Known vulnerabilities in Oracle Communications Unified Inventory Management - page 3

Vendor: Oracle
Software: Oracle Communications Unified Inventory Management
Software CPE: cpe:2.3:a:oracle:unified_inventory:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 72
Public exploits: 9
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle Communications Unified Inventory Management Oracle Communications Unified Inventory Management is affected by 72 known vulnerabilities: 1 critical, 10 high, 50 medium, 11 low Critical High Medium Low

Vulnerabilities (72)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU71249 - Improper input validation
CVE-2022-39271		 CWE-20 Medium
No
No
 - 17.01.2023 SB2023011770
SB20230418137
SB2022101035
#VU69293 - Improper input validation
CVE-2022-3171		 CWE-20 Medium
No
No
 - 14.11.2022 SB2022111433
SB2022111440
SB2022112934
and 105 more
#VU68866 - Improper Authorization
CVE-2022-31692		 CWE-285 High
No
No
 - 01.11.2022 SB2022110101
SB2022121119
SB2023011162
and 28 more
#VU68635 - Deserialization of Untrusted Data
CVE-2022-42003		 CWE-502 Medium
No
No
 - 25.10.2022 SB2022102509
SB2022102510
SB2022103117
and 208 more
#VU67664 - Stack-based buffer overflow
CVE-2022-38752		 CWE-121 Medium
No
No
 - 27.09.2022 SB2022092715
SB2022092728
SB2022100555
and 66 more
#VU67515 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2021-41411		 CWE-611 High
No
No
 - 20.09.2022 SB2022092052
SB2022092053
SB2022092054
and 2 more
#VU65457 - Cryptographic Issues
CVE-2022-23632		 CWE-310 Medium
No
No
 - 19.07.2022 SB2022071937
SB20221018109
SB2022071981
#VU64152 - Deserialization of Untrusted Data
CVE-2022-25647		 CWE-502 Medium
No
No
 - 10.06.2022 SB2021120221
SB2022061003
SB2022061421
and 94 more
#VU63085 - Improper input validation
CVE-2022-22971		 CWE-20 Medium
Available
No
 - 12.05.2022 SB2022051201
SB2022060620
SB2022062223
and 52 more
#VU61756 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-22965		 CWE-94 Critical
Available
Exploited
 - 31.03.2022 SB2022033109
SB2022040109
SB2022040110
and 78 more
#VU59691 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-23305		 CWE-89 Medium
No
No
 - 18.01.2022 SB2022011818
SB2022012640
SB2022012641
and 94 more
#VU59098 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-44832		 CWE-94 Medium
No
No
 - 28.12.2021 SB2021122816
SB2021123002
SB2022010601
and 197 more
#VU54856 - Resource exhaustion
CVE-2021-36374		 CWE-400 Medium
No
No
 - 14.07.2021 SB2021071409
SB2021072011
SB2021101927
and 43 more
#VU54853 - Resource exhaustion
CVE-2021-36090		 CWE-400 Medium
No
No
 - 14.07.2021 SB2021071408
SB2021080809
SB2021100411
and 70 more
#VU54675 - Deserialization of Untrusted Data
CVE-2021-29505		 CWE-502 Medium
Available
No
 - 12.07.2021 SB2021071217
SB2021071218
SB2021071389
and 19 more
#VU53672 - Permissions, Privileges, and Access Controls
CVE-2021-22118		 CWE-264 Low
No
No
 - 31.05.2021 SB2021053107
SB2021072775
SB2021072776
and 21 more
#VU52562 - Deserialization of Untrusted Data
CVE-2021-21345		 CWE-502 High
No
No
 - 26.04.2021 SB2021042607
SB2021042608
SB2021043019
and 28 more
#VU50820 - Permissions, Privileges, and Access Controls
CVE-2021-22112		 CWE-264 Medium
No
No
 - 22.02.2021 SB2021022207
SB2021022216
SB2021042314
and 8 more
#VU48979 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2020-25649		 CWE-611 Medium
No
No
 - 03.12.2020 SB2020121510
SB2021020321
SB2021042112
and 68 more
#VU48048 - Improper input validation
CVE-2019-3740		 CWE-20 Medium
No
No
 - 30.10.2020 SB2020103018
SB2020103032
SB2020103033
and 11 more


Showing elements 41 - 60 out of 72