Known vulnerabilities in Oracle SD-WAN Edge
Vendor:
Oracle
Software:
Oracle SD-WAN Edge
Software CPE:
cpe:2.3:a:oracle:oracle_sd-wan_edge:*:*:*:*:*:*:*:*
Website:
https://www.oracle.com
Total vulnerabilities:
49
Public exploits:
11
Known exploited (KEV):
3
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
Vulnerabilities (49)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU105485 - Improper input validation CVE-2025-24813 |
CWE-20 | Critical | - | 10.03.2025 | - | ||
| #VU100676 - Improper Authorization CVE-2024-38827 |
CWE-285 | Medium | - | 19.11.2024 | - | ||
| #VU98796 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2024-38819 |
CWE-22 | Medium | - | 17.10.2024 | - | ||
| #VU96667 - NULL Pointer Dereference CVE-2024-8006 |
CWE-476 | Low | - | 02.09.2024 | - | ||
| #VU93732 - Resource Management Errors CVE-2024-34750 |
CWE-399 | Medium | - | 03.07.2024 | - | ||
| #VU93542 - Improper input validation CVE-2024-38475 |
CWE-20 | Critical | - | 01.07.2024 | - | ||
| #VU93519 - Out-of-bounds read CVE-2024-37371 |
CWE-125 | Medium | - | 01.07.2024 | - | ||
| #VU89801 - Server-Side Request Forgery (SSRF) CVE-2024-22262 |
CWE-918 | Medium | - | 24.05.2024 | - | ||
| #VU89709 - Memory corruption CVE-2024-33602 |
CWE-119 | Medium | - | 21.05.2024 | - | ||
| #VU88115 - Heap-based Buffer Overflow CVE-2024-31080 |
CWE-122 | Low | - | 04.04.2024 | - | ||
| #VU87607 - Improper Access Control CVE-2024-22257 |
CWE-284 | Medium | - | 19.03.2024 | - | ||
| #VU86378 - Resource exhaustion CVE-2023-50868 |
CWE-400 | Medium | - | 13.02.2024 | - | ||
| #VU85846 - Improper input validation CVE-2024-22233 |
CWE-20 | Medium | - | 26.01.2024 | - | ||
| #VU85447 - Heap-based Buffer Overflow CVE-2023-6816 |
CWE-122 | Low | 9.1.1.9.0 | 16.01.2024 |
SB2024011648 SB2024011649 SB2024011650 and 44 more |
||
| #VU84537 - Inadequate Encryption Strength CVE-2023-48795 |
CWE-326 | Low | - | 19.12.2023 | - | ||
| #VU83581 - Improper input validation CVE-2023-34055 |
CWE-20 | Medium | - | 29.11.2023 | - | ||
| #VU82276 - Allocation of Resources Without Limits or Throttling CVE-2023-5072 |
CWE-770 | Medium | - | 20.10.2023 | - | ||
| #VU71242 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2022-36760 |
CWE-444 | Medium | 9.1.1.9.0 | 17.01.2023 |
SB2023011740 SB2023011805 SB2023012728 and 33 more |
||
| #VU69394 - Out-of-bounds write CVE-2022-2601 |
CWE-787 | Low | 9.1.1.9.0 | 16.11.2022 |
SB2022111652 SB2022111654 SB2022111661 and 44 more |
||
| #VU64559 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2022-2068 |
CWE-78 | Medium | - | 21.06.2022 | - |
Showing elements 1 - 20 out of 49