Known vulnerabilities in Oracle Utilities Testing Accelerator

Vendor: Oracle
Software: Oracle Utilities Testing Accelerator
Software CPE: cpe:2.3:a:oracle:oracle_utilities_testing_accelerator:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 32
Public exploits: 7
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle Utilities Testing Accelerator Oracle Utilities Testing Accelerator is affected by 32 known vulnerabilities: 5 high, 23 medium, 4 low Critical High Medium Low

Vulnerabilities (32)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU122999 - Improper Authorization
CVE-2026-24734		 CWE-285 Medium
No
No
 - 17.02.2026 SB2026021766
SB2026030536
SB2026031245
and 24 more
#VU120231 - Improper Validation of Certificate with Host Mismatch
CVE-2025-68161		 CWE-297 Medium
No
No
 - 22.12.2025 SB2025122245
SB2026012084
SB2026012087
and 98 more
#VU114024 - Resource exhaustion
CVE-2025-48989		 CWE-400 Medium
No
No
 - 13.08.2025 SB2025081375
SB2025081376
SB20250820127
and 49 more
#VU113607 - Uncontrolled Recursion
CVE-2025-48924		 CWE-674 Medium
No
No
 - 04.08.2025 SB2025080422
SB2025080423
SB2025080427
and 177 more
#VU111161 - Resource exhaustion
CVE-2025-48988		 CWE-400 Medium
Available
No
 - 16.06.2025 SB2025061634
SB2025061927
SB20250620145
and 40 more
#VU98796 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-38819		 CWE-22 Medium
Available
No
 6.0.0.3.1 17.10.2024 SB2024101781
SB2024112849
SB2024120331
and 54 more
#VU98025 - Resource exhaustion
CVE-2024-47554		 CWE-400 Medium
No
No
 - 03.10.2024 SB2024100352
SB2024100421
SB2024101007
and 132 more
#VU93732 - Resource Management Errors
CVE-2024-34750		 CWE-399 Medium
No
No
 6.0.0.3.1 03.07.2024 SB2024070346
SB20240711245
SB2024071542
and 56 more
#VU87779 - Exposure of sensitive information to an unauthorized actor
CVE-2024-29025		 CWE-200 Medium
No
No
 6.0.0.3.1 25.03.2024 SB2024032532
SB2024040230
SB2024042995
and 95 more
#VU75409 - Improper input validation
CVE-2023-20863		 CWE-20 Medium
No
No
 - 21.04.2023 SB2023042131
SB2023042132
SB2023050511
and 88 more
#VU75408 - Security Features
CVE-2023-20862		 CWE-254 Medium
No
No
 - 21.04.2023 SB2023042130
SB2023042132
SB2023053121
and 20 more
#VU75407 - Security Features
CVE-2023-20873		 CWE-254 Medium
No
No
 - 21.04.2023 SB2023042129
SB2023042132
SB2023060816
and 16 more
#VU73970 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-48285		 CWE-22 Medium
No
No
 - 23.03.2023 SB2023032314
SB2023032315
SB2023042510
and 22 more
#VU73957 - Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
CVE-2023-28708		 CWE-614 Low
No
No
 - 22.03.2023 SB2023032237
SB2023032939
SB2023032945
and 53 more
#VU70527 - Improper input validation
CVE-2022-41966		 CWE-20 Medium
Available
No
 - 28.12.2022 SB2022122822
SB2023011211
SB2023020616
and 53 more
#VU70385 - Deserialization of Untrusted Data
CVE-2022-1471		 CWE-502 High
Available
No
 - 15.12.2022 SB2022121539
SB2022121540
SB2022121928
and 124 more
#VU70118 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-41881		 CWE-835 Medium
No
No
 - 12.12.2022 SB2022121215
SB2023011210
SB2023011757
and 74 more
#VU64627 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-34305		 CWE-79 Medium
Available
No
 - 23.06.2022 SB2022062338
SB2022071177
SB2022071801
and 26 more
#VU64152 - Deserialization of Untrusted Data
CVE-2022-25647		 CWE-502 Medium
No
No
 - 10.06.2022 SB2021120221
SB2022061003
SB2022061421
and 94 more
#VU63345 - Improper Authorization
CVE-2022-22978		 CWE-285 High
Available
No
 - 17.05.2022 SB2022051717
SB2022052009
SB2022052010
and 20 more


Showing elements 1 - 20 out of 32