Known vulnerabilities in Oracle Web Services Manager

Vendor: Oracle

Software: Oracle Web Services Manager

Software CPE: cpe:2.3:a:oracle:oracle_web_services_manager:*:*:*:*:*:*:*:*

Website: https://www.oracle.com

Total vulnerabilities: 5

Public exploits: 0

Known exploited (KEV): 1

Highest CVSSv4 Score: 9.3

Vulnerabilities (5)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU126820 - Missing Authentication for Critical Function CVE-2026-21992	CWE-306	Critical	No	Exploited	-	22.04.2026	SB20260422172
#VU113607 - Uncontrolled Recursion CVE-2025-48924	CWE-674	Medium	No	No	-	04.08.2025	SB2025080422 SB2025080423 SB2025080427 and 181 more
#VU71313 - Improper input validation CVE-2023-21862	CWE-20	High	No	No	-	18.01.2023	SB2023011839
#VU69289 - Exposed Dangerous Method or Function CVE-2022-45378	CWE-749	High	No	No	-	14.11.2022	SB2022111427 SB2024041740 SB20240718115 and 1 more
#VU62523 - Improper input validation CVE-2022-21497	CWE-20	High	No	No	-	22.04.2022	SB2022042287