Known vulnerabilities in Oracle REST Data Services - page 2

Vendor: Oracle
Software: Oracle REST Data Services
Software CPE: cpe:2.3:a:oracle:ords:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 30
Public exploits: 6
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle REST Data Services Oracle REST Data Services is affected by 30 known vulnerabilities: 5 high, 19 medium, 6 low Critical High Medium Low

Vulnerabilities (30)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU59923 - Improper input validation
CVE-2021-32014		 CWE-20 Low
No
No
 21.2.4 23.01.2022 SB2022012305
#VU56964 - Improper Access Control
CVE-2021-34429		 CWE-284 Medium
Available
No
 22.1.1 30.09.2021 SB2021093014
SB2021093016
SB2022012745
and 25 more
#VU52385 - Improper input validation
CVE-2020-27223		 CWE-20 Medium
Available
No
 20.4.3.050.1904 21.04.2021 SB2021042107
SB2021063002
SB2021063034
and 19 more
#VU52252 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-29425		 CWE-22 Low
No
No
 21.2.0 15.04.2021 SB2021041510
SB2021081922
SB2021093016
and 121 more
#VU51876 - Resource exhaustion
CVE-2021-28165		 CWE-400 Medium
No
No
 21.2.0, 21.3 01.04.2021 SB2021040179
SB2021042208
SB2021050704
and 56 more
#VU27519 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11023		 CWE-79 Low
Available
Exploited
 20.2.1 05.05.2020 SB2020042126
SB2020052033
SB2020052103
and 180 more
#VU13529 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2017-7658		 CWE-444 Low
No
No
 - 02.07.2018 SB2018070205
SB2018082001
SB2020102711
and 17 more
#VU47933 - Exposure of sensitive information to an unauthorized actor
CVE-2020-14744		 CWE-200 Medium
No
No
 20.2.1 26.06.2018 SB2020102711
#VU47934 - Exposure of sensitive information to an unauthorized actor
CVE-2020-14745		 CWE-200 Medium
No
No
 20.2.1 26.06.2018 SB2020102711
#VU12312 - Deserialization of Untrusted Data
CVE-2016-1000031		 CWE-502 High
No
No
 - 01.05.2018 SB2017111432
SB2018110601
SB2019051512
and 39 more


Showing elements 21 - 40 out of 30