Oracle Corporation Applications Framework

Name: Oracle Corporation Applications Framework
Brand: Oracle Corporation

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

critical

by severity

0critical5high12medium1low

updated 2026-10-28

vulnerabilities (23)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2017-3528US	medium5.4	14.6% (97th)	Exploit	no fix	2017-04-24	5 versions
CVE-2018-3243US	high8.2	2.05% (81st)	—	no fix	2018-10-17	5 versions
CVE-2018-3138US	high8.2	2.01% (81st)	—	no fix	2018-10-17	6 versions
CVE-2018-2971US	medium4.3	1.48% (74th)	—	no fix	2018-10-17	6 versions
CVE-2021-2477US	medium5.0	1.46% (73rd)	—	no fix	2021-10-20	2 versions
CVE-2020-2890US	high8.2	1.46% (73rd)	—	no fix	2020-04-15	2 versions
CVE-2019-2682US	high8.2	1.29% (70th)	—	no fix	2019-04-23	7 versions
CVE-2020-2666US	medium5.3	1.29% (70th)	—	no fix	2020-01-15	≤ 12.2.5-12.2.9
CVE-2021-2200US	medium6.4	1.19% (68th)	—	no fix	2021-04-22	≤ 12.2.10
CVE-2020-14746US	medium5.8	1.17% (67th)	—	no fix	2020-10-21	2 versions
CVE-2022-21566US	—	1.10% (66th)	—	no fix	2022-07-19	≤ 12.2.9-12.2.11
CVE-2020-2866US	medium5.3	1.09% (65th)	—	no fix	2020-04-15	≤ 12.2.5-12.2.9
CVE-2020-2566US	medium4.7	1.06% (65th)	—	no fix	2020-01-15	2 versions
CVE-2020-14590US	low2.7	0.97% (62nd)	—	no fix	2020-07-15	2 versions
CVE-2020-14610US	high7.6	0.93% (60th)	—	no fix	2020-07-15	≤ 12.2.9
CVE-2022-21468US	medium5.8	0.89% (59th)	—	no fix	2022-04-19	≤ 12.2.4-12.2.11
CVE-2022-21636US	—	0.83% (57th)	—	no fix	2022-10-18	≤ 12.2.6-12.2.11
CVE-2021-2380US	medium4.9	0.69% (53rd)	—	no fix	2021-07-21	2 versions
CVE-2022-21477US	medium4.9	0.52% (44th)	—	no fix	2022-04-19	≤ 12.2.6-12.2.11
CVE-2024-21080US	—	0.51% (43rd)	—	no fix	2024-04-16	≤ 12.2.9 ≤12.2.13
CVE-2023-22042US	—	0.42% (36th)	—	no fix	2023-07-18	≤ 12.2.3 ≤12.3.12
CVE-2023-22076US	—	0.37% (31st)	—	no fix	2023-10-17	≤ 12.2.3 ≤12.2.12
CVE-2024-21148US	medium4.8	0.31% (24th)	—	no fix	2024-07-16	≤ 12.2.3 ≤12.2.13

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation9 CVEs
CWE-284Improper Access Control5 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs
CWE-264CWE-2642 CVEs
CWE-266Incorrect Privilege Assignment1 CVEs
CWE-285Improper Authorization1 CVEs
CWE-287Improper Authentication1 CVEs
CWE-400Uncontrolled Resource Consumption1 CVEs

sources (1)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)23 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan