Known vulnerabilities in Oracle Transportation Management

Vendor: Oracle
Software: Oracle Transportation Management
Software CPE: cpe:2.3:a:oracle:oracle_transportation_management:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 22
Public exploits: 8
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle Transportation Management Oracle Transportation Management is affected by 22 known vulnerabilities: 4 high, 13 medium, 5 low Critical High Medium Low

Vulnerabilities (22)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU111162 - Resource exhaustion
CVE-2025-48976		 CWE-400 Medium
Available
No
 - 16.06.2025 SB2025061634
SB2025061635
SB2025061927
and 157 more
#VU121857 - Out-of-bounds read
CVE-2019-2487		 CWE-125 Medium
No
No
 - 24.12.2024 SB2019011531
#VU80788 - Resource exhaustion
CVE-2023-42503		 CWE-400 Medium
No
No
 - 14.09.2023 SB2023091434
SB2023111725
SB2023112014
and 30 more
#VU72427 - Allocation of Resources Without Limits or Throttling
CVE-2023-24998		 CWE-770 Medium
Available
No
 - 20.02.2023 SB2023022046
SB2023022047
SB2023030917
and 203 more
#VU68501 - Improper input validation
CVE-2022-39420		 CWE-20 Medium
No
No
 - 19.10.2022 SB2022101950
#VU68502 - Improper input validation
CVE-2022-21591		 CWE-20 Medium
No
No
 - 19.10.2022 SB2022101950
#VU68503 - Improper input validation
CVE-2022-39411		 CWE-20 Medium
No
No
 - 19.10.2022 SB2022101950
#VU68504 - Improper input validation
CVE-2022-39409		 CWE-20 Low
No
No
 - 19.10.2022 SB2022101950
#VU67008 - Improper input validation
CVE-2021-35616		 CWE-20 Medium
Available
No
 - 06.09.2022 SB2021101973
#VU67009 - Improper input validation
CVE-2021-2476		 CWE-20 Medium
No
No
 - 06.09.2022 SB2021101973
#VU65495 - Improper input validation
CVE-2022-34169		 CWE-20 High
Available
No
 - 20.07.2022 SB2022072046
SB2022072047
SB2022072140
and 137 more
#VU62564 - Improper input validation
CVE-2022-21480		 CWE-20 Medium
No
No
 - 25.04.2022 SB2022042528
#VU59965 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-23437		 CWE-835 Medium
No
No
 - 25.01.2022 SB2022012503
SB2022041946
SB2022042249
and 92 more
#VU55416 - Improper input validation
CVE-2012-0881		 CWE-20 Medium
No
No
 - 28.07.2021 SB2021072822
SB2023070731
SB2023102710
and 19 more
#VU28158 - Deserialization of Untrusted Data
CVE-2020-9484		 CWE-502 High
Available
No
 - 21.05.2020 SB2020052124
SB2020052501
SB2020053102
and 47 more
#VU27269 - Improper input validation
CVE-2020-2744		 CWE-20 Medium
No
No
 - 23.04.2020 SB2020042367
#VU24399 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-0219		 CWE-79 Low
No
No
 - 20.01.2020 SB2020012009
SB2020013107
SB2021042514
and 2 more
#VU18236 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2019-0232		 CWE-78 High
Available
Exploited
 - 11.04.2019 SB2019041101
SB2019052003
SB2020012015
and 5 more
#VU18092 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2019-11358		 CWE-1321 Low
Available
No
 - 28.03.2019 SB2019032804
SB2019041026
SB2019041801
and 155 more
#VU639 - Improper Access Control
CVE-2016-2107		 CWE-284 High
Available
No
 - 23.09.2016 SB2016050504
SB2016061413
SB2016050514
and 19 more


Showing elements 1 - 20 out of 22