Known vulnerabilities in Oracle SD-WAN Edge - page 2
Vendor:
Oracle
Software:
Oracle SD-WAN Edge
Software CPE:
cpe:2.3:a:oracle:oracle_sd-wan_edge:*:*:*:*:*:*:*:*
Website:
https://www.oracle.com
Total vulnerabilities:
49
Public exploits:
11
Known exploited (KEV):
3
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
Vulnerabilities (49)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU83533 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2023-46589 |
CWE-444 | Medium | - | 28.11.2023 | - | ||
| #VU77622 - Exposure of sensitive information to an unauthorized actor CVE-2023-34981 |
CWE-200 | Medium | - | 22.06.2023 | - | ||
| #VU77102 - Stack-based buffer overflow CVE-2022-45688 |
CWE-121 | Medium | - | 08.06.2023 | - | ||
| #VU76427 - Resource Management Errors CVE-2023-20883 |
CWE-399 | Medium | - | 23.05.2023 | - | ||
| #VU75562 - Improper input validation CVE-2023-20861 |
CWE-20 | Medium | - | 27.04.2023 | - | ||
| #VU75409 - Improper input validation CVE-2023-20863 |
CWE-20 | Medium | - | 21.04.2023 | - | ||
| #VU74201 - Memory corruption CVE-2022-4899 |
CWE-119 | Medium | - | 30.03.2023 | - | ||
| #VU73957 - Sensitive Cookie in HTTPS Session Without 'Secure' Attribute CVE-2023-28708 |
CWE-614 | Low | - | 22.03.2023 | - | ||
| #VU70666 - Improper Control of Generation of Code ('Code Injection') CVE-2022-45143 |
CWE-94 | Medium | - | 03.01.2023 | - | ||
| #VU70385 - Deserialization of Untrusted Data CVE-2022-1471 |
CWE-502 | High | - | 15.12.2022 | - | ||
| #VU68866 - Improper Authorization CVE-2022-31692 |
CWE-285 | High | - | 01.11.2022 | - | ||
| #VU68635 - Deserialization of Untrusted Data CVE-2022-42003 |
CWE-502 | Medium | - | 25.10.2022 | - | ||
| #VU67664 - Stack-based buffer overflow CVE-2022-38752 |
CWE-121 | Medium | - | 27.09.2022 | - | ||
| #VU63345 - Improper Authorization CVE-2022-22978 |
CWE-285 | High | - | 17.05.2022 | - | ||
| #VU63085 - Improper input validation CVE-2022-22971 |
CWE-20 | Medium | - | 12.05.2022 | - | ||
| #VU62765 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2022-1292 |
CWE-78 | Medium | - | 03.05.2022 | - | ||
| #VU61799 - Out-of-bounds write CVE-2020-36518 |
CWE-787 | Medium | - | 01.04.2022 | - | ||
| #VU61756 - Improper Control of Generation of Code ('Code Injection') CVE-2022-22965 |
CWE-94 | Critical | - | 31.03.2022 | - | ||
| #VU60007 - Improper input validation CVE-2021-4034 |
CWE-20 | Medium | - | 26.01.2022 | - | ||
| #VU59056 - Memory corruption CVE-2021-44790 |
CWE-119 | Critical | - | 20.12.2021 | - |
Showing elements 21 - 40 out of 49