Known vulnerabilities in Oracle Managed File Transfer

Vendor: Oracle
Software: Oracle Managed File Transfer
Software CPE: cpe:2.3:a:oracle:oracle_managed_file_transfer:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 25
Public exploits: 8
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle Managed File Transfer Oracle Managed File Transfer is affected by 25 known vulnerabilities: 1 critical, 5 high, 17 medium, 2 low Critical High Medium Low

Vulnerabilities (25)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU120231 - Improper Validation of Certificate with Host Mismatch
CVE-2025-68161		 CWE-297 Medium
No
No
 - 22.12.2025 SB2025122245
SB2026012084
SB2026012087
and 101 more
#VU113607 - Uncontrolled Recursion
CVE-2025-48924		 CWE-674 Medium
No
No
 - 04.08.2025 SB2025080422
SB2025080423
SB2025080427
and 182 more
#VU107995 - Improper input validation
CVE-2025-31651		 CWE-20 Medium
Available
No
 - 28.04.2025 SB2025042851
SB2025050943
SB2025050982
and 46 more
#VU101974 - Deserialization of Untrusted Data
CVE-2024-52046		 CWE-502 High
No
No
 - 28.12.2024 SB2024122801
SB20250117140
SB2025020549
and 23 more
#VU101893 - Permissions, Privileges, and Access Controls
CVE-2024-56337		 CWE-264 High
No
No
 - 20.12.2024 SB2024122063
SB2025011311
SB2025011801
and 45 more
#VU93732 - Resource Management Errors
CVE-2024-34750		 CWE-399 Medium
No
No
 - 03.07.2024 SB2024070346
SB20240711245
SB2024071542
and 56 more
#VU87510 - Improper input validation
CVE-2024-24549		 CWE-20 Medium
Available
No
 - 13.03.2024 SB2024031386
SB2024031879
SB2024031880
and 64 more
#VU83533 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-46589		 CWE-444 Medium
No
No
 - 28.11.2023 SB2023112846
SB2023121851
SB2023122831
and 78 more
#VU81728 - Resource exhaustion
CVE-2023-44487		 CWE-400 High
Available
Exploited
 - 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 652 more
#VU78328 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
CVE-2023-33201		 CWE-90 Medium
No
No
 - 17.07.2023 SB2023071740
SB2023071742
SB2023071902
and 91 more
#VU77107 - Incorrect Default Permissions
CVE-2023-2976		 CWE-276 Low
No
No
 - 08.06.2023 SB2023060849
SB2023071712
SB2023072512
and 157 more
#VU73957 - Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
CVE-2023-28708		 CWE-614 Low
No
No
 - 22.03.2023 SB2023032237
SB2023032939
SB2023032945
and 53 more
#VU70530 - Deserialization of Untrusted Data
CVE-2022-45047		 CWE-502 High
Available
No
 - 28.12.2022 SB2022122828
SB2022122920
SB2023011148
and 49 more
#VU64627 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-34305		 CWE-79 Medium
Available
No
 - 23.06.2022 SB2022062338
SB2022071177
SB2022071801
and 26 more
#VU61756 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-22965		 CWE-94 Critical
Available
Exploited
 - 31.03.2022 SB2022033109
SB2022040109
SB2022040110
and 78 more
#VU59098 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-44832		 CWE-94 Medium
No
No
 - 28.12.2021 SB2021122816
SB2021123002
SB2022010601
and 197 more
#VU59051 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-45105		 CWE-835 Medium
Available
No
 - 18.12.2021 SB2021121802
SB2021121903
SB2021122011
and 169 more
#VU57389 - Resource exhaustion
CVE-2021-42340		 CWE-400 Medium
No
No
 - 15.10.2021 SB2021101507
SB2021110507
SB2021111711
and 28 more
#VU55423 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-33037		 CWE-444 Medium
No
No
 - 29.07.2021 SB2021072907
SB2021080807
SB2021080808
and 30 more
#VU48979 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2020-25649		 CWE-611 Medium
No
No
 - 03.12.2020 SB2020121510
SB2021020321
SB2021042112
and 68 more


Showing elements 1 - 20 out of 25