1436	CWE-674	Medium	No	No	-	24.04.2023	SB2023042409 SB2023042411 SB2023050111 and 86 more
#VU72427 - Allocation of Resources Without Limits or Throttling CVE-2023-24998	CWE-770	Medium	Available	No	-	20.02.2023	SB2023022046 SB2023022047 SB2023030917 and 203 more
#VU71109 - Out-of-bounds write CVE-2022-45693	CWE-787	Medium	No	No	-	11.01.2023	SB2023011159 SB2023011160 SB2023013112 and 45 more
#VU68635 - Deserialization of Untrusted Data CVE-2022-42003	CWE-502	Medium	No	No	-	25.10.2022	SB2022102509 SB2022102510 SB2022103117 and 208 more
#VU55363 - Improper input validation CVE-2021-2457	CWE-20	Medium	No	No	-	27.07.2021	SB2021072742
#VU55347 - Improper input validation CVE-2021-2458	CWE-20	Medium	No	No	-	27.07.2021	SB2021072742
#VU34162 - Improper Privilege Management CVE-2020-11849	CWE-269	High	No	No	-	08.07.2020	SB2020070810
#VU25051 - Improper input validation CVE-2020-2728	CWE-20	Medium	No	No	-	07.02.2020	SB2020011479
#VU25065 - Improper input validation CVE-2020-2729	CWE-20	Medium	No	No	-	07.02.2020	SB2020011479
#VU20844 - Protection Mechanism Failure CVE-2019-10086	CWE-693	Low	No	No	-	04.09.2019	SB2019090405 SB2019090406 SB2019121902 and 113 more
#VU18092 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\') CVE-2019-11358	CWE-1321	Low	Available	No	-	28.03.2019	SB2019032804 SB2019041026 SB2019041801 and 155 more
#VU36510 - Improper input validation CVE-2018-3179	CWE-20	Medium	No	No	-	17.10.2018	SB2018101725
#VU9014 - Improper Access Control CVE-2017-10151	CWE-284	High	Available	No	-	31.10.2017	SB2017103103
#VU41536 - Improper input validation CVE-2014-4509	CWE-20	Medium	No	No	-	21.06.2014	SB2014062101
#VU41790 - Improper input validation CVE-2014-2880	CWE-20	Medium	Available	No	-	17.04.2014	SB2014041713

Showing elements 21 - 40 out of 36