Product by Oracle

    Oracle Health Sciences Information Manager

    18 known vulnerabilities in Oracle Health Sciences Information Manager (Oracle), 0 of them actively exploited (CISA KEV).

    Key figures

    18

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    3

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Oracle Health Sciences Information Manager (Oracle)
    CriticalCVE-2018-1270

    Spring Framework: Code Injection

    also in 28 other products

    		9.8
    CriticalCVE-2018-1275

    Spring Framework: Code Injection

    also in 19 other products

    		9.8
    CriticalCVE-2020-10683

    Dom4j Project Dom4j: XML External Entity (XXE)

    also in 36 other products

    		9.8
    HighCVE-2016-0635

    Oracle Insurance Policy Administration J2EE: security vulnerability

    also in 9 other products

    		8.8
    MediumCVE-2021-45105

    Apache Log4j2 does not always protect from infinite recursion in lookup evaluation

    also in 107 other products

    		5.9
    MediumCVE-2018-1271

    Spring Framework: Path Traversal

    also in 28 other products

    		5.9
    MediumCVE-2022-23437

    Infinite loop within Apache XercesJ xml parser

    also in 31 other products

    		6.5
    HighCVE-2018-1258

    Pivotal Spring Framework: security vulnerability

    also in 41 other products

    		8.8
    HighCVE-2018-1272

    Spring Framework: Privilege Escalation

    also in 25 other products

    		7.5
    HighCVE-2021-2351

    Oracle WebLogic Server: security vulnerability

    also in 97 other products

    		8.3
    MediumCVE-2021-29425

    Possible limited path traversal vulnerabily in Apache Commons IO

    also in 60 other products

    		4.8
    MediumCVE-2018-1257

    Pivotal Spring Framework: Denial of Service

    also in 30 other products

    		6.5
    LowCVE-2020-9488

    Apache Log4j: security vulnerability

    also in 44 other products

    		3.7
    MediumCVE-2018-11039

    Pivotal Spring Framework: Cross-Site Scripting (XSS)

    also in 33 other products

    		5.9
    MediumCVE-2019-17091

    Eclipse Mojarra: Cross-Site Scripting (XSS)

    also in 21 other products

    		6.1
    MediumCVE-2019-10219

    Hibernate Hibernate-validator: Cross-site Scripting

    also in 166 other products

    		6.5
    MediumCVE-2021-36374

    Apache Ant ZIP, and ZIP based, archive denial of service vulerability

    also in 37 other products

    		5.5
    MediumCVE-2020-1945

    Apache Ant: security vulnerability

    also in 44 other products

    		6.3

    News

    All products by Oracle