Oracle Ilearning vulnerabilities

16 CVEs affecting Oracle Ilearning, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-23437, published 2022-01-24.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-23437, published 2022-01-24. Medium severity, CVSS 6.5. EPSS: 11.6% chance of exploitation in the next 30 days. There's a vulnerability within the Apache Xerces Java (XercesJ) XML parser when handling specially crafted XML document payloads. This causes, the XercesJ XML parser to wait in an infinite loop,…
CVE-2021-2351, published 2021-07-21. High severity, CVSS 8.3. EPSS: 2.4% chance of exploitation in the next 30 days. Vulnerability in the Advanced Networking Option component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c. Difficult to exploit vulnerability allows…
CVE-2014-0389, published 2014-01-15. Medium severity, CVSS 4.3. EPSS: 2.4% chance of exploitation in the next 30 days. Unspecified vulnerability in Oracle iLearning 6.0 allows remote attackers to affect integrity via unknown vectors related to Learner Pages.
CVE-2020-14595, published 2020-07-15. High severity, CVSS 8.2. EPSS: 2% chance of exploitation in the next 30 days. Vulnerability in the Oracle iLearning product of Oracle iLearning (component: Assessment Manager). Supported versions that are affected are 6.1 and 6.1.1. Easily exploitable vulnerability allows…
CVE-2017-10199, published 2017-08-08. High severity, CVSS 8.2. EPSS: 1.9% chance of exploitation in the next 30 days. Vulnerability in the Oracle iLearning component of Oracle iLearning (subcomponent: Learner Pages). The supported version that is affected is 6.2. Easily exploitable vulnerability allows…
CVE-2018-3146, published 2018-10-17. High severity, CVSS 8.2. EPSS: 1.5% chance of exploitation in the next 30 days. Vulnerability in the Oracle iLearning component of Oracle iLearning (subcomponent: Learner Administration). Supported versions that are affected are 6.1 and 6.2. Easily exploitable vulnerability…
CVE-2016-0508, published 2016-01-21. Medium severity, CVSS 4.3. EPSS: 1.5% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle iLearning component in Oracle iLearning 6.0 and 6.1 allows remote attackers to affect integrity via unknown vectors related to Learner Administration.
CVE-2018-2989, published 2018-07-18. High severity, CVSS 8.2. EPSS: 1.5% chance of exploitation in the next 30 days. Vulnerability in the Oracle iLearning component of Oracle iLearning (subcomponent: Learner Administration). The supported version that is affected is 6.2. Easily exploitable vulnerability allows…
CVE-2013-3775, published 2013-07-17. Medium severity, CVSS 4.3. EPSS: 1.4% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle iLearning component in Oracle iLearning 5.2.1 and 6.0 allows remote attackers to affect integrity via unknown vectors related to Learner Pages.
CVE-2015-0436, published 2015-01-21. Medium severity, CVSS 4.3. EPSS: 1.3% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle iLearning component in Oracle iLearning 6.0 and 6.1 allows remote attackers to affect confidentiality via unknown vectors related to Login.

Latest

CVE-2020-17521, published 2020-12-07. Medium severity, CVSS 5.5. EPSS: 1% chance of exploitation in the next 30 days. Apache Groovy provides extension methods to aid with creating temporary directories. Prior to this fix, Groovy's implementation of those extension methods was using a now superseded Java JDK method…
CVE-2020-2709, published 2020-01-15. Medium severity, CVSS 4.7. EPSS: 1.1% chance of exploitation in the next 30 days. Vulnerability in the Oracle iLearning product of Oracle iLearning (component: Learner Pages). The supported version that is affected is 6.1. Easily exploitable vulnerability allows unauthenticated…