Product by Oracle

Oracle Healthcare Master Person Index

14 known vulnerabilities in Oracle Healthcare Master Person Index (Oracle), 0 of them actively exploited (CISA KEV).

Vulnerabilities

Actively exploited (KEV)

Used by ransomware

Critical

Vulnerabilities

Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

Vulnerabilities in Oracle Healthcare Master Person Index (Oracle)

Critical	CVE-2018-1270	Spring Framework: Code Injection also in 28 other products	9.8	06.04.2018
Critical	CVE-2018-1275	Spring Framework: Code Injection also in 19 other products	9.8	11.04.2018
High	CVE-2020-5398	Spring Framework: Cross-site Scripting also in 33 other products	8.0	16.01.2020
High	CVE-2020-5421	RFD Protection Bypass via jsessionid also in 36 other products	8.7	19.09.2020
High	CVE-2016-0635	Oracle Insurance Policy Administration J2EE: security vulnerability also in 9 other products	8.8	21.07.2016
High	CVE-2018-15756	DoS Attack via Range Requests also in 39 other products	7.5	18.10.2018
Medium	CVE-2021-45105	Apache Log4j2 does not always protect from infinite recursion in lookup evaluation also in 107 other products	5.9	18.12.2021
Medium	CVE-2018-1271	Spring Framework: Path Traversal also in 28 other products	5.9	06.04.2018
High	CVE-2018-1258	Pivotal Spring Framework: security vulnerability also in 41 other products	8.8	11.05.2018
High	CVE-2018-11040	Pivotal Spring Framework: security vulnerability also in 27 other products	7.5	25.06.2018
High	CVE-2018-1272	Spring Framework: Privilege Escalation also in 25 other products	7.5	06.04.2018
Medium	CVE-2018-1257	Pivotal Spring Framework: Denial of Service also in 30 other products	6.5	11.05.2018
Medium	CVE-2018-11039	Pivotal Spring Framework: Cross-Site Scripting (XSS) also in 33 other products	5.9	25.06.2018
Medium	CVE-2020-5397	CSRF Attack via CORS Preflight Requests with Spring MVC or Spring WebFlux also in 27 other products	5.3	17.01.2020