Known vulnerabilities in Tape Library ACSLS

Vendor: Oracle
Software: Tape Library ACSLS
Software CPE: cpe:2.3:a:oracle:tape_library_acsls:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 9
Public exploits: 3
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Tape Library ACSLS Tape Library ACSLS is affected by 9 known vulnerabilities: 1 critical, 5 high, 3 low Critical High Medium Low

Vulnerabilities (9)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU18848 - Deserialization of Untrusted Data
CVE-2019-2729		 CWE-502 Critical
Available
Exploited
 - 20.06.2019 SB2019062001
SB2020042107
SB2020042370
and 6 more
#VU18354 - Deserialization of Untrusted Data
CVE-2019-2725		 CWE-502 High
Available
Exploited
 - 26.04.2019 SB2019042604
SB20200114132
SB20190716150
and 2 more
#VU18092 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2019-11358		 CWE-1321 Low
Available
No
 - 28.03.2019 SB2019032804
SB2019041026
SB2019041801
and 155 more
#VU15467 - Improper input validation
CVE-2018-15756		 CWE-20 Low
No
No
 - 22.10.2018 SB2018102305
SB2020012203
SB2020032701
and 28 more
#VU15083 - Out-of-bounds write
CVE-2018-12759		 CWE-787 High
No
No
 - 02.10.2018 SB2018100201
SB2019011707
#VU12312 - Deserialization of Untrusted Data
CVE-2016-1000031		 CWE-502 High
No
No
 - 01.05.2018 SB2017111432
SB2018110601
SB2019051512
and 39 more
#VU12131 - Improper input validation
CVE-2018-1275		 CWE-20 High
No
No
 - 24.04.2018 SB2018042419
SB2018101614
SB2018101615
and 5 more
#VU12127 - Deserialization of Untrusted Data
CVE-2017-5645		 CWE-502 High
No
No
 - 24.04.2018 SB2017040201
SB2019011707
SB2017090512
and 40 more
#VU193 - Exposure of sensitive information to an unauthorized actor
CVE-2016-0635		 CWE-200 Low
No
No
 - 21.07.2016 SB2019011707
SB2019011529
SB20190115104