Known vulnerabilities in Oracle SD-WAN Aware

Vendor: Oracle
Software: Oracle SD-WAN Aware
Software CPE: cpe:2.3:a:oracle:sd-wan_aware:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 7
Public exploits: 2
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle SD-WAN Aware Oracle SD-WAN Aware is affected by 7 known vulnerabilities: 1 critical, 2 high, 4 medium Critical High Medium Low

Vulnerabilities (7)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU91106 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-4577		 CWE-78 Critical
Available
Exploited
 - 04.06.2024 SB2024060501
SB2024060502
SB2024060503
and 12 more
#VU68886 - Out-of-bounds read
CVE-2022-31630		 CWE-125 Medium
No
No
 - 01.11.2022 SB2022110119
SB2022110336
SB2022110814
and 21 more
#VU58271 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-41184		 CWE-79 Medium
Available
No
 - 20.11.2021 SB2021112002
SB2022030804
SB2022041935
and 74 more
#VU54565 - Server-Side Request Forgery (SSRF)
CVE-2021-21705		 CWE-918 Medium
No
No
 - 06.07.2021 SB2021070611
SB2021070612
SB2021070613
and 21 more
#VU29961 - Improper input validation
CVE-2020-14701		 CWE-20 High
No
No
 - 16.07.2020 SB2020071629
#VU29015 - Integer overflow
CVE-2020-10878		 CWE-190 High
No
No
 - 15.06.2020 SB2020061513
SB2020061514
SB2020062302
and 49 more
#VU26527 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2020-1927		 CWE-601 Medium
No
No
 - 02.04.2020 SB2020040204
SB2020041511
SB2020050202
and 17 more