Known vulnerabilities in Oracle WebCenter Content

Known vulnerabilities in Oracle WebCenter Content

Vendor: Oracle

Software: Oracle WebCenter Content

Software CPE: cpe:2.3:a:oracle:oracle_webcenter_content:*:*:*:*:*:*:*:*

Website: https://www.oracle.com

Total vulnerabilities: 12

Public exploits: 1

Known exploited (KEV): 1

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (12)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU88661 - Improper input validation CVE-2023-29081	CWE-20	Low	No	No	-	17.04.2024	SB2024041768 SB2024042353 SB2024061407 and 7 more
#VU85463 - Improper input validation CVE-2024-20928	CWE-20	Medium	No	No	-	16.01.2024	SB2024011674
#VU82276 - Allocation of Resources Without Limits or Throttling CVE-2023-5072	CWE-770	Medium	No	No	-	20.10.2023	SB2023102017 SB2023102018 SB2023113056 and 97 more
#VU82225 - Improper input validation CVE-2023-22126	CWE-20	Medium	No	No	-	18.10.2023	SB20231018107
#VU71373 - Command injection CVE-2021-43113	CWE-77	High	No	No	-	20.01.2023	SB2021121539 SB2023012005 SB20230719103 and 3 more
#VU70441 - Insufficient Verification of Data Authenticity CVE-2021-37533	CWE-345	Low	No	No	-	20.12.2022	SB2022122007 SB2022123001 SB2023011876 and 82 more
#VU68307 - Improper Control of Generation of Code ('Code Injection') CVE-2022-42889	CWE-94	High	Available	Exploited	-	14.10.2022	SB2022101405 SB2022102709 SB2022110306 and 91 more
#VU65655 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2019-10172	CWE-611	Medium	No	No	-	21.07.2022	SB2022072128 SB2021021828 SB2023042803 and 18 more
#VU65487 - Improper input validation CVE-2022-21552	CWE-20	Medium	No	No	-	20.07.2022	SB2022072028
#VU59691 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2022-23305	CWE-89	Medium	No	No	-	18.01.2022	SB2022011818 SB2022012640 SB2022012641 and 94 more
#VU20844 - Protection Mechanism Failure CVE-2019-10086	CWE-693	Low	No	No	-	04.09.2019	SB2019090405 SB2019090406 SB2019121902 and 112 more
#VU11929 - Permissions, Privileges, and Access Controls CVE-2018-2828	CWE-264	Low	No	No	-	19.04.2018	SB2018041914