Broken or risky cryptographic algorithm in Oracle WebLogic Server
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- Required
- Attack complexity
- High
- Impact type
- Information disclosure, Spoofing
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-327 and CWE-384.
Summary
Vulnerability in the Advanced Networking Option component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise Advanced Networking Option. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Advanced Networking Option, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Advanced Networking Option. Note: The July 2021 Critical Patch Update introduces a number of Native Network Encryption changes to deal with vulnerability CVE-2021-2351 and prevent the use of weaker ciphers. Customers should review: "Changes in Native Network Encryption with the July 2021 Critical Patch Update" (Doc ID 2791571.1). CVSS 3.1 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Oracle | WebLogic Server | 12.2.1.3.0; 12.2.1.4.0; 14.1.1.0.0 | — | No fix listed | CNA |
- WebLogic Server VendorOracle Affected 12.2.1.3.0; 12.2.1.4.0; 14.1.1.0.0 Fixed in — No fix listed CNA
CPE configurations NVD · 236
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:oracle:advanced_networking_option:12.1.0.2:*:*:*:*:*:*:* | 12.1.0.2 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:advanced_networking_option:12.2.0.1:*:*:*:*:*:*:* | 12.2.0.1 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:advanced_networking_option:19c:*:*:*:*:*:*:* | 19c | Vulnerable | Oracle |
| cpe:2.3:a:oracle:agile_engineering_data_management:6.2.1.0:*:*:*:*:*:*:* | 6.2.1.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:agile_product_lifecycle_management:9.3.6:*:*:*:*:*:*:* | 9.3.6 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:agile_product_lifecycle_management_for_process:6.2.2.0:*:*:*:*:*:*:* | 6.2.2.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:agile_product_lifecycle_management_for_process:6.2.3.0:*:*:*:*:*:*:* | 6.2.3.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:airlines_data_model:12.1.1.0.0:*:*:*:*:*:*:* | 12.1.1.0.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:airlines_data_model:12.2.0.1.0:*:*:*:*:*:*:* | 12.2.0.1.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:application_performance_management:13.4.1.0:*:*:*:*:*:*:* | 13.4.1.0 | Vulnerable | Oracle |
- cpe:2.3:a:oracle:advanced_networking_option:12.1.0.2:*:*:*:*:*:*:* Versions 12.1.0.2 Vulnerable ·Oracle
- cpe:2.3:a:oracle:advanced_networking_option:12.2.0.1:*:*:*:*:*:*:* Versions 12.2.0.1 Vulnerable ·Oracle
- cpe:2.3:a:oracle:advanced_networking_option:19c:*:*:*:*:*:*:* Versions 19c Vulnerable ·Oracle
- cpe:2.3:a:oracle:agile_engineering_data_management:6.2.1.0:*:*:*:*:*:*:* Versions 6.2.1.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:agile_product_lifecycle_management:9.3.6:*:*:*:*:*:*:* Versions 9.3.6 Vulnerable ·Oracle
- cpe:2.3:a:oracle:agile_product_lifecycle_management_for_process:6.2.2.0:*:*:*:*:*:*:* Versions 6.2.2.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:agile_product_lifecycle_management_for_process:6.2.3.0:*:*:*:*:*:*:* Versions 6.2.3.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:airlines_data_model:12.1.1.0.0:*:*:*:*:*:*:* Versions 12.1.1.0.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:airlines_data_model:12.2.0.1.0:*:*:*:*:*:*:* Versions 12.2.0.1.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:application_performance_management:13.4.1.0:*:*:*:*:*:*:* Versions 13.4.1.0 Vulnerable ·Oracle
Show 226 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:oracle:application_performance_management:13.5.1.0:*:*:*:*:*:*:* | 13.5.1.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:application_testing_suite:13.3.0.1:*:*:*:*:*:*:* | 13.3.0.1 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:argus_analytics:8.2.1:*:*:*:*:*:*:* | 8.2.1 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:argus_analytics:8.2.2:*:*:*:*:*:*:* | 8.2.2 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:argus_analytics:8.2.3:*:*:*:*:*:*:* | 8.2.3 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:argus_insight:8.2.1:*:*:*:*:*:*:* | 8.2.1 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:argus_insight:8.2.2:*:*:*:*:*:*:* | 8.2.2 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:argus_insight:8.2.3:*:*:*:*:*:*:* | 8.2.3 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:argus_mart:8.2.1:*:*:*:*:*:*:* | 8.2.1 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:argus_mart:8.2.2:*:*:*:*:*:*:* | 8.2.2 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:argus_mart:8.2.3:*:*:*:*:*:*:* | 8.2.3 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:argus_safety:8.2.1:*:*:*:*:*:*:* | 8.2.1 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:argus_safety:8.2.2:*:*:*:*:*:*:* | 8.2.2 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:argus_safety:8.2.3:*:*:*:*:*:*:* | 8.2.3 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:banking_apis:*:*:*:*:*:*:*:* | 18.1 – 18.3 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:banking_apis:19.1:*:*:*:*:*:*:* | 19.1 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:banking_apis:19.2:*:*:*:*:*:*:* | 19.2 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:banking_apis:20.1:*:*:*:*:*:*:* | 20.1 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:banking_apis:21.1:*:*:*:*:*:*:* | 21.1 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:banking_digital_experience:*:*:*:*:*:*:*:* | 18.1 – 18.3 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:banking_digital_experience:17.2:*:*:*:*:*:*:* | 17.2 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:banking_digital_experience:19.1:*:*:*:*:*:*:* | 19.1 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:banking_digital_experience:19.2:*:*:*:*:*:*:* | 19.2 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:banking_digital_experience:20.1:*:*:*:*:*:*:* | 20.1 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:banking_digital_experience:21.1:*:*:*:*:*:*:* | 21.1 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:banking_enterprise_default_management:2.10.0:*:*:*:*:*:*:* | 2.10.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:banking_enterprise_default_management:2.12.0:*:*:*:*:*:*:* | 2.12.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:banking_platform:2.6.2:*:*:*:*:*:*:* | 2.6.2 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:banking_platform:2.7.1:*:*:*:*:*:*:* | 2.7.1 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:banking_platform:2.12.0:*:*:*:*:*:*:* | 2.12.