Known vulnerabilities in Oracle SD-WAN Edge

Vendor: Oracle
Software: Oracle SD-WAN Edge
Software CPE: cpe:2.3:a:oracle:oracle_sd-wan_edge:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 49
Public exploits: 11
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle SD-WAN Edge Oracle SD-WAN Edge is affected by 49 known vulnerabilities: 4 critical, 6 high, 30 medium, 9 low Critical High Medium Low

Vulnerabilities (49)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU105485 - Improper input validation
CVE-2025-24813		 CWE-20 Critical
Available
Exploited
 - 10.03.2025 SB2025031069
SB2025031976
SB2025032642
and 48 more
#VU100676 - Improper Authorization
CVE-2024-38827		 CWE-285 Medium
No
No
 - 19.11.2024 SB2024111987
SB2025012185
SB2025012188
and 30 more
#VU98796 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-38819		 CWE-22 Medium
Available
No
 - 17.10.2024 SB2024101781
SB2024112849
SB2024120331
and 54 more
#VU96667 - NULL Pointer Dereference
CVE-2024-8006		 CWE-476 Low
No
No
 - 02.09.2024 SB2024090219
SB2024090220
SB2024091147
and 13 more
#VU93732 - Resource Management Errors
CVE-2024-34750		 CWE-399 Medium
No
No
 - 03.07.2024 SB2024070346
SB20240711245
SB2024071542
and 56 more
#VU93542 - Improper input validation
CVE-2024-38475		 CWE-20 Critical
Available
No
 - 01.07.2024 SB2024070155
SB20240702144
SB2024070402
and 54 more
#VU93519 - Out-of-bounds read
CVE-2024-37371		 CWE-125 Medium
No
No
 - 01.07.2024 SB2024070148
SB2024070491
SB2024070496
and 114 more
#VU89801 - Server-Side Request Forgery (SSRF)
CVE-2024-22262		 CWE-918 Medium
No
No
 - 24.05.2024 SB2024052420
SB2024052423
SB2024052708
and 76 more
#VU89709 - Memory corruption
CVE-2024-33602		 CWE-119 Medium
No
No
 - 21.05.2024 SB2024052147
SB2024052148
SB2024052305
and 91 more
#VU88115 - Heap-based Buffer Overflow
CVE-2024-31080		 CWE-122 Low
No
No
 - 04.04.2024 SB2024040412
SB2024040418
SB2024040419
and 46 more
#VU87607 - Improper Access Control
CVE-2024-22257		 CWE-284 Medium
No
No
 - 19.03.2024 SB2024031915
SB2024041659
SB2024041660
and 26 more
#VU86378 - Resource exhaustion
CVE-2023-50868		 CWE-400 Medium
Available
No
 - 13.02.2024 SB2024021325
SB2024021330
SB2024021329
and 143 more
#VU85846 - Improper input validation
CVE-2024-22233		 CWE-20 Medium
No
No
 - 26.01.2024 SB2024012665
SB2024041646
SB2024041653
and 5 more
#VU85447 - Heap-based Buffer Overflow
CVE-2023-6816		 CWE-122 Low
No
No
 9.1.1.9.0 16.01.2024 SB2024011648
SB2024011649
SB2024011650
and 44 more
#VU84537 - Inadequate Encryption Strength
CVE-2023-48795		 CWE-326 Low
Available
No
 - 19.12.2023 SB2023121903
SB2023121905
SB2023121906
and 343 more
#VU83581 - Improper input validation
CVE-2023-34055		 CWE-20 Medium
No
No
 - 29.11.2023 SB2023112967
SB2024011660
SB2024011661
and 22 more
#VU82276 - Allocation of Resources Without Limits or Throttling
CVE-2023-5072		 CWE-770 Medium
No
No
 - 20.10.2023 SB2023102017
SB2023102018
SB2023113056
and 97 more
#VU71242 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-36760		 CWE-444 Medium
No
No
 9.1.1.9.0 17.01.2023 SB2023011740
SB2023011805
SB2023012728
and 33 more
#VU69394 - Out-of-bounds write
CVE-2022-2601		 CWE-787 Low
No
No
 9.1.1.9.0 16.11.2022 SB2022111652
SB2022111654
SB2022111661
and 44 more
#VU64559 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-2068		 CWE-78 Medium
No
No
 - 21.06.2022 SB2022062120
SB2022062125
SB2022062236
and 135 more


Showing elements 1 - 20 out of 49