Known vulnerabilities in Oracle Knowledge

Known vulnerabilities in Oracle Knowledge

Vendor: Oracle

Software: Oracle Knowledge

Software CPE: cpe:2.3:a:oracle:oracle_knowledge:*:*:*:*:*:*:*:*

Website: https://www.oracle.com

Total vulnerabilities: 16

Public exploits: 2

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (16)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU27248 - Improper input validation CVE-2020-2791	CWE-20	High	No	No	8.6.3	23.04.2020	SB2020042337
#VU27249 - Improper input validation CVE-2020-2931	CWE-20	High	No	No	-	23.04.2020	SB2020042337
#VU27250 - Improper input validation CVE-2015-0254	CWE-20	Medium	No	No	8.6.2	23.04.2020	SB2020042337 SB2015092202 SB2017062712 and 6 more
#VU27251 - Improper input validation CVE-2020-2795	CWE-20	Low	No	No	8.6.3	23.04.2020	SB2020042337
#VU27252 - Improper input validation CVE-2020-2524	CWE-20	Medium	No	No	-	23.04.2020	SB2020042337
#VU27253 - Improper input validation CVE-2020-2932	CWE-20	Medium	No	No	-	23.04.2020	SB2020042337
#VU27254 - Improper input validation CVE-2020-2553	CWE-20	Medium	No	No	-	23.04.2020	SB2020042337
#VU27255 - Improper input validation CVE-2020-2522	CWE-20	Low	No	No	8.6.2	23.04.2020	SB2020042337
#VU24468 - Improper input validation CVE-2019-0227	CWE-20	Medium	Available	No	-	21.01.2020	SB2020012205 SB2020012308 SB2020012309 and 40 more
#VU18092 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\') CVE-2019-11358	CWE-1321	Low	Available	No	-	28.03.2019	SB2019032804 SB2019041026 SB2019041801 and 155 more
#VU17056 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2017-14735	CWE-79	Low	No	No	-	17.01.2019	SB2019011705 SB2020011463 SB2020042337 and 11 more
#VU16676 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2018-17197	CWE-835	Low	No	No	-	22.12.2018	SB2018122407 SB2020042337 SB2019071640 and 2 more
#VU14150 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2015-9251	CWE-79	Low	No	No	-	31.07.2018	SB2018080106 SB2019011705 SB2019100301 and 63 more
#VU12312 - Deserialization of Untrusted Data CVE-2016-1000031	CWE-502	High	No	No	-	01.05.2018	SB2017111432 SB2018110601 SB2019051512 and 39 more
#VU735 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2015-1832	CWE-611	Low	No	No	-	04.10.2016	SB2015071704 SB2020042337 SB2020102845 and 6 more
#VU197 - Resource exhaustion CVE-2016-3092	CWE-400	Medium	No	No	-	22.07.2016	SB2016070602 SB2016070203 SB2016063002 and 20 more