Oracle Report Manager vulnerabilities

2 CVEs affecting Oracle Report Manager, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2016-0580, published 2016-01-21.

More from Oracle.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2016-0580, published 2016-01-21. Medium severity, CVSS 5.0. EPSS: 1.8% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle Report Manager component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affect availability via unknown vectors.
• CVE-2016-0539, published 2016-01-21. Medium severity, CVSS 5.0. EPSS: 1.8% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle Report Manager component in Oracle E-Business Suite 11.5.10.2, 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality via unknown vectors.