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:big_data_spatial_and_graph:*:*:*:*:*:*:*:* | before 23.1 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:blockchain_platform:21.1.2:*:*:*:*:*:*:* | 21.1.2 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:clinical:5.2.1:*:*:*:*:*:*:* | 5.2.1 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:clinical:5.2.2:*:*:*:*:*:*:* | 5.2.2 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:commerce_platform:11.3.0:*:*:*:*:*:*:* | 11.3.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:commerce_platform:11.3.1:*:*:*:*:*:*:* | 11.3.1 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:commerce_platform:11.3.2:*:*:*:*:*:*:* | 11.3.2 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:communications_application_session_controller:3.9.0:*:*:*:*:*:*:* | 3.9.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:communications_billing_and_revenue_management:12.0.0.4:*:*:*:*:*:*:* | 12.0.0.4 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:communications_billing_and_revenue_management:12.0.0.5:*:*:*:*:*:*:* | 12.0.0.5 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:communications_calendar_server:8.0.0.5.0:*:*:*:*:*:*:* | 8.0.0.5.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:communications_contacts_server:8.0.0.3.0:*:*:*:*:*:*:* | 8.0.0.3.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:communications_convergent_charging_controller:*:*:*:*:*:*:*:* | 12.0.1.0.0 – 12.0.4.0.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:communications_convergent_charging_controller:6.0.1.0.0:*:*:*:*:*:*:* | 6.0.1.0.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:communications_data_model:11.3.2.1.0:*:*:*:*:*:*:* | 11.3.2.1.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:communications_data_model:11.3.2.2.0:*:*:*:*:*:*:* | 11.3.2.2.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:communications_data_model:11.3.2.3.0:*:*:*:*:*:*:* | 11.3.2.3.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:communications_data_model:12.1.0.1.0:*:*:*:*:*:*:* | 12.1.0.1.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:communications_data_model:12.1.2.0.0:*:*:*:*:*:*:* | 12.1.2.0.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:communications_design_studio:7.3.5:*:*:*:*:*:*:* | 7.3.5 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:communications_design_studio:7.4.0:*:*:*:*:*:*:* | 7.4.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:communications_design_studio:7.4.1:*:*:*:*:*:*:* | 7.4.1 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:communications_design_studio:7.4.2:*:*:*:*:*:*:* | 7.4.2 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:communications_diameter_intelligence_hub:*:*:*:*:*:*:*:* | 8.0.0 – 8.2.3 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:communications_ip_service_activator:7.4.0:*:*:*:*:*:*:* | 7.4.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:communications_metasolv_solution:6.3.1:*:*:*:*:*:*:* | 6.3.1 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:communications_network_charging_and_control:*:*:*:*:*:*:*:* | 12.0.1.0 – 12.0.4.0.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:communications_network_charging_and_control:6.0.1.0.0:*:*:*:*:*:*:* | 6.0.1.0.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:communications_network_integrity:7.3.5:*:*:*:*:*:*:* | 7.3.5 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:communications_network_integrity:7.3.6:*:*:*:*:*:*:* | 7.3.6 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:communications_pricing_design_center:12.0.0.4:*:*:*:*:*:*:* | 12.0.0.4 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:communications_pricing_design_center:12.0.0.5:*:*:*:*:*:*:* | 12.0.0.5 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:communications_services_gatekeeper:7.0:*:*:*:*:*:*:* | 7.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:communications_session_report_manager:*:*:*:*:*:*:*:* | 8.0.0 – 8.2.5.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:communications_session_route_manager:*:*:*:*:*:*:*:* | 8.2.0 – 8.2.5 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:data_integrator:12.2.1.3.0:*:*:*:*:*:*:* | 12.2.1.3.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:data_integrator:12.2.1.4.0:*:*:*:*:*:*:* | 12.2.1.4.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:demantra_demand_management:*:*:*:*:*:*:*:* | 12.2.6 – 12.2.11 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:documaker:*:*:*:*:*:*:*:* | 12.6.2 – 12.6.4 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:documaker:12.6.0:*:*:*:*:*:*:* | 12.6.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:documaker:12.7.0:*:*:*:*:*:*:* | 12.7.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:enterprise_data_quality:12.2.1.3.0:*:*:*:*:*:*:* | 12.2.1.3.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:enterprise_data_quality:12.2.1.4.0:*:*:*:*:*:*:* | 12.2.1.4.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:enterprise_manager_base_platform:13.4.0.0:*:*:*:*:*:*:* | 13.4.0.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:enterprise_manager_base_platform:13.5.0.0:*:*:*:*:*:*:* | 13.5.0.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:enterprise_manager_ops_center:12.4.0.0:*:*:*:*:*:*:* | 12.4.0.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:*:*:*:*:*:*:*:* | 8.0.7 – 8.1.1 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:financial_services_behavior_detection_platform:8.0.7:*:*:*:*:*:*:* | 8.0.7 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:financial_services_behavior_detection_platform:8.0.8:*:*:*:*:*:*:* | 8.0.8 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:financial_services_behavior_detection_platform:8.0.11:*:*:*:*:*:*:* | 8.0.11 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:financial_services_enterprise_case_management:8.0.7:*:*:*:*:*:*:* | 8.0.7 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:financial_services_enterprise_case_management:8.0.8:*:*:*:*:*:*:* | 8.0.8 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:financial_services_enterprise_case_management:8.0.11:*:*:*:*:*:*:* | 8.0.11 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:financial_services_foreign_account_tax_compliance_act_management:8.0.7:*:*:*:*:*:*:* | 8.0.7 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:financial_services_foreign_account_tax_compliance_act_management:8.0.8:*:*:*:*:*:*:* | 8.0.8 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:financial_services_foreign_account_tax_compliance_act_management:8.0.11:*:*:*:*:*:*:* | 8.0.11 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:financial_services_model_management_and_governance:*:*:*:*:*:*:*:* | 8.0.8.0.0 – 8.1.1.0.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:financial_services_trade-based_anti_money_laundering:8.0.7:*:*:*:enterprise:*:*:* | 8.0.7 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:financial_services_trade-based_anti_money_laundering:8.0.8:*:*:*:enterprise:*:*:* | 8.0.8 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:flexcube_investor_servicing:12.0.4:*:*:*:*:*:*:* | 12.0.4 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:flexcube_investor_servicing:12.1.0:*:*:*:*:*:*:* | 12.1.