Oracle Knowledge vulnerabilities

12 CVEs affecting Oracle Knowledge, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-2932, published 2020-04-15.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-0227, published 2019-05-01. High severity, CVSS 7.5. EPSS: 91.9% chance of exploitation in the next 30 days. A Server Side Request Forgery (SSRF) vulnerability affected the Apache Axis 1.4 distribution that was last released in 2006. Security and bug commits commits continue in the projects Axis 1.x…
CVE-2019-11358, published 2019-04-20. Medium severity, CVSS 6.1. EPSS: 86.8% chance of exploitation in the next 30 days. jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an…
CVE-2018-8032, published 2018-08-02. Medium severity, CVSS 6.1. EPSS: 10.6% chance of exploitation in the next 30 days. Apache Axis 1.x up to and including 1.4 is vulnerable to a cross-site scripting (XSS) attack in the default servlet/services.
CVE-2020-2931, published 2020-04-15. Critical severity, CVSS 9.8. EPSS: 2.8% chance of exploitation in the next 30 days. Vulnerability in the Oracle Knowledge product of Oracle Knowledge (component: Web Applications - InfoCenter). Supported versions that are affected are 8.6.0-8.6.3. Easily exploitable vulnerability…
CVE-2020-2791, published 2020-04-15. Critical severity, CVSS 9.8. EPSS: 2.2% chance of exploitation in the next 30 days. Vulnerability in the Oracle Knowledge product of Oracle Knowledge (component: Information Manager Console). Supported versions that are affected are 8.6.0-8.6.2. Easily exploitable vulnerability…
CVE-2016-3476, published 2016-07-21. Medium severity, CVSS 6.5. EPSS: 1.9% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle Knowledge component in Oracle Siebel CRM 8.5.x allows remote attackers to affect confidentiality and integrity via vectors related to Information Manager…
CVE-2016-3475, published 2016-07-21. Medium severity, CVSS 4.3. EPSS: 1.7% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle Knowledge component in Oracle Siebel CRM 8.5.x allows remote authenticated users to affect confidentiality via vectors related to Information Manager Console.
CVE-2020-2932, published 2020-04-15. Medium severity, CVSS 5.9. EPSS: 1.5% chance of exploitation in the next 30 days. Vulnerability in the Oracle Knowledge product of Oracle Knowledge (component: Information Manager Console). Supported versions that are affected are 8.6.0-8.6.3. Difficult to exploit vulnerability…
CVE-2020-2524, published 2020-04-15. Medium severity, CVSS 5.9. EPSS: 1.5% chance of exploitation in the next 30 days. Vulnerability in the Oracle Knowledge product of Oracle Knowledge (component: InQuira Search). Supported versions that are affected are 8.6.0-8.6.3. Difficult to exploit vulnerability allows…
CVE-2020-2522, published 2020-04-15. Medium severity, CVSS 4.3. EPSS: 1.1% chance of exploitation in the next 30 days. Vulnerability in the Oracle Knowledge product of Oracle Knowledge (component: Information Manager Console). Supported versions that are affected are 8.6.0-8.6.1. Easily exploitable vulnerability…

Latest

CVE-2020-2795, published 2020-04-15. Medium severity, CVSS 6.3. EPSS: 0.7% chance of exploitation in the next 30 days. Vulnerability in the Oracle Knowledge product of Oracle Knowledge (component: Information Manager Console). Supported versions that are affected are 8.6.0-8.6.2. Difficult to exploit vulnerability…
CVE-2020-2553, published 2020-04-15. Medium severity, CVSS 4.8. EPSS: 1% chance of exploitation in the next 30 days. Vulnerability in the Oracle Knowledge product of Oracle Knowledge (component: Information Manager Console). Supported versions that are affected are 8.6.0-8.6.3. Difficult to exploit vulnerability…