Known vulnerabilities in Oracle Utilities Application Framework - page 2

Vendor: Oracle
Software: Oracle Utilities Application Framework
Software CPE: cpe:2.3:a:oracle:oracle_utilities_application_framework:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 30
Public exploits: 5
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle Utilities Application Framework Oracle Utilities Application Framework is affected by 30 known vulnerabilities: 3 high, 23 medium, 4 low Critical High Medium Low

Vulnerabilities (30)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU89218 - Resource exhaustion
CVE-2024-29857		 CWE-400 Medium
No
No
 - 07.05.2024 SB2024050731
SB2024061019
SB20240611170
and 69 more
#VU87615 - Resource exhaustion
CVE-2023-52428		 CWE-400 Medium
No
No
 - 19.03.2024 SB2024031924
SB2024040107
SB2024041643
and 43 more
#VU71245 - Improper input validation
CVE-2023-21829		 CWE-20 Medium
No
No
 - 17.01.2023 SB2023011742
SB20231017120
#VU70527 - Improper input validation
CVE-2022-41966		 CWE-20 Medium
Available
No
 - 28.12.2022 SB2022122822
SB2023011211
SB2023020616
and 53 more
#VU69809 - Out-of-bounds write
CVE-2022-42920		 CWE-787 High
No
No
 - 01.12.2022 SB2022120151
SB2022120154
SB2022120628
and 56 more
#VU65835 - Incorrect Regular Expression
CVE-2022-31129		 CWE-185 Medium
No
No
 - 27.07.2022 SB2022072729
SB2022072901
SB2022081048
and 102 more
#VU59691 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-23305		 CWE-89 Medium
No
No
 - 18.01.2022 SB2022011818
SB2022012640
SB2022012641
and 98 more
#VU51511 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-13936		 CWE-94 High
No
No
 - 16.03.2021 SB2021031618
SB2021072614
SB2022011911
and 45 more
#VU48543 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-25638		 CWE-89 High
No
No
 - 19.11.2020 SB2020111901
SB2021050201
SB2021063003
and 8 more
#VU27052 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11022		 CWE-79 Low
Available
No
 - 21.04.2020 SB2020042126
SB2020052033
SB2020052103
and 181 more


Showing elements 21 - 40 out of 30