Known vulnerabilities in Oracle Internet Directory

Vendor: Oracle
Software: Oracle Internet Directory
Software CPE: cpe:2.3:a:oracle:oracle_internet_directory:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 4
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 7.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle Internet Directory Oracle Internet Directory is affected by 4 known vulnerabilities: 2 medium, 2 low Critical High Medium Low

Vulnerabilities (4)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU24468 - Improper input validation
CVE-2019-0227		 CWE-20 Medium
Available
No
 - 21.01.2020 SB2020012205
SB2020012308
SB2020012309
and 40 more
#VU19595 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2019-13990		 CWE-611 Medium
No
No
 - 01.08.2019 SB2019080104
SB2020042114
SB2020042350
and 26 more
#VU17049 - Permissions, Privileges, and Access Controls
CVE-2018-11212		 CWE-369 Low
No
No
 - 17.01.2019 SB2019011702
SB2019021208
SB2019031810
and 21 more
#VU10083 - Permissions, Privileges, and Access Controls
CVE-2018-2601		 CWE-264 Low
No
No
 - 18.01.2018 SB2018011806