What’s Vulnerable › Products

Oracle Identity Management Suite vulnerabilities

6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Check whether your Oracle Identity Management Suite version is affected

Latest Oracle Identity Management Suite vulnerabilities

• CVE-2022-23307 — A deserialization flaw in the Chainsaw component of Log4j 1 can lead to malicious code execution. (CVSS 8.8)
• CVE-2022-23305 — SQL injection in JDBC Appender in Apache Log4j V1 (CVSS 9.8)
• CVE-2022-23302 — Deserialization of untrusted data in JMSSink in Apache Log4j 1.x (CVSS 8.8)
• CVE-2021-45105 — Apache Log4j2 does not always protect from infinite recursion in lookup evaluation (CVSS 5.9)
• CVE-2021-4104 — Deserialization of untrusted data in JMSAppender in Apache Log4j 1.2 (CVSS 7.5)
• CVE-2017-5645 — (CVSS 9.8)