Known vulnerabilities in Oracle Communications Unified Inventory Management - page 3

Vendor: Oracle
Software: Oracle Communications Unified Inventory Management
Software CPE: cpe:2.3:a:oracle:unified_inventory:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 72
Public exploits: 9
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle Communications Unified Inventory Management Oracle Communications Unified Inventory Management is affected by 72 known vulnerabilities: 1 critical, 10 high, 50 medium, 11 low Critical High Medium Low

Vulnerabilities (72)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU71249 - Improper input validation
CVE-2022-39271		 CWE-20 Medium
No
No
 - 17.01.2023 -
#VU69293 - Improper input validation
CVE-2022-3171		 CWE-20 Medium
No
No
 - 14.11.2022 -
#VU68866 - Improper Authorization
CVE-2022-31692		 CWE-285 High
No
No
 - 01.11.2022 -
#VU68635 - Deserialization of Untrusted Data
CVE-2022-42003		 CWE-502 Medium
No
No
 - 25.10.2022 -
#VU67664 - Stack-based buffer overflow
CVE-2022-38752		 CWE-121 Medium
No
No
 - 27.09.2022 -
#VU67515 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2021-41411		 CWE-611 High
No
No
 - 20.09.2022 -
#VU65457 - Cryptographic Issues
CVE-2022-23632		 CWE-310 Medium
No
No
 - 19.07.2022 -
#VU64152 - Deserialization of Untrusted Data
CVE-2022-25647		 CWE-502 Medium
No
No
 - 10.06.2022 -
#VU63085 - Improper input validation
CVE-2022-22971		 CWE-20 Medium
Available
No
 - 12.05.2022 -
#VU61756 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-22965		 CWE-94 Critical
Available
Exploited
 - 31.03.2022 -
#VU59691 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-23305		 CWE-89 Medium
No
No
 - 18.01.2022 -
#VU59098 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-44832		 CWE-94 Medium
No
No
 - 28.12.2021 -
#VU54856 - Resource exhaustion
CVE-2021-36374		 CWE-400 Medium
No
No
 - 14.07.2021 -
#VU54853 - Resource exhaustion
CVE-2021-36090		 CWE-400 Medium
No
No
 - 14.07.2021 -
#VU54675 - Deserialization of Untrusted Data
CVE-2021-29505		 CWE-502 Medium
Available
No
 - 12.07.2021 -
#VU53672 - Permissions, Privileges, and Access Controls
CVE-2021-22118		 CWE-264 Low
No
No
 - 31.05.2021 -
#VU52562 - Deserialization of Untrusted Data
CVE-2021-21345		 CWE-502 High
No
No
 - 26.04.2021 -
#VU50820 - Permissions, Privileges, and Access Controls
CVE-2021-22112		 CWE-264 Medium
No
No
 - 22.02.2021 -
#VU48979 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2020-25649		 CWE-611 Medium
No
No
 - 03.12.2020 -
#VU48048 - Improper input validation
CVE-2019-3740		 CWE-20 Medium
No
No
 - 30.10.2020 -


Showing elements 41 - 60 out of 72