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:flexcube_investor_servicing:12.3.0:*:*:*:*:*:*:* | 12.3.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:flexcube_investor_servicing:12.4.0:*:*:*:*:*:*:* | 12.4.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:flexcube_investor_servicing:14.4.0:*:*:*:*:*:*:* | 14.4.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:flexcube_investor_servicing:14.5.0:*:*:*:*:*:*:* | 14.5.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:flexcube_private_banking:12.0.0:*:*:*:*:*:*:* | 12.0.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:flexcube_private_banking:12.1.0:*:*:*:*:*:*:* | 12.1.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:fusion_middleware:12.2.1.3.0:*:*:*:*:*:*:* | 12.2.1.3.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:fusion_middleware:12.2.1.4.0:*:*:*:*:*:*:* | 12.2.1.4.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:goldengate:*:*:*:*:*:*:*:* | before 12.3.0.1.0; 19.1.0.0.1 to before 21.5.0.0.220118 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:goldengate_application_adapters:*:*:*:*:*:*:*:* | before 23.1 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:graph_server_and_client:*:*:*:*:*:*:*:* | before 21.4.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:health_sciences_clinical_development_analytics:4.0.1:*:*:*:*:*:*:* | 4.0.1 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:health_sciences_inform_crf_submit:6.2.1:*:*:*:*:*:*:* | 6.2.1 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:health_sciences_information_manager:3.0.2:*:*:*:*:*:*:* | 3.0.2 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:health_sciences_information_manager:3.0.3:*:*:*:*:*:*:* | 3.0.3 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:healthcare_data_repository:7.0.2:*:*:*:*:*:*:* | 7.0.2 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:healthcare_data_repository:8.1.0:*:*:*:*:*:*:* | 8.1.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:healthcare_data_repository:8.1.1:*:*:*:*:*:*:* | 8.1.1 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:healthcare_foundation:*:*:*:*:*:*:*:* | 7.3.0 – 7.3.0.2; 8.0.0 – 8.0.2; 8.1.0 – 8.1.1 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:healthcare_translational_research:4.1.0:*:*:*:*:*:*:* | 4.1.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:hospitality_inventory_management:*:*:*:*:*:*:*:* | before 9.1.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:hospitality_inventory_management:9.1.0:*:*:*:*:*:*:* | 9.1.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:hospitality_opera_5:5.6:*:*:*:*:*:*:* | 5.6 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:hospitality_reporting_and_analytics:9.1.0:*:*:*:*:*:*:* | 9.1.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:hospitality_suite8:8.10.2:*:*:*:*:*:*:* | 8.10.2 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:hospitality_suite8:8.11.0:*:*:*:*:*:*:* | 8.11.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:hospitality_suite8:8.12.0:*:*:*:*:*:*:* | 8.12.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:hospitality_suite8:8.13.0:*:*:*:*:*:*:* | 8.13.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:hospitality_suite8:8.14.0:*:*:*:*:*:*:* | 8.14.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:hyperion_infrastructure_technology:11.2.7.0:*:*:*:*:*:*:* | 11.2.7.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:ilearning:6.2:*:*:*:*:*:*:* | 6.2 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:ilearning:6.3:*:*:*:*:*:*:* | 6.3 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:instantis_enterprisetrack:17.1:*:*:*:*:*:*:* | 17.1 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:instantis_enterprisetrack:17.2:*:*:*:*:*:*:* | 17.2 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:instantis_enterprisetrack:17.3:*:*:*:*:*:*:* | 17.3 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:insurance_data_gateway:11.0.2:*:*:*:*:*:*:* | 11.0.2 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:insurance_data_gateway:11.1.0:*:*:*:*:*:*:* | 11.1.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:insurance_data_gateway:11.2.7:*:*:*:*:*:*:* | 11.2.7 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:insurance_data_gateway:11.3.0:*:*:*:*:*:*:* | 11.3.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:insurance_data_gateway:11.3.1:*:*:*:*:*:*:* | 11.3.1 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:insurance_insbridge_rating_and_underwriting:*:*:*:*:*:*:*:* | 5.4 – 5.6.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:insurance_insbridge_rating_and_underwriting:5.2.0:*:*:*:*:*:*:* | 5.2.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:insurance_policy_administration:11.0.2:*:*:*:*:*:*:* | 11.0.2 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:insurance_policy_administration:11.1.0:*:*:*:*:*:*:* | 11.1.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:insurance_policy_administration:11.2.7:*:*:*:*:*:*:* | 11.2.7 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:insurance_policy_administration:11.3.0:*:*:*:*:*:*:* | 11.3.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:insurance_policy_administration:11.3.1:*:*:*:*:*:*:* | 11.3.1 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:insurance_rules_palette:11.0.2:*:*:*:*:*:*:* | 11.0.2 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:insurance_rules_palette:11.1.0:*:*:*:*:*:*:* | 11.1.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:insurance_rules_palette:11.2.7:*:*:*:*:*:*:* | 11.2.7 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:insurance_rules_palette:11.3.0:*:*:*:*:*:*:* | 11.3.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:insurance_rules_palette:11.3.1:*:*:*:*:*:*:* | 11.3.1 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:9.2.6.3:*:*:*:*:*:*:* | 9.2.6.3 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:oss_support_tools:*:*:*:*:*:*:*:* | before 2.12.42 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.57:*:*:*:*:*:*:* | 8.57 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58:*:*:*:*:*:*:* | 8.58 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.59:*:*:*:*:*:*:* | 8.59 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:policy_automation:*:*:*:*:*:*:*:* | 12.2.0 – 12.2.24 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:primavera_analytics:18.8.3.3:*:*:*:*:*:*:* | 18.8.3.3 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:primavera_analytics:19.12.11.1:*:*:*:*:*:*:* | 19.12.11.1 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:primavera_analytics:20.12.12.0:*:*:*:*:*:*:* | 20.12.12.