oracle health sciences information manager

Name: oracle health sciences information manager
Brand: oracle

productUS

cpe:2.3:a:oracle:health_sciences_information_manager:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

3critical3high11medium1low

updated 2026-10-28

vulnerabilities (18)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-45105US	medium5.9	100.0% (100th)	Exploit	no fix	2021-12-18	3.0.1 → 3.0.4
CVE-2018-1270US	critical9.8	77.5% (100th)	Exploit	no fix	2018-04-06	= 3.0
CVE-2021-29425US	medium4.8	10.5% (96th)	Exploit	no fix	2021-04-13	3.0.1 → 3.0.4
CVE-2020-9488US	low3.7	8.22% (95th)	Exploit	no fix	2020-04-27	= 3.0.1
CVE-2019-10219US	medium6.1	2.16% (82nd)	Exploit	no fix	2019-11-08	2 versions
CVE-2018-1275US	critical9.8	57.4% (99th)	—	no fix	2018-04-11	= 3.0
CVE-2018-1271US	medium5.9	34.4% (98th)	—	no fix	2018-04-06	= 3.0
CVE-2022-23437US	medium6.5	11.6% (96th)	—	no fix	2022-01-24	2 versions
CVE-2020-10683US	critical9.8	7.27% (94th)	—	no fix	2020-05-01	= 3.0.1
CVE-2016-0635US	high8.8	5.08% (92nd)	—	no fix	2016-07-21	3 versions
CVE-2018-1272US	high7.5	3.06% (88th)	—	no fix	2018-04-06	= 3.0
CVE-2018-1257US	medium6.5	3.02% (87th)	—	no fix	2018-05-11	= 3.0
CVE-2018-11039US	medium5.9	2.77% (86th)	—	no fix	2018-06-25	= 3.0
CVE-2021-36374US	medium5.5	2.63% (85th)	—	no fix	2021-07-14	2 versions
CVE-2019-17091US	medium6.1	2.47% (84th)	—	no fix	2019-10-02	= 3.0
CVE-2018-1258US	high8.8OT elevated	2.46% (84th)	—	no fix	2018-05-11	= 3.0
CVE-2021-2351US	medium5.1OT elevated	2.43% (84th)	—	no fix	2021-07-21	2 versions
CVE-2020-1945US	medium6.3	1.77% (78th)	—	no fix	2020-05-14	3.0 → 3.0.2

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation5 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2 CVEs
CWE-358Improperly Implemented Security Check for Standard2 CVEs
CWE-94Improper Control of Generation of Code ('Code Injection')2 CVEs
CWE-130Improper Handling of Length Parameter Inconsistency1 CVEs
CWE-285Improper Authorization1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.