Oracle Health Sciences Data Management Workbench vulnerabilities

8 CVEs affecting Oracle Health Sciences Data Management Workbench, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-62288, published 2025-10-21.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-44832, published 2021-12-28. Medium severity, CVSS 6.6. EPSS: 97.9% chance of exploitation in the next 30 days. Apache Log4j2 versions 2.0-beta7 through 2.17.0 (excluding security fix releases 2.3.2 and 2.12.4) are vulnerable to a remote code execution (RCE) attack when a configuration uses a JDBC Appender…
CVE-2021-23337, published 2021-02-15. High severity, CVSS 7.2. EPSS: 21.3% chance of exploitation in the next 30 days. Lodash versions prior to 4.17.21 are vulnerable to Command Injection via the template function.
CVE-2019-2904, published 2019-10-16. Critical severity, CVSS 9.8. EPSS: 14.3% chance of exploitation in the next 30 days. Vulnerability in the Oracle JDeveloper and ADF product of Oracle Fusion Middleware (component: ADF Faces). Supported versions that are affected are 11.1.1.9.0, 12.1.3.0.0 and 12.2.1.3.0. Easily…
CVE-2021-29425, published 2021-04-13. Medium severity, CVSS 4.8. EPSS: 10.5% chance of exploitation in the next 30 days. In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like "//../foo", or "\\..\foo", the result would be the same value, thus possibly…
CVE-2020-28500, published 2021-02-15. Medium severity, CVSS 5.3. EPSS: 7.3% chance of exploitation in the next 30 days. Lodash versions prior to 4.17.21 are vulnerable to Regular Expression Denial of Service (ReDoS) via the toNumber, trim and trimEnd functions.
CVE-2022-21518, published 2022-07-19. Medium severity, CVSS 6.5. EPSS: 0.8% chance of exploitation in the next 30 days. Vulnerability in the Oracle Health Sciences Data Management Workbench product of Oracle Health Sciences Applications (component: User Interface). Supported versions that are affected are 2.4.8.7 and…
CVE-2019-2629, published 2019-04-23. Medium severity, CVSS 5.4. EPSS: 0.8% chance of exploitation in the next 30 days. Vulnerability in the Oracle Health Sciences Data Management Workbench component of Oracle Health Sciences Applications (subcomponent: User Interface). The supported version that is affected is 2.4.8.…
CVE-2025-62288, published 2025-10-21. Medium severity, CVSS 4.9. EPSS: 0.3% chance of exploitation in the next 30 days. Vulnerability in the Oracle Health Sciences Data Management Workbench product of Oracle Health Sciences Applications (component: Logger). Supported versions that are affected are 3.4.0.1.3 and …