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:primavera_data_warehouse:18.8.3.3:*:*:*:*:*:*:* | 18.8.3.3 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:primavera_data_warehouse:19.12.11.1:*:*:*:*:*:*:* | 19.12.11.1 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:primavera_data_warehouse:20.12.12.0:*:*:*:*:*:*:* | 20.12.12.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:* | 17.12.0 – 17.12.11; 18.8.0 – 18.8.12; 19.12.0 – 19.12.11; 20.12.0 – 20.12.7 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:*:*:*:*:*:*:*:* | 17.12.0.0 – 17.12.20; 18.8.0.0 – 18.8.24; 19.12.0.0 – 19.12.17.0; 20.12.0.0 – 20.12.9.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:primavera_p6_professional_project_management:*:*:*:*:*:*:*:* | 17.12 – 17.12.20.0; 18.8 – 18.8.24.0; 19.12.0.0 – 19.12.17.0; 20.12.0.0 – 20.12.9.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:primavera_unifier:*:*:*:*:*:*:*:* | 17.7 – 17.12 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:primavera_unifier:18.8:*:*:*:*:*:*:* | 18.8 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:primavera_unifier:19.12:*:*:*:*:*:*:* | 19.12 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:primavera_unifier:20.12:*:*:*:*:*:*:* | 20.12 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:primavera_unifier:21.12:*:*:*:*:*:*:* | 21.12 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:product_lifecycle_analytics:3.6.1:*:*:*:*:*:*:* | 3.6.1 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:rapid_planning:*:*:*:*:*:*:*:* | 12.2.6 – 12.2.11 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:real_user_experience_insight:13.4.1.0:*:*:*:*:*:*:* | 13.4.1.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:real_user_experience_insight:13.5.1.0:*:*:*:*:*:*:* | 13.5.1.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:retail_analytics:*:*:*:*:*:*:*:* | 16.0.0 – 16.0.2 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:retail_assortment_planning:16.0.3:*:*:*:*:*:*:* | 16.0.3 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:retail_back_office:14.1:*:*:*:*:*:*:* | 14.1 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:retail_central_office:14.1:*:*:*:*:*:*:* | 14.1 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:retail_customer_insights:*:*:*:*:*:*:*:* | 16.0 – 16.0.2 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:retail_extract_transform_and_load:13.2.8:*:*:*:*:*:*:* | 13.2.8 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:retail_financial_integration:14.1.3.2:*:*:*:*:*:*:* | 14.1.3.2 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:retail_financial_integration:15.0.3.1:*:*:*:*:*:*:* | 15.0.3.1 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:retail_financial_integration:16.0.3.0:*:*:*:*:*:*:* | 16.0.3.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:retail_financial_integration:19.0.1:*:*:*:*:*:*:* | 19.0.1 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:retail_integration_bus:14.1.3.2:*:*:*:*:*:*:* | 14.1.3.2 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:retail_integration_bus:15.0.3.1:*:*:*:*:*:*:* | 15.0.3.1 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:retail_integration_bus:16.0.3:*:*:*:*:*:*:* | 16.0.3 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:retail_integration_bus:19.0.1:*:*:*:*:*:*:* | 19.0.1 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:retail_merchandising_system:19.0.1:*:*:*:*:*:*:* | 19.0.1 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:retail_order_broker:16.0:*:*:*:*:*:*:* | 16.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:retail_order_broker:18.0:*:*:*:*:*:*:* | 18.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:retail_order_broker:19.1:*:*:*:*:*:*:* | 19.1 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:retail_order_management_system:19.5:*:*:*:*:*:*:* | 19.5 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:retail_point-of-service:14.1:*:*:*:*:*:*:* | 14.1 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:retail_predictive_application_server:14.1.3:*:*:*:*:*:*:* | 14.1.3 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:retail_predictive_application_server:15.0.3:*:*:*:*:*:*:* | 15.0.3 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:retail_predictive_application_server:16.0.3:*:*:*:*:*:*:* | 16.0.3 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:retail_price_management:14.1:*:*:*:*:*:*:* | 14.1 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:retail_price_management:15.0:*:*:*:*:*:*:* | 15.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:retail_price_management:16.0:*:*:*:*:*:*:* | 16.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:retail_returns_management:14.1:*:*:*:*:*:*:* | 14.1 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:retail_service_backbone:14.1.3.2:*:*:*:*:*:*:* | 14.1.3.2 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:retail_service_backbone:15.0.3.1:*:*:*:*:*:*:* | 15.0.3.1 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:retail_service_backbone:16.0.3:*:*:*:*:*:*:* | 16.0.3 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:retail_service_backbone:19.0.1:*:*:*:*:*:*:* | 19.0.1 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:retail_store_inventory_management:14.1:*:*:*:*:*:*:* | 14.1 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:retail_store_inventory_management:15.0:*:*:*:*:*:*:* | 15.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:retail_store_inventory_management:16.0:*:*:*:*:*:*:* | 16.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:retail_xstore_point_of_service:17.0.4:*:*:*:*:*:*:* | 17.0.4 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:retail_xstore_point_of_service:18.0.3:*:*:*:*:*:*:* | 18.0.3 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:retail_xstore_point_of_service:19.0.2:*:*:*:*:*:*:* | 19.0.2 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:retail_xstore_point_of_service:20.0.1:*:*:*:*:*:*:* | 20.0.1 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:siebel_ui_framework:*:*:*:*:*:*:*:* | up to 21.12 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:spatial_studio:*:*:*:*:*:*:*:* | before 21.2.1 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:storagetek_acsls:8.5.1:*:*:*:*:*:*:* | 8.5.1 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:storagetek_tape_analytics:2.4:*:*:*:*:*:*:* | 2.4 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:thesaurus_management_system:5.2.3:*:*:*:*:*:*:* | 5.2.3 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:thesaurus_management_system:5.3.0:*:*:*:*:*:*:* | 5.3.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:thesaurus_management_system:5.3.1:*:*:*:*:*:*:* | 5.3.1 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:timesten_in-memory_database:*:*:*:*:*:*:*:* | before 21.1.1.1.