Oracle Identity Analytics vulnerabilities

4 CVEs affecting Oracle Identity Analytics, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-3168, published 2018-10-17.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2017-5645, published 2017-04-17. Critical severity, CVSS 9.8. EPSS: 89.8% chance of exploitation in the next 30 days. In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that,…
CVE-2013-5815, published 2013-10-16. High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle Identity Analytics component in Oracle Fusion Middleware Oracle Identity Analytics 11.1.1.5 and Sun Role Manager 4.1 and 5.0 allows remote attackers to affect…
CVE-2018-3168, published 2018-10-17. High severity, CVSS 7.1. EPSS: 1.2% chance of exploitation in the next 30 days. Vulnerability in the Oracle Identity Analytics component of Oracle Fusion Middleware (subcomponent: Core Components). The supported version that is affected is 11.1.1.5.8. Easily exploitable…
CVE-2014-2411, published 2014-04-16. Medium severity, CVSS 6.5. EPSS: 1.1% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle Identity Analytics component in Oracle Fusion Middleware Oracle Identity Analytics 11.1.1.5 and Sun Role Manager 5.0 allows remote authenticated users to…