Known vulnerabilities in Oracle Service Bus

Known vulnerabilities in Oracle Service Bus

Vendor: Oracle

Software: Oracle Service Bus

Software CPE: cpe:2.3:a:oracle:oracle_service_bus:*:*:*:*:*:*:*:*

Website: https://www.oracle.com

Total vulnerabilities: 14

Public exploits: 3

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Vulnerabilities (14)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU113607 - Uncontrolled Recursion CVE-2025-48924	CWE-674	Medium	No	No	-	04.08.2025	SB2025080422 SB2025080423 SB2025080427 and 177 more
#VU111165 - Improper Access Control CVE-2025-48734	CWE-284	Medium	No	No	-	16.06.2025	SB2025061643 SB2025061644 SB2025061645 and 141 more
#VU111162 - Resource exhaustion CVE-2025-48976	CWE-400	Medium	Available	No	-	16.06.2025	SB2025061634 SB2025061635 SB2025061927 and 156 more
#VU98632 - Improper input validation CVE-2024-21246	CWE-20	Medium	No	No	-	15.10.2024	SB20241015158
#VU98637 - Improper input validation CVE-2024-21205	CWE-20	Medium	No	No	-	15.10.2024	SB20241015158
#VU98025 - Resource exhaustion CVE-2024-47554	CWE-400	Medium	No	No	-	03.10.2024	SB2024100352 SB2024100421 SB2024101007 and 132 more
#VU82276 - Allocation of Resources Without Limits or Throttling CVE-2023-5072	CWE-770	Medium	No	No	-	20.10.2023	SB2023102017 SB2023102018 SB2023113056 and 97 more
#VU77102 - Stack-based buffer overflow CVE-2022-45688	CWE-121	Medium	No	No	-	08.06.2023	SB2023060836 SB2023060927 SB2023071959 and 35 more
#VU72427 - Allocation of Resources Without Limits or Throttling CVE-2023-24998	CWE-770	Medium	Available	No	-	20.02.2023	SB2023022046 SB2023022047 SB2023030917 and 202 more
#VU61721 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2021-33813	CWE-611	Medium	No	No	-	29.03.2022	SB2021061628 SB2022032929 SB2022032930 and 39 more
#VU58977 - Deserialization of Untrusted Data CVE-2021-4104	CWE-502	Medium	No	No	-	15.12.2021	SB2021121507 SB2021121647 SB2021121720 and 119 more
#VU52252 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2021-29425	CWE-22	Low	No	No	-	15.04.2021	SB2021041510 SB2021081922 SB2021093016 and 121 more
#VU20844 - Protection Mechanism Failure CVE-2019-10086	CWE-693	Low	No	No	-	04.09.2019	SB2019090405 SB2019090406 SB2019121902 and 112 more
#VU18092 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\') CVE-2019-11358	CWE-1321	Low	Available	No	-	28.03.2019	SB2019032804 SB2019041026 SB2019041801 and 155 more