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:timesten_in-memory_database:21.1.1.1.0:*:*:*:*:*:*:* | 21.1.1.1.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:utilities_framework:*:*:*:*:*:*:*:* | 4.3.0.1.0 – 4.3.0.6.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:utilities_framework:4.2.0.3.0:*:*:*:*:*:*:* | 4.2.0.3.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:utilities_framework:4.4.0.0.0:*:*:*:*:*:*:* | 4.4.0.0.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:utilities_framework:4.4.0.2.0:*:*:*:*:*:*:* | 4.4.0.2.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:utilities_framework:4.4.0.3.0:*:*:*:*:*:*:* | 4.4.0.3.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:utilities_testing_accelerator:6.0.0.1.1:*:*:*:*:*:*:* | 6.0.0.1.1 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:utilities_testing_accelerator:6.0.0.2.2:*:*:*:*:*:*:* | 6.0.0.2.2 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:utilities_testing_accelerator:6.0.0.3.1:*:*:*:*:*:*:* | 6.0.0.3.1 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:weblogic_server:12.2.1.3.0:*:*:*:*:*:*:* | 12.2.1.3.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0:*:*:*:*:*:*:* | 12.2.1.4.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:weblogic_server:14.1.1.0.0:*:*:*:*:*:*:* | 14.1.1.0.0 | Vulnerable | Oracle |
| cpe:2.3:a:oracle:zfs_storage_application_integration_engineering_software:1.3.3:*:*:*:*:*:*:* | 1.3.3 | Vulnerable | Oracle |
- cpe:2.3:a:oracle:application_performance_management:13.5.1.0:*:*:*:*:*:*:* Versions 13.5.1.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:application_testing_suite:13.3.0.1:*:*:*:*:*:*:* Versions 13.3.0.1 Vulnerable ·Oracle
- cpe:2.3:a:oracle:argus_analytics:8.2.1:*:*:*:*:*:*:* Versions 8.2.1 Vulnerable ·Oracle
- cpe:2.3:a:oracle:argus_analytics:8.2.2:*:*:*:*:*:*:* Versions 8.2.2 Vulnerable ·Oracle
- cpe:2.3:a:oracle:argus_analytics:8.2.3:*:*:*:*:*:*:* Versions 8.2.3 Vulnerable ·Oracle
- cpe:2.3:a:oracle:argus_insight:8.2.1:*:*:*:*:*:*:* Versions 8.2.1 Vulnerable ·Oracle
- cpe:2.3:a:oracle:argus_insight:8.2.2:*:*:*:*:*:*:* Versions 8.2.2 Vulnerable ·Oracle
- cpe:2.3:a:oracle:argus_insight:8.2.3:*:*:*:*:*:*:* Versions 8.2.3 Vulnerable ·Oracle
- cpe:2.3:a:oracle:argus_mart:8.2.1:*:*:*:*:*:*:* Versions 8.2.1 Vulnerable ·Oracle
- cpe:2.3:a:oracle:argus_mart:8.2.2:*:*:*:*:*:*:* Versions 8.2.2 Vulnerable ·Oracle
- cpe:2.3:a:oracle:argus_mart:8.2.3:*:*:*:*:*:*:* Versions 8.2.3 Vulnerable ·Oracle
- cpe:2.3:a:oracle:argus_safety:8.2.1:*:*:*:*:*:*:* Versions 8.2.1 Vulnerable ·Oracle
- cpe:2.3:a:oracle:argus_safety:8.2.2:*:*:*:*:*:*:* Versions 8.2.2 Vulnerable ·Oracle
- cpe:2.3:a:oracle:argus_safety:8.2.3:*:*:*:*:*:*:* Versions 8.2.3 Vulnerable ·Oracle
- cpe:2.3:a:oracle:banking_apis:*:*:*:*:*:*:*:* Versions 18.1 – 18.3 Vulnerable ·Oracle
- cpe:2.3:a:oracle:banking_apis:19.1:*:*:*:*:*:*:* Versions 19.1 Vulnerable ·Oracle
- cpe:2.3:a:oracle:banking_apis:19.2:*:*:*:*:*:*:* Versions 19.2 Vulnerable ·Oracle
- cpe:2.3:a:oracle:banking_apis:20.1:*:*:*:*:*:*:* Versions 20.1 Vulnerable ·Oracle
- cpe:2.3:a:oracle:banking_apis:21.1:*:*:*:*:*:*:* Versions 21.1 Vulnerable ·Oracle
- cpe:2.3:a:oracle:banking_digital_experience:*:*:*:*:*:*:*:* Versions 18.1 – 18.3 Vulnerable ·Oracle
- cpe:2.3:a:oracle:banking_digital_experience:17.2:*:*:*:*:*:*:* Versions 17.2 Vulnerable ·Oracle
- cpe:2.3:a:oracle:banking_digital_experience:19.1:*:*:*:*:*:*:* Versions 19.1 Vulnerable ·Oracle
- cpe:2.3:a:oracle:banking_digital_experience:19.2:*:*:*:*:*:*:* Versions 19.2 Vulnerable ·Oracle
- cpe:2.3:a:oracle:banking_digital_experience:20.1:*:*:*:*:*:*:* Versions 20.1 Vulnerable ·Oracle
- cpe:2.3:a:oracle:banking_digital_experience:21.1:*:*:*:*:*:*:* Versions 21.1 Vulnerable ·Oracle
- cpe:2.3:a:oracle:banking_enterprise_default_management:2.10.0:*:*:*:*:*:*:* Versions 2.10.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:banking_enterprise_default_management:2.12.0:*:*:*:*:*:*:* Versions 2.12.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:banking_platform:2.6.2:*:*:*:*:*:*:* Versions 2.6.2 Vulnerable ·Oracle
- cpe:2.3:a:oracle:banking_platform:2.7.1:*:*:*:*:*:*:* Versions 2.7.1 Vulnerable ·Oracle
- cpe:2.3:a:oracle:banking_platform:2.12.0:*:*:*:*:*:*:* Versions 2.12.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:big_data_spatial_and_graph:*:*:*:*:*:*:*:* Versions before 23.1 Vulnerable ·Oracle
- cpe:2.3:a:oracle:blockchain_platform:21.1.2:*:*:*:*:*:*:* Versions 21.1.2 Vulnerable ·Oracle
- cpe:2.3:a:oracle:clinical:5.2.1:*:*:*:*:*:*:* Versions 5.2.1 Vulnerable ·Oracle
- cpe:2.3:a:oracle:clinical:5.2.2:*:*:*:*:*:*:* Versions 5.2.2 Vulnerable ·Oracle
- cpe:2.3:a:oracle:commerce_platform:11.3.0:*:*:*:*:*:*:* Versions 11.3.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:commerce_platform:11.3.1:*:*:*:*:*:*:* Versions 11.3.1 Vulnerable ·Oracle
- cpe:2.3:a:oracle:commerce_platform:11.3.2:*:*:*:*:*:*:* Versions 11.3.2 Vulnerable ·Oracle
- cpe:2.3:a:oracle:communications_application_session_controller:3.9.0:*:*:*:*:*:*:* Versions 3.9.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:communications_billing_and_revenue_management:12.0.0.4:*:*:*:*:*:*:* Versions 12.0.0.4 Vulnerable ·Oracle
- cpe:2.3:a:oracle:communications_billing_and_revenue_management:12.0.0.5:*:*:*:*:*:*:* Versions 12.0.0.5 Vulnerable ·Oracle
- cpe:2.3:a:oracle:communications_calendar_server:8.0.0.5.0:*:*:*:*:*:*:* Versions 8.0.0.5.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:communications_contacts_server:8.0.0.3.0:*:*:*:*:*:*:* Versions 8.0.0.3.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:communications_convergent_charging_controller:*:*:*:*:*:*:*:* Versions 12.0.1.0.0 – 12.0.4.0.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:communications_convergent_charging_controller:6.0.1.0.0:*:*:*:*:*:*:* Versions 6.0.1.0.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:communications_data_model:11.3.2.1.0:*:*:*:*:*:*:* Versions 11.3.2.1.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:communications_data_model:11.3.2.2.0:*:*:*:*:*:*:* Versions 11.3.2.2.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:communications_data_model:11.3.2.3.0:*:*:*:*:*:*:* Versions 11.3.2.3.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:communications_data_model:12.1.0.1.0:*:*:*:*:*:*:* Versions 12.1.0.1.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:communications_data_model:12.1.2.0.0:*:*:*:*:*:*:* Versions 12.1.2.0.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:communications_design_studio:7.3.5:*:*:*:*:*:*:* Versions 7.3.5 Vulnerable ·Oracle
