Known vulnerabilities in OSS Support Tools

Vendor: Oracle
Software: OSS Support Tools
Software CPE: cpe:2.3:a:oracle:oss_support_tools:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 18
Public exploits: 3
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting OSS Support Tools OSS Support Tools is affected by 18 known vulnerabilities: 4 high, 6 medium, 8 low Critical High Medium Low

Vulnerabilities (18)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU101974 - Deserialization of Untrusted Data
CVE-2024-52046		 CWE-502 High
No
No
 - 28.12.2024 SB2024122801
SB20250117140
SB2025020549
and 22 more
#VU98025 - Resource exhaustion
CVE-2024-47554		 CWE-400 Medium
No
No
 - 03.10.2024 SB2024100352
SB2024100421
SB2024101007
and 132 more
#VU84537 - Inadequate Encryption Strength
CVE-2023-48795		 CWE-326 Low
Available
No
 - 19.12.2023 SB2023121903
SB2023121905
SB2023121906
and 343 more
#VU75044 - Uncontrolled Recursion
CVE-2023-1370		 CWE-674 Medium
No
No
 - 12.04.2023 SB2023041258
SB2023041259
SB2023041809
and 130 more
#VU70530 - Deserialization of Untrusted Data
CVE-2022-45047		 CWE-502 High
Available
No
 - 28.12.2022 SB2022122828
SB2022122920
SB2023011148
and 49 more
#VU70441 - Insufficient Verification of Data Authenticity
CVE-2021-37533		 CWE-345 Low
No
No
 - 20.12.2022 SB2022122007
SB2022123001
SB2023011876
and 82 more
#VU62565 - Improper input validation
CVE-2022-21405		 CWE-20 Low
No
No
 - 25.04.2022 SB2022042540
#VU57846 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-41973		 CWE-835 Medium
No
No
 - 01.11.2021 SB2021110114
SB2022042540
SB20230418165
and 4 more
#VU56931 - Memory corruption
CVE-2021-30129		 CWE-119 Medium
No
No
 - 29.09.2021 SB2021092916
SB2021092917
SB2021111715
and 15 more
#VU55372 - Improper input validation
CVE-2021-27568		 CWE-20 High
No
No
 2.12.42 27.07.2021 SB2021072765
SB2021081922
SB2022011837
and 11 more
#VU55044 - Improper input validation
CVE-2021-2351		 CWE-20 High
No
No
 2.12.42 20.07.2021 SB2021072053
SB2022011824
SB2022011825
and 110 more
#VU52743 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2021-2303		 CWE-611 Low
No
No
 2.12.41 29.04.2021 SB2021042911
#VU52252 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-29425		 CWE-22 Low
No
No
 2.12.42 15.04.2021 SB2021041510
SB2021081922
SB2021093016
and 121 more
#VU27519 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-11023		 CWE-79 Low
Available
Exploited
 2.12.41 05.05.2020 SB2020042126
SB2020052033
SB2020052103
and 180 more
#VU24338 - Improper input validation
CVE-2019-15601		 CWE-20 Medium
No
No
 - 16.01.2020 SB2020011605
SB2020041716
SB2020041901
and 3 more
#VU21059 - Heap-based Buffer Overflow
CVE-2019-5482		 CWE-122 Medium
No
No
 - 11.09.2019 SB2019091142
SB2019091143
SB2019091201
and 28 more
#VU13325 - Improper input validation
CVE-2018-0732		 CWE-20 Low
No
No
 19.1 12.06.2018 SB2018061305
SB2018070906
SB2018073005
and 54 more
#VU7277 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-7103		 CWE-79 Low
No
No
 2.12.42 10.12.2016 SB2016072302
SB2017011903
SB2016120801
and 19 more