Known vulnerabilities in Oracle Linux 7 - page 5

Vendor: Oracle
Software: Oracle Linux
Version: 7
Software CPE: cpe:2.3:o:oracle:oracle_linux:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 96
Public exploits: 9
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Oracle Linux version 7 Oracle Linux 7 is affected by 96 vulnerabilities: 2 critical, 23 high, 27 medium, 44 low Critical High Medium Low

Vulnerabilities (96)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU1018 - Improper input validation
CVE-2016-1954		 CWE-20 Medium
No
No
 - 17.10.2016 SB2016031301
#VU719 - Improper Access Control
CVE-2016-0778		 CWE-284 High
No
No
 - 03.10.2016 SB2016011401
SB2016011402
SB2016011501
and 17 more
#VU718 - Improper Access Control
CVE-2016-0777		 CWE-284 Low
No
No
 - 03.10.2016 SB2016011401
SB2016011402
SB2016011501
and 19 more
#VU641 - Improper input validation
CVE-2016-2109		 CWE-119 Low
No
No
 - 23.09.2016 SB2016050506
SB2016051903
SB2016051204
and 17 more
#VU640 - Improper input validation
CVE-2016-2105		 CWE-20 Low
No
No
 - 23.09.2016 SB2016050505
SB2016061413
SB2016051903
and 22 more
#VU639 - Improper Access Control
CVE-2016-2107		 CWE-284 High
Public exploit available
No
 - 23.09.2016 SB2016050504
SB2016061413
SB2016050514
and 19 more
#VU264 - Improper Control of Generation of Code ('Code Injection')
CVE-2016-0714		 CWE-94 Low
No
No
 - 05.08.2016 SB2016021201
SB2016032101
SB2016032903
and 8 more
#VU263 - Exposure of sensitive information to an unauthorized actor
CVE-2016-0706		 CWE-200 Low
No
No
 - 05.08.2016 SB2016021201
SB2016032101
SB2016032903
and 8 more
#VU262 - Exposure of sensitive information to an unauthorized actor
CVE-2015-5345		 CWE-200 Low
No
No
 - 05.08.2016 SB2016021201
SB2016032101
SB2016032903
and 8 more
#VU261 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2015-5174		 CWE-22 Low
No
No
 - 05.08.2016 SB2016021201
SB2016032101
SB2016032903
and 8 more
#VU242 - UNIX Symbolic Link (Symlink) Following
CVE-2015-7560		 CWE-61 Medium
No
No
 - 29.07.2016 SB2016032901
SB2016032401
SB2016032102
and 12 more
#VU238 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2016-2113		 CWE-300 Medium
No
No
 - 29.07.2016 SB2016052501
SB2016051803
SB2016050401
and 16 more
#VU236 - Authentication Bypass by Spoofing
CVE-2016-2111		 CWE-290 Medium
No
No
 - 29.07.2016 SB2016052501
SB2016051803
SB2016050401
and 25 more
#VU235 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2016-2110		 CWE-300 Medium
No
No
 - 29.07.2016 SB2016052501
SB2016051803
SB2016050401
and 25 more
#VU46 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2016-2047		 CWE-300 Low
No
No
 - 28.06.2016 SB2016042701
#VU26 - Incorrect Permission Assignment for Critical Resource
CVE-2016-5844		 CWE-732 High
No
No
 - 27.06.2016 SB2016062701
SB2016080529


Showing elements 81 - 100 out of 96