- cpe:2.3:a:oracle:communications_design_studio:7.4.0:*:*:*:*:*:*:* Versions 7.4.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:communications_design_studio:7.4.1:*:*:*:*:*:*:* Versions 7.4.1 Vulnerable ·Oracle
- cpe:2.3:a:oracle:communications_design_studio:7.4.2:*:*:*:*:*:*:* Versions 7.4.2 Vulnerable ·Oracle
- cpe:2.3:a:oracle:communications_diameter_intelligence_hub:*:*:*:*:*:*:*:* Versions 8.0.0 – 8.2.3 Vulnerable ·Oracle
- cpe:2.3:a:oracle:communications_ip_service_activator:7.4.0:*:*:*:*:*:*:* Versions 7.4.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:communications_metasolv_solution:6.3.1:*:*:*:*:*:*:* Versions 6.3.1 Vulnerable ·Oracle
- cpe:2.3:a:oracle:communications_network_charging_and_control:*:*:*:*:*:*:*:* Versions 12.0.1.0 – 12.0.4.0.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:communications_network_charging_and_control:6.0.1.0.0:*:*:*:*:*:*:* Versions 6.0.1.0.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:communications_network_integrity:7.3.5:*:*:*:*:*:*:* Versions 7.3.5 Vulnerable ·Oracle
- cpe:2.3:a:oracle:communications_network_integrity:7.3.6:*:*:*:*:*:*:* Versions 7.3.6 Vulnerable ·Oracle
- cpe:2.3:a:oracle:communications_pricing_design_center:12.0.0.4:*:*:*:*:*:*:* Versions 12.0.0.4 Vulnerable ·Oracle
- cpe:2.3:a:oracle:communications_pricing_design_center:12.0.0.5:*:*:*:*:*:*:* Versions 12.0.0.5 Vulnerable ·Oracle
- cpe:2.3:a:oracle:communications_services_gatekeeper:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:communications_session_report_manager:*:*:*:*:*:*:*:* Versions 8.0.0 – 8.2.5.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:communications_session_route_manager:*:*:*:*:*:*:*:* Versions 8.2.0 – 8.2.5 Vulnerable ·Oracle
- cpe:2.3:a:oracle:data_integrator:12.2.1.3.0:*:*:*:*:*:*:* Versions 12.2.1.3.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:data_integrator:12.2.1.4.0:*:*:*:*:*:*:* Versions 12.2.1.4.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:demantra_demand_management:*:*:*:*:*:*:*:* Versions 12.2.6 – 12.2.11 Vulnerable ·Oracle
- cpe:2.3:a:oracle:documaker:*:*:*:*:*:*:*:* Versions 12.6.2 – 12.6.4 Vulnerable ·Oracle
- cpe:2.3:a:oracle:documaker:12.6.0:*:*:*:*:*:*:* Versions 12.6.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:documaker:12.7.0:*:*:*:*:*:*:* Versions 12.7.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:enterprise_data_quality:12.2.1.3.0:*:*:*:*:*:*:* Versions 12.2.1.3.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:enterprise_data_quality:12.2.1.4.0:*:*:*:*:*:*:* Versions 12.2.1.4.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:enterprise_manager_base_platform:13.4.0.0:*:*:*:*:*:*:* Versions 13.4.0.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:enterprise_manager_base_platform:13.5.0.0:*:*:*:*:*:*:* Versions 13.5.0.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:enterprise_manager_ops_center:12.4.0.0:*:*:*:*:*:*:* Versions 12.4.0.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:financial_services_analytical_applications_infrastructure:*:*:*:*:*:*:*:* Versions 8.0.7 – 8.1.1 Vulnerable ·Oracle
- cpe:2.3:a:oracle:financial_services_behavior_detection_platform:8.0.7:*:*:*:*:*:*:* Versions 8.0.7 Vulnerable ·Oracle
- cpe:2.3:a:oracle:financial_services_behavior_detection_platform:8.0.8:*:*:*:*:*:*:* Versions 8.0.8 Vulnerable ·Oracle
- cpe:2.3:a:oracle:financial_services_behavior_detection_platform:8.0.11:*:*:*:*:*:*:* Versions 8.0.11 Vulnerable ·Oracle
- cpe:2.3:a:oracle:financial_services_enterprise_case_management:8.0.7:*:*:*:*:*:*:* Versions 8.0.7 Vulnerable ·Oracle
- cpe:2.3:a:oracle:financial_services_enterprise_case_management:8.0.8:*:*:*:*:*:*:* Versions 8.0.8 Vulnerable ·Oracle
- cpe:2.3:a:oracle:financial_services_enterprise_case_management:8.0.11:*:*:*:*:*:*:* Versions 8.0.11 Vulnerable ·Oracle
- cpe:2.3:a:oracle:financial_services_foreign_account_tax_compliance_act_management:8.0.7:*:*:*:*:*:*:* Versions 8.0.7 Vulnerable ·Oracle
- cpe:2.3:a:oracle:financial_services_foreign_account_tax_compliance_act_management:8.0.8:*:*:*:*:*:*:* Versions 8.0.8 Vulnerable ·Oracle
- cpe:2.3:a:oracle:financial_services_foreign_account_tax_compliance_act_management:8.0.11:*:*:*:*:*:*:* Versions 8.0.11 Vulnerable ·Oracle
- cpe:2.3:a:oracle:financial_services_model_management_and_governance:*:*:*:*:*:*:*:* Versions 8.0.8.0.0 – 8.1.1.0.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:financial_services_trade-based_anti_money_laundering:8.0.7:*:*:*:enterprise:*:*:* Versions 8.0.7 Vulnerable ·Oracle
- cpe:2.3:a:oracle:financial_services_trade-based_anti_money_laundering:8.0.8:*:*:*:enterprise:*:*:* Versions 8.0.8 Vulnerable ·Oracle
- cpe:2.3:a:oracle:flexcube_investor_servicing:12.0.4:*:*:*:*:*:*:* Versions 12.0.4 Vulnerable ·Oracle
- cpe:2.3:a:oracle:flexcube_investor_servicing:12.1.0:*:*:*:*:*:*:* Versions 12.1.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:flexcube_investor_servicing:12.3.0:*:*:*:*:*:*:* Versions 12.3.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:flexcube_investor_servicing:12.4.0:*:*:*:*:*:*:* Versions 12.4.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:flexcube_investor_servicing:14.4.0:*:*:*:*:*:*:* Versions 14.4.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:flexcube_investor_servicing:14.5.0:*:*:*:*:*:*:* Versions 14.5.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:flexcube_private_banking:12.0.0:*:*:*:*:*:*:* Versions 12.0.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:flexcube_private_banking:12.1.0:*:*:*:*:*:*:* Versions 12.1.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:fusion_middleware:12.2.1.3.0:*:*:*:*:*:*:* Versions 12.2.1.3.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:fusion_middleware:12.2.1.4.0:*:*:*:*:*:*:* Versions 12.2.1.4.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:goldengate:*:*:*:*:*:*:*:* Versions before 12.3.0.1.0; 19.1.0.0.1 to before 21.5.0.0.220118 Vulnerable ·Oracle
- cpe:2.3:a:oracle:goldengate_application_adapters:*:*:*:*:*:*:*:* Versions before 23.1 Vulnerable ·Oracle
- cpe:2.3:a:oracle:graph_server_and_client:*:*:*:*:*:*:*:* Versions before 21.4.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:health_sciences_clinical_development_analytics:4.0.1:*:*:*:*:*:*:* Versions 4.0.1 Vulnerable ·Oracle
- cpe:2.3:a:oracle:health_sciences_inform_crf_submit:6.2.1:*:*:*:*:*:*:* Versions 6.2.1 Vulnerable ·Oracle
- cpe:2.3:a:oracle:health_sciences_information_manager:3.0.2:*:*:*:*:*:*:* Versions 3.0.2 Vulnerable ·Oracle
- cpe:2.3:a:oracle:health_sciences_information_manager:3.0.3:*:*:*:*:*:*:* Versions 3.0.3 Vulnerable ·Oracle
- cpe:2.3:a:oracle:healthcare_data_repository:7.0.2:*:*:*:*:*:*:* Versions 7.0.2 Vulnerable ·Oracle
- cpe:2.3:a:oracle:healthcare_data_repository:8.1.0:*:*:*:*:*:*:* Versions 8.1.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:healthcare_data_repository:8.1.1:*:*:*:*:*:*:* Versions 8.1.1 Vulnerable ·Oracle
