Known vulnerabilities in Oracle WebCenter Portal - page 3

Vendor: Oracle
Software: Oracle WebCenter Portal
Software CPE: cpe:2.3:a:oracle:oracle_webcenter_portal:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 63
Public exploits: 5
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle WebCenter Portal Oracle WebCenter Portal is affected by 63 known vulnerabilities: 12 high, 44 medium, 7 low Critical High Medium Low

Vulnerabilities (63)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU59051 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-45105		 CWE-835 Medium
Available
No
 - 18.12.2021 SB2021121802
SB2021121903
SB2021122011
and 169 more
#VU54675 - Deserialization of Untrusted Data
CVE-2021-29505		 CWE-502 Medium
Available
No
 - 12.07.2021 SB2021071217
SB2021071218
SB2021071389
and 19 more
#VU52562 - Deserialization of Untrusted Data
CVE-2021-21345		 CWE-502 High
No
No
 - 26.04.2021 SB2021042607
SB2021042608
SB2021043019
and 28 more
#VU49086 - Comparison using wrong factors
CVE-2020-28052		 CWE-1025 High
Available
No
 - 18.12.2020 SB2020121801
SB2021031707
SB2021042112
and 16 more
#VU47770 - Improper input validation
CVE-2020-9281		 CWE-20 Medium
No
No
 - 21.10.2020 SB2020102103
SB2020102951
SB2021012078
and 8 more
#VU30049 - Improper input validation
CVE-2020-14552		 CWE-20 Medium
No
No
 - 16.07.2020 SB2020071684
#VU30033 - Improper input validation
CVE-2020-14611		 CWE-20 High
No
No
 - 16.07.2020 SB2020071684
#VU28238 - Exposed Dangerous Method or Function
CVE-2020-10683		 CWE-749 Medium
No
No
 - 26.05.2020 SB2020050106
SB2020052616
SB2020071632
and 43 more
#VU27513 - Resource exhaustion
CVE-2020-11612		 CWE-400 Medium
No
No
 - 04.05.2020 SB2020050435
SB2020073033
SB2021012210
and 35 more
#VU34420 - Missing release of memory after effective lifetime
CVE-2020-9489		 CWE-401 Medium
No
No
 - 27.04.2020 SB2020042727
SB2020102706
SB2020102845
and 2 more
#VU25048 - Improper input validation
CVE-2020-2555		 CWE-20 High
Available
Exploited
 - 07.02.2020 SB2020011477
SB2020102703
SB2020102939
and 4 more
#VU24468 - Improper input validation
CVE-2019-0227		 CWE-20 Medium
Available
No
 - 21.01.2020 SB2020012205
SB2020012308
SB2020012309
and 40 more
#VU22875 - Deserialization of Untrusted Data
CVE-2019-10173		 CWE-502 High
No
No
 - 20.11.2019 SB2019072308
SB2019112016
SB2019121922
and 11 more
#VU22545 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2019-12415		 CWE-611 High
No
No
 - 06.11.2019 SB2019110635
SB2020012308
SB2020012309
and 42 more
#VU22272 - Missing release of memory after effective lifetime
CVE-2019-17359		 CWE-401 Medium
No
No
 - 24.10.2019 SB2019102418
SB2020011478
SB2020042338
and 14 more
#VU22185 - Resource Management Errors
CVE-2019-12402		 CWE-399 Medium
No
No
 - 23.10.2019 SB2019083014
SB2020042210
SB2020071665
and 13 more
#VU21750 - Improper input validation
CVE-2019-17531		 CWE-20 Medium
No
No
 - 13.10.2019 SB2019100711
SB2019120206
SB2019121120
and 24 more
#VU21593 - Improper input validation
CVE-2019-16943		 CWE-20 Medium
No
No
 - 07.10.2019 SB2019100711
SB2019100716
SB2019120206
and 34 more
#VU20844 - Protection Mechanism Failure
CVE-2019-10086		 CWE-693 Low
No
No
 - 04.09.2019 SB2019090405
SB2019090406
SB2019121902
and 112 more
#VU19941 - Exposure of sensitive information to an unauthorized actor
CVE-2019-12086		 CWE-200 Medium
No
No
 - 06.08.2019 SB2019052407
SB2019092703
SB2019100116
and 30 more


Showing elements 41 - 60 out of 63