oracle service bus

Name: oracle service bus
Brand: oracle

productUS

cpe:2.3:a:oracle:service_bus:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

critical

by severity

0critical4high3medium0low

updated 2026-10-28

vulnerabilities (7)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2019-11358US	medium6.1	86.8% (100th)	Exploit	no fix	2019-04-20	3 versions
CVE-2015-9251US	medium6.1	29.7% (98th)	Exploit	no fix	2018-01-18	2 versions
CVE-2019-10086US	high7.3	29.1% (98th)	—	no fix	2019-08-20	3 versions
CVE-2017-3507US	high7.3	1.67% (77th)	—	no fix	2017-04-24	4 versions
CVE-2019-2576US	medium5.3	1.52% (74th)	—	no fix	2019-04-23	3 versions
CVE-2017-10119US	high7.6	1.36% (72nd)	—	no fix	2017-08-08	= 11.1.1.9.0
CVE-2024-21246US	high7.5OT elevated	0.66% (52nd)	—	no fix	2024-10-15	= 12.2.1.4.0

The flaw types (CWEs) most of these CVEs share.

CWE-266Incorrect Privilege Assignment2 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2 CVEs
CWE-1321Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')1 CVEs
CWE-284Improper Access Control1 CVEs
CWE-285Improper Authorization1 CVEs
CWE-502Deserialization of Untrusted Data1 CVEs
CWE-707Improper Neutralization1 CVEs
CWE-862Missing Authorization1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.