- cpe:2.3:a:oracle:healthcare_foundation:*:*:*:*:*:*:*:* Versions 7.3.0 – 7.3.0.2; 8.0.0 – 8.0.2; 8.1.0 – 8.1.1 Vulnerable ·Oracle
- cpe:2.3:a:oracle:healthcare_translational_research:4.1.0:*:*:*:*:*:*:* Versions 4.1.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:hospitality_inventory_management:*:*:*:*:*:*:*:* Versions before 9.1.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:hospitality_inventory_management:9.1.0:*:*:*:*:*:*:* Versions 9.1.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:hospitality_opera_5:5.6:*:*:*:*:*:*:* Versions 5.6 Vulnerable ·Oracle
- cpe:2.3:a:oracle:hospitality_reporting_and_analytics:9.1.0:*:*:*:*:*:*:* Versions 9.1.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:hospitality_suite8:8.10.2:*:*:*:*:*:*:* Versions 8.10.2 Vulnerable ·Oracle
- cpe:2.3:a:oracle:hospitality_suite8:8.11.0:*:*:*:*:*:*:* Versions 8.11.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:hospitality_suite8:8.12.0:*:*:*:*:*:*:* Versions 8.12.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:hospitality_suite8:8.13.0:*:*:*:*:*:*:* Versions 8.13.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:hospitality_suite8:8.14.0:*:*:*:*:*:*:* Versions 8.14.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:hyperion_infrastructure_technology:11.2.7.0:*:*:*:*:*:*:* Versions 11.2.7.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:ilearning:6.2:*:*:*:*:*:*:* Versions 6.2 Vulnerable ·Oracle
- cpe:2.3:a:oracle:ilearning:6.3:*:*:*:*:*:*:* Versions 6.3 Vulnerable ·Oracle
- cpe:2.3:a:oracle:instantis_enterprisetrack:17.1:*:*:*:*:*:*:* Versions 17.1 Vulnerable ·Oracle
- cpe:2.3:a:oracle:instantis_enterprisetrack:17.2:*:*:*:*:*:*:* Versions 17.2 Vulnerable ·Oracle
- cpe:2.3:a:oracle:instantis_enterprisetrack:17.3:*:*:*:*:*:*:* Versions 17.3 Vulnerable ·Oracle
- cpe:2.3:a:oracle:insurance_data_gateway:11.0.2:*:*:*:*:*:*:* Versions 11.0.2 Vulnerable ·Oracle
- cpe:2.3:a:oracle:insurance_data_gateway:11.1.0:*:*:*:*:*:*:* Versions 11.1.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:insurance_data_gateway:11.2.7:*:*:*:*:*:*:* Versions 11.2.7 Vulnerable ·Oracle
- cpe:2.3:a:oracle:insurance_data_gateway:11.3.0:*:*:*:*:*:*:* Versions 11.3.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:insurance_data_gateway:11.3.1:*:*:*:*:*:*:* Versions 11.3.1 Vulnerable ·Oracle
- cpe:2.3:a:oracle:insurance_insbridge_rating_and_underwriting:*:*:*:*:*:*:*:* Versions 5.4 – 5.6.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:insurance_insbridge_rating_and_underwriting:5.2.0:*:*:*:*:*:*:* Versions 5.2.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:insurance_policy_administration:11.0.2:*:*:*:*:*:*:* Versions 11.0.2 Vulnerable ·Oracle
- cpe:2.3:a:oracle:insurance_policy_administration:11.1.0:*:*:*:*:*:*:* Versions 11.1.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:insurance_policy_administration:11.2.7:*:*:*:*:*:*:* Versions 11.2.7 Vulnerable ·Oracle
- cpe:2.3:a:oracle:insurance_policy_administration:11.3.0:*:*:*:*:*:*:* Versions 11.3.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:insurance_policy_administration:11.3.1:*:*:*:*:*:*:* Versions 11.3.1 Vulnerable ·Oracle
- cpe:2.3:a:oracle:insurance_rules_palette:11.0.2:*:*:*:*:*:*:* Versions 11.0.2 Vulnerable ·Oracle
- cpe:2.3:a:oracle:insurance_rules_palette:11.1.0:*:*:*:*:*:*:* Versions 11.1.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:insurance_rules_palette:11.2.7:*:*:*:*:*:*:* Versions 11.2.7 Vulnerable ·Oracle
- cpe:2.3:a:oracle:insurance_rules_palette:11.3.0:*:*:*:*:*:*:* Versions 11.3.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:insurance_rules_palette:11.3.1:*:*:*:*:*:*:* Versions 11.3.1 Vulnerable ·Oracle
- cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:9.2.6.3:*:*:*:*:*:*:* Versions 9.2.6.3 Vulnerable ·Oracle
- cpe:2.3:a:oracle:oss_support_tools:*:*:*:*:*:*:*:* Versions before 2.12.42 Vulnerable ·Oracle
- cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.57:*:*:*:*:*:*:* Versions 8.57 Vulnerable ·Oracle
- cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.58:*:*:*:*:*:*:* Versions 8.58 Vulnerable ·Oracle
- cpe:2.3:a:oracle:peoplesoft_enterprise_peopletools:8.59:*:*:*:*:*:*:* Versions 8.59 Vulnerable ·Oracle
- cpe:2.3:a:oracle:policy_automation:*:*:*:*:*:*:*:* Versions 12.2.0 – 12.2.24 Vulnerable ·Oracle
- cpe:2.3:a:oracle:primavera_analytics:18.8.3.3:*:*:*:*:*:*:* Versions 18.8.3.3 Vulnerable ·Oracle
- cpe:2.3:a:oracle:primavera_analytics:19.12.11.1:*:*:*:*:*:*:* Versions 19.12.11.1 Vulnerable ·Oracle
- cpe:2.3:a:oracle:primavera_analytics:20.12.12.0:*:*:*:*:*:*:* Versions 20.12.12.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:primavera_data_warehouse:18.8.3.3:*:*:*:*:*:*:* Versions 18.8.3.3 Vulnerable ·Oracle
- cpe:2.3:a:oracle:primavera_data_warehouse:19.12.11.1:*:*:*:*:*:*:* Versions 19.12.11.1 Vulnerable ·Oracle
- cpe:2.3:a:oracle:primavera_data_warehouse:20.12.12.0:*:*:*:*:*:*:* Versions 20.12.12.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:primavera_gateway:*:*:*:*:*:*:*:* Versions 17.12.0 – 17.12.11; 18.8.0 – 18.8.12; 19.12.0 – 19.12.11; 20.12.0 – 20.12.7 Vulnerable ·Oracle
- cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:*:*:*:*:*:*:*:* Versions 17.12.0.0 – 17.12.20; 18.8.0.0 – 18.8.24; 19.12.0.0 – 19.12.17.0; 20.12.0.0 – 20.12.9.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:primavera_p6_professional_project_management:*:*:*:*:*:*:*:* Versions 17.12 – 17.12.20.0; 18.8 – 18.8.24.0; 19.12.0.0 – 19.12.17.0; 20.12.0.0 – 20.12.9.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:primavera_unifier:*:*:*:*:*:*:*:* Versions 17.7 – 17.12 Vulnerable ·Oracle
- cpe:2.3:a:oracle:primavera_unifier:18.8:*:*:*:*:*:*:* Versions 18.8 Vulnerable ·Oracle
- cpe:2.3:a:oracle:primavera_unifier:19.12:*:*:*:*:*:*:* Versions 19.12 Vulnerable ·Oracle
- cpe:2.3:a:oracle:primavera_unifier:20.12:*:*:*:*:*:*:* Versions 20.12 Vulnerable ·Oracle
- cpe:2.3:a:oracle:primavera_unifier:21.12:*:*:*:*:*:*:* Versions 21.12 Vulnerable ·Oracle
- cpe:2.3:a:oracle:product_lifecycle_analytics:3.6.1:*:*:*:*:*:*:* Versions 3.6.1 Vulnerable ·Oracle
- cpe:2.3:a:oracle:rapid_planning:*:*:*:*:*:*:*:* Versions 12.2.6 – 12.2.11 Vulnerable ·Oracle
- cpe:2.3:a:oracle:real_user_experience_insight:13.4.1.0:*:*:*:*:*:*:* Versions 13.4.1.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:real_user_experience_insight:13.5.1.0:*:*:*:*:*:*:* Versions 13.5.1.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:retail_analytics:*:*:*:*:*:*:*:* Versions 16.0.0 – 16.0.2 Vulnerable ·Oracle
- cpe:2.3:a:oracle:retail_assortment_planning:16.0.3:*:*:*:*:*:*:* Versions 16.0.3 Vulnerable ·Oracle
- cpe:2.3:a:oracle:retail_back_office:14.1:*:*:*:*:*:*:* Versions 14.1 Vulnerable ·Oracle
