oracle business activity monitoring

Name: oracle business activity monitoring
Brand: oracle

productUS

cpe:2.3:a:oracle:business_activity_monitoring:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

8critical19high2medium0low

updated 2026-10-28

vulnerabilities (29)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-39144US	high8.5OT critical	98.1% (100th)	KEV	no fix	2021-08-23	= 12.2.1.4.0
CVE-2020-26217US	high8.8	82.7% (100th)	Exploit	no fix	2020-11-16	3 versions
CVE-2021-21341US	high7.5	77.8% (100th)	Exploit	no fix	2021-03-23	3 versions
CVE-2021-29505US	high8.8	77.2% (100th)	Exploit	no fix	2021-05-28	3 versions
CVE-2021-21345US	critical9.9	72.3% (99th)	Exploit	no fix	2021-03-23	3 versions
CVE-2021-21349US	high8.6	46.8% (99th)	Exploit	no fix	2021-03-23	3 versions
CVE-2021-39141US	high8.5	16.1% (97th)	Exploit	no fix	2021-08-23	= 12.2.1.4.0
CVE-2019-10219US	medium6.1	2.16% (82nd)	Exploit	no fix	2019-11-08	= 12.2.1.4.0
CVE-2019-10173US	critical9.8	95.0% (100th)	—	no fix	2019-07-23	3 versions
CVE-2021-21351US	critical9.1	82.1% (100th)	—	no fix	2021-03-23	3 versions
CVE-2021-21346US	critical9.8	76.4% (100th)	—	no fix	2021-03-23	3 versions
CVE-2021-21344US	critical9.8	76.0% (100th)	—	no fix	2021-03-23	3 versions
CVE-2021-21342US	critical9.1	50.0% (99th)	—	no fix	2021-03-23	3 versions
CVE-2021-21343US	high7.5	46.7% (99th)	—	no fix	2021-03-23	3 versions
CVE-2021-21350US	critical9.8	15.2% (97th)	—	no fix	2021-03-23	3 versions
CVE-2021-21347US	critical9.8	14.3% (97th)	—	no fix	2021-03-23	3 versions
CVE-2021-39146US	high8.5	14.3% (97th)	—	no fix	2021-08-23	= 12.2.1.4.0
CVE-2021-21348US	high7.5	13.8% (97th)	—	no fix	2021-03-23	3 versions
CVE-2021-39152US	high8.5	11.4% (96th)	—	no fix	2021-08-23	= 12.2.1.4.0
CVE-2021-39140US	medium6.3	5.92% (93rd)	—	no fix	2021-08-23	= 12.2.1.4.0
CVE-2021-39154US	high8.5	4.74% (92nd)	—	no fix	2021-08-23	= 12.2.1.4.0
CVE-2021-39151US	high8.5	4.74% (92nd)	—	no fix	2021-08-23	= 12.2.1.4.0
CVE-2021-39149US	high8.5	4.74% (92nd)	—	no fix	2021-08-23	= 12.2.1.4.0
CVE-2021-39148US	high8.5	4.74% (92nd)	—	no fix	2021-08-23	= 12.2.1.4.0
CVE-2021-39147US	high8.5	4.74% (92nd)	—	no fix	2021-08-23	= 12.2.1.4.0
CVE-2021-39139US	high8.8	4.54% (92nd)	—	no fix	2021-08-23	= 12.2.1.4.0
CVE-2021-39153US	high8.5	4.46% (91st)	—	no fix	2021-08-23	= 12.2.1.4.0
CVE-2021-39145US	high8.5	4.06% (91st)	—	no fix	2021-08-23	= 12.2.1.4.0
CVE-2021-39150US	high8.5	3.44% (89th)	—	no fix	2021-08-23	= 12.2.1.4.0

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-502Deserialization of Untrusted Data27 CVEs
CWE-434Unrestricted Upload of File with Dangerous Type15 CVEs
CWE-918Server-Side Request Forgery (SSRF)4 CVEs
CWE-94Improper Control of Generation of Code ('Code Injection')4 CVEs
CWE-400Uncontrolled Resource Consumption2 CVEs
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')2 CVEs
CWE-835Loop with Unreachable Exit Condition ('Infinite Loop')2 CVEs
CWE-306Missing Authentication for Critical Function1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE29 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan