oracle global lifecycle management opatch

Name: oracle global lifecycle management opatch
Brand: oracle

productUS

cpe:2.3:a:oracle:global_lifecycle_management_opatch:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

unpatched

by severity

10critical12high3medium0low

updated 2026-10-28

vulnerabilities (25)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2020-8840US	critical9.8	26.6% (98th)	Exploit	11.2.0.3.23	2020-02-10	3 versions
CVE-2020-9548US	critical9.8	18.9% (97th)	Exploit	12.2.0.1.20	2020-03-02	< 12.2.0.1.20
CVE-2020-9547US	critical9.8	18.4% (97th)	Exploit	12.2.0.1.20	2020-03-02	< 12.2.0.1.20
CVE-2019-14439US	high7.5	10.8% (96th)	Exploit	12.2.0.1.19	2019-07-30	5 versions
CVE-2019-14540US	critical9.8	10.8% (96th)	Exploit	12.2.0.1.19	2019-09-15	3 versions
CVE-2020-10673US	high8.8	8.03% (95th)	Exploit	12.2.0.1.20	2020-03-18	< 12.2.0.1.20
CVE-2020-11113US	high8.8	6.28% (94th)	Exploit	12.2.0.1.20	2020-03-31	< 12.2.0.1.20
CVE-2020-36518US	high7.5	4.86% (92nd)	Exploit	12.2.0.1.30	2022-03-11	< 12.2.0.1.30
CVE-2018-14718US	critical9.8	12.7% (96th)	—	11.2.0.3.23	2019-01-02	3 versions
CVE-2022-23437US	medium6.5	11.6% (96th)	—	12.2.0.1.30	2022-01-24	< 12.2.0.1.30
CVE-2018-14719US	critical9.8	9.68% (95th)	—	12.2.0.1.19	2019-01-02	3 versions
CVE-2019-20330US	critical9.8	8.64% (95th)	—	13.9.4.2.1	2020-01-03	3 versions
CVE-2018-1320US	high7.5	8.19% (95th)	—	12.2.0.1.19	2019-01-07	3 versions
CVE-2020-11620US	high8.1	5.73% (93rd)	—	12.2.0.1.20	2020-04-07	< 12.2.0.1.20
CVE-2018-11307US	critical9.8	5.73% (93rd)	—	11.2.0.3.23	2019-07-09	3 versions
CVE-2019-16335US	critical9.8	4.92% (92nd)	—	11.2.0.3.23	2019-09-15	3 versions
CVE-2018-1000873US	medium6.5	4.76% (92nd)	—	12.2.0.1.19	2018-12-20	3 versions
CVE-2020-9546US	critical9.8	4.58% (92nd)	—	12.2.0.1.20	2020-03-02	< 12.2.0.1.20
CVE-2019-3740US	medium6.5	3.89% (90th)	—	12.2.0.1.22	2019-09-18	< 12.2.0.1.22
CVE-2020-11619US	high8.1	3.68% (90th)	—	12.2.0.1.20	2020-04-07	< 12.2.0.1.20
CVE-2020-10968US	high8.8	3.66% (90th)	—	12.2.0.1.20	2020-03-26	< 12.2.0.1.20
CVE-2020-11112US	high8.8	3.64% (90th)	—	12.2.0.1.20	2020-03-31	< 12.2.0.1.20
CVE-2020-11111US	high8.8	3.61% (89th)	—	12.2.0.1.20	2020-03-31	< 12.2.0.1.20
CVE-2020-10969US	high8.8	3.56% (89th)	—	12.2.0.1.20	2020-03-26	< 12.2.0.1.20
CVE-2020-10672US	high8.8	3.06% (88th)	—	12.2.0.1.20	2020-03-18	< 12.2.0.1.20

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-502Deserialization of Untrusted Data20 CVEs
CWE-96Improper Neutralization of Directives in Statically Saved Code ('Static Code Injection')5 CVEs
CWE-20Improper Input Validation4 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor4 CVEs
CWE-203Observable Discrepancy1 CVEs
CWE-295Improper Certificate Validation1 CVEs
CWE-310CWE-3101 CVEs
CWE-787Out-of-bounds Write1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE25 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan