Known vulnerabilities in Oracle Utilities Network Management System

Vendor: Oracle
Software: Oracle Utilities Network Management System
Software CPE: cpe:2.3:a:oracle:oracle_utilities_network_management_system:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 22
Public exploits: 3
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle Utilities Network Management System Oracle Utilities Network Management System is affected by 22 known vulnerabilities: 3 high, 13 medium, 6 low Critical High Medium Low

Vulnerabilities (22)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU119230 - Allocation of Resources Without Limits or Throttling
CVE-2025-66418		 CWE-770 Medium
No
No
 - 05.12.2025 SB2025120581
SB2025121208
SB2025121938
and 93 more
#VU114026 - Resource exhaustion
CVE-2025-55163		 CWE-400 Medium
No
No
 - 13.08.2025 SB2025081378
SB2025081948
SB2025081949
and 70 more
#VU103770 - Improper input validation
CVE-2025-24970		 CWE-20 Medium
No
No
 - 11.02.2025 SB2025021186
SB202502197190
SB2025030409
and 88 more
#VU97574 - Uncontrolled Recursion
CVE-2024-7254		 CWE-674 Medium
No
No
 - 19.09.2024 SB2024091904
SB2024100103
SB2024101050
and 90 more
#VU92262 - Exposure of sensitive information to an unauthorized actor
CVE-2024-37891		 CWE-200 Low
No
No
 - 19.06.2024 SB2024061955
SB20240625146
SB2024062605
and 193 more
#VU90156 - Security Features
CVE-2024-35195		 CWE-254 Low
No
No
 - 31.05.2024 SB2024053174
SB2024053188
SB2024053192
and 116 more
#VU87779 - Exposure of sensitive information to an unauthorized actor
CVE-2024-29025		 CWE-200 Medium
No
No
 - 25.03.2024 SB2024032532
SB2024040230
SB2024042995
and 95 more
#VU82226 - Inefficient Regular Expression Complexity
CVE-2022-40896		 CWE-1333 Medium
No
No
 - 18.10.2023 SB20231018123
SB2023121111
SB2023122110
and 15 more
#VU81728 - Resource exhaustion
CVE-2023-44487		 CWE-400 High
Available
Exploited
 - 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 648 more
#VU80788 - Resource exhaustion
CVE-2023-42503		 CWE-400 Medium
No
No
 - 14.09.2023 SB2023091434
SB2023111725
SB2023112014
and 29 more
#VU77573 - Resource exhaustion
CVE-2023-34462		 CWE-400 Medium
No
No
 - 20.06.2023 SB2023062026
SB2023072521
SB2023072539
and 98 more
#VU77107 - Incorrect Default Permissions
CVE-2023-2976		 CWE-276 Low
No
No
 - 08.06.2023 SB2023060849
SB2023071712
SB2023072512
and 157 more
#VU70385 - Deserialization of Untrusted Data
CVE-2022-1471		 CWE-502 High
Available
No
 - 15.12.2022 SB2022121539
SB2022121540
SB2022121928
and 124 more
#VU70118 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-41881		 CWE-835 Medium
No
No
 - 12.12.2022 SB2022121215
SB2023011210
SB2023011757
and 74 more
#VU61810 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-43797		 CWE-444 Medium
No
No
 - 02.04.2022 SB2021120923
SB2022040202
SB2022042223
and 49 more
#VU59051 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-45105		 CWE-835 Medium
Available
No
 - 18.12.2021 SB2021121802
SB2021121903
SB2021122011
and 169 more
#VU58271 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-41184		 CWE-79 Medium
Available
No
 - 20.11.2021 SB2021112002
SB2022030804
SB2022041935
and 74 more
#VU52252 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-29425		 CWE-22 Low
No
No
 - 15.04.2021 SB2021041510
SB2021081922
SB2021093016
and 121 more
#VU28238 - Exposed Dangerous Method or Function
CVE-2020-10683		 CWE-749 Medium
No
No
 - 26.05.2020 SB2020050106
SB2020052616
SB2020071632
and 43 more
#VU47428 - Permissions, Privileges, and Access Controls
CVE-2020-11979		 CWE-264 Low
No
No
 - 14.05.2020 SB2020100804
SB2020100815
SB2020111614
and 51 more


Showing elements 1 - 20 out of 22