Known vulnerabilities in Oracle Utilities Application Framework - page 2

Vendor: Oracle
Software: Oracle Utilities Application Framework
Software CPE: cpe:2.3:a:oracle:oracle_utilities_application_framework:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 30
Public exploits: 5
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle Utilities Application Framework Oracle Utilities Application Framework is affected by 30 known vulnerabilities: 3 high, 23 medium, 4 low Critical High Medium Low

Vulnerabilities (30)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU75044 - Uncontrolled Recursion
CVE-2023-1370		 CWE-674 Medium
No
No
 - 12.04.2023 SB2023041258
SB2023041259
SB2023041809
and 130 more
#VU72427 - Allocation of Resources Without Limits or Throttling
CVE-2023-24998		 CWE-770 Medium
Available
No
 - 20.02.2023 SB2023022046
SB2023022047
SB2023030917
and 203 more
#VU71245 - Improper input validation
CVE-2023-21829		 CWE-20 Medium
No
No
 - 17.01.2023 SB2023011742
SB20231017120
#VU70527 - Improper input validation
CVE-2022-41966		 CWE-20 Medium
Available
No
 - 28.12.2022 SB2022122822
SB2023011211
SB2023020616
and 53 more
#VU69809 - Out-of-bounds write
CVE-2022-42920		 CWE-787 High
No
No
 - 01.12.2022 SB2022120151
SB2022120154
SB2022120628
and 56 more
#VU69674 - Resource exhaustion
CVE-2022-40150		 CWE-400 Medium
No
No
 - 29.11.2022 SB2022112909
SB2022112941
SB2022121101
and 46 more
#VU65835 - Incorrect Regular Expression
CVE-2022-31129		 CWE-185 Medium
No
No
 - 27.07.2022 SB2022072729
SB2022072901
SB2022081048
and 102 more
#VU59691 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-23305		 CWE-89 Medium
No
No
 - 18.01.2022 SB2022011818
SB2022012640
SB2022012641
and 94 more
#VU51511 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-13936		 CWE-94 High
No
No
 - 16.03.2021 SB2021031618
SB2021072614
SB2022011911
and 45 more
#VU48543 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-25638		 CWE-89 High
No
No
 - 19.11.2020 SB2020111901
SB2021050201
SB2021063003
and 8 more


Showing elements 21 - 40 out of 30