- cpe:2.3:a:oracle:retail_central_office:14.1:*:*:*:*:*:*:* Versions 14.1 Vulnerable ·Oracle
- cpe:2.3:a:oracle:retail_customer_insights:*:*:*:*:*:*:*:* Versions 16.0 – 16.0.2 Vulnerable ·Oracle
- cpe:2.3:a:oracle:retail_extract_transform_and_load:13.2.8:*:*:*:*:*:*:* Versions 13.2.8 Vulnerable ·Oracle
- cpe:2.3:a:oracle:retail_financial_integration:14.1.3.2:*:*:*:*:*:*:* Versions 14.1.3.2 Vulnerable ·Oracle
- cpe:2.3:a:oracle:retail_financial_integration:15.0.3.1:*:*:*:*:*:*:* Versions 15.0.3.1 Vulnerable ·Oracle
- cpe:2.3:a:oracle:retail_financial_integration:16.0.3.0:*:*:*:*:*:*:* Versions 16.0.3.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:retail_financial_integration:19.0.1:*:*:*:*:*:*:* Versions 19.0.1 Vulnerable ·Oracle
- cpe:2.3:a:oracle:retail_integration_bus:14.1.3.2:*:*:*:*:*:*:* Versions 14.1.3.2 Vulnerable ·Oracle
- cpe:2.3:a:oracle:retail_integration_bus:15.0.3.1:*:*:*:*:*:*:* Versions 15.0.3.1 Vulnerable ·Oracle
- cpe:2.3:a:oracle:retail_integration_bus:16.0.3:*:*:*:*:*:*:* Versions 16.0.3 Vulnerable ·Oracle
- cpe:2.3:a:oracle:retail_integration_bus:19.0.1:*:*:*:*:*:*:* Versions 19.0.1 Vulnerable ·Oracle
- cpe:2.3:a:oracle:retail_merchandising_system:19.0.1:*:*:*:*:*:*:* Versions 19.0.1 Vulnerable ·Oracle
- cpe:2.3:a:oracle:retail_order_broker:16.0:*:*:*:*:*:*:* Versions 16.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:retail_order_broker:18.0:*:*:*:*:*:*:* Versions 18.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:retail_order_broker:19.1:*:*:*:*:*:*:* Versions 19.1 Vulnerable ·Oracle
- cpe:2.3:a:oracle:retail_order_management_system:19.5:*:*:*:*:*:*:* Versions 19.5 Vulnerable ·Oracle
- cpe:2.3:a:oracle:retail_point-of-service:14.1:*:*:*:*:*:*:* Versions 14.1 Vulnerable ·Oracle
- cpe:2.3:a:oracle:retail_predictive_application_server:14.1.3:*:*:*:*:*:*:* Versions 14.1.3 Vulnerable ·Oracle
- cpe:2.3:a:oracle:retail_predictive_application_server:15.0.3:*:*:*:*:*:*:* Versions 15.0.3 Vulnerable ·Oracle
- cpe:2.3:a:oracle:retail_predictive_application_server:16.0.3:*:*:*:*:*:*:* Versions 16.0.3 Vulnerable ·Oracle
- cpe:2.3:a:oracle:retail_price_management:14.1:*:*:*:*:*:*:* Versions 14.1 Vulnerable ·Oracle
- cpe:2.3:a:oracle:retail_price_management:15.0:*:*:*:*:*:*:* Versions 15.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:retail_price_management:16.0:*:*:*:*:*:*:* Versions 16.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:retail_returns_management:14.1:*:*:*:*:*:*:* Versions 14.1 Vulnerable ·Oracle
- cpe:2.3:a:oracle:retail_service_backbone:14.1.3.2:*:*:*:*:*:*:* Versions 14.1.3.2 Vulnerable ·Oracle
- cpe:2.3:a:oracle:retail_service_backbone:15.0.3.1:*:*:*:*:*:*:* Versions 15.0.3.1 Vulnerable ·Oracle
- cpe:2.3:a:oracle:retail_service_backbone:16.0.3:*:*:*:*:*:*:* Versions 16.0.3 Vulnerable ·Oracle
- cpe:2.3:a:oracle:retail_service_backbone:19.0.1:*:*:*:*:*:*:* Versions 19.0.1 Vulnerable ·Oracle
- cpe:2.3:a:oracle:retail_store_inventory_management:14.1:*:*:*:*:*:*:* Versions 14.1 Vulnerable ·Oracle
- cpe:2.3:a:oracle:retail_store_inventory_management:15.0:*:*:*:*:*:*:* Versions 15.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:retail_store_inventory_management:16.0:*:*:*:*:*:*:* Versions 16.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:retail_xstore_point_of_service:17.0.4:*:*:*:*:*:*:* Versions 17.0.4 Vulnerable ·Oracle
- cpe:2.3:a:oracle:retail_xstore_point_of_service:18.0.3:*:*:*:*:*:*:* Versions 18.0.3 Vulnerable ·Oracle
- cpe:2.3:a:oracle:retail_xstore_point_of_service:19.0.2:*:*:*:*:*:*:* Versions 19.0.2 Vulnerable ·Oracle
- cpe:2.3:a:oracle:retail_xstore_point_of_service:20.0.1:*:*:*:*:*:*:* Versions 20.0.1 Vulnerable ·Oracle
- cpe:2.3:a:oracle:siebel_ui_framework:*:*:*:*:*:*:*:* Versions up to 21.12 Vulnerable ·Oracle
- cpe:2.3:a:oracle:spatial_studio:*:*:*:*:*:*:*:* Versions before 21.2.1 Vulnerable ·Oracle
- cpe:2.3:a:oracle:storagetek_acsls:8.5.1:*:*:*:*:*:*:* Versions 8.5.1 Vulnerable ·Oracle
- cpe:2.3:a:oracle:storagetek_tape_analytics:2.4:*:*:*:*:*:*:* Versions 2.4 Vulnerable ·Oracle
- cpe:2.3:a:oracle:thesaurus_management_system:5.2.3:*:*:*:*:*:*:* Versions 5.2.3 Vulnerable ·Oracle
- cpe:2.3:a:oracle:thesaurus_management_system:5.3.0:*:*:*:*:*:*:* Versions 5.3.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:thesaurus_management_system:5.3.1:*:*:*:*:*:*:* Versions 5.3.1 Vulnerable ·Oracle
- cpe:2.3:a:oracle:timesten_in-memory_database:*:*:*:*:*:*:*:* Versions before 21.1.1.1.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:timesten_in-memory_database:21.1.1.1.0:*:*:*:*:*:*:* Versions 21.1.1.1.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:utilities_framework:*:*:*:*:*:*:*:* Versions 4.3.0.1.0 – 4.3.0.6.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:utilities_framework:4.2.0.3.0:*:*:*:*:*:*:* Versions 4.2.0.3.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:utilities_framework:4.4.0.0.0:*:*:*:*:*:*:* Versions 4.4.0.0.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:utilities_framework:4.4.0.2.0:*:*:*:*:*:*:* Versions 4.4.0.2.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:utilities_framework:4.4.0.3.0:*:*:*:*:*:*:* Versions 4.4.0.3.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:utilities_testing_accelerator:6.0.0.1.1:*:*:*:*:*:*:* Versions 6.0.0.1.1 Vulnerable ·Oracle
- cpe:2.3:a:oracle:utilities_testing_accelerator:6.0.0.2.2:*:*:*:*:*:*:* Versions 6.0.0.2.2 Vulnerable ·Oracle
- cpe:2.3:a:oracle:utilities_testing_accelerator:6.0.0.3.1:*:*:*:*:*:*:* Versions 6.0.0.3.1 Vulnerable ·Oracle
- cpe:2.3:a:oracle:weblogic_server:12.2.1.3.0:*:*:*:*:*:*:* Versions 12.2.1.3.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:weblogic_server:12.2.1.4.0:*:*:*:*:*:*:* Versions 12.2.1.4.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:weblogic_server:14.1.1.0.0:*:*:*:*:*:*:* Versions 14.1.1.0.0 Vulnerable ·Oracle
- cpe:2.3:a:oracle:zfs_storage_application_integration_engineering_software:1.3.3:*:*:*:*:*:*:* Versions 1.3.3 Vulnerable ·Oracle
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2021-2351
- 2026-10-03 Alias added: GHSA-gm3p-p24r-4wxq
- 2026-11-02 CISA SSVC decision points changed
References
Exploit 4
- 20211210 [SYSS-2021-061] Oracle Database - NNE Connection Hijacking
- 20211210 [SYSS-2021-062] Oracle Database - Weak NNE Integrity Key Derivation
- http://packetstormsecurity.com/files/165258/Oracle-Database-Weak-NNE-Integrity-Key-Derivation.html
- http://packetstormsecurity.com/files/165255/Oracle-Database-Protection-Mechanism-Bypass.html
Patch 4
More Oracle Advanced Networking Option vulnerabilities
- TI-2021-01704 Vulnerability in the Advanced Networking Option component of Oracle Database Server. CVSS 3.1HIGH 8.3
Sources
- CVE-2021-2351 · CVE Program
- CVE-2021-2351 · NVD
- FIRST EPSS
- GHSA-gm3p-p24r-4wxq · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences