GCVE-110-NCSC-2024-299

Advisory PublishedCVSS 9.1/10

Vulnetix · Advisory published July 17, 2024

Er zijn kwetsbaarheden verholpen in Oracle Analytics.

Weaknesses (CWE)

CWE-776Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')CWE-200Exposure of Sensitive Information to an Unauthorized ActorCWE-787Out-of-bounds WriteCWE-674Uncontrolled RecursionCWE-426Untrusted Search PathCWE-400Uncontrolled Resource ConsumptionCWE-444Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')CWE-222Truncation of Security-relevant InformationCWE-476NULL Pointer DereferenceCWE-285Improper AuthorizationCWE-835Loop with Unreachable Exit Condition ('Infinite Loop')

Risk Scores

CVSS 3.1

9.1/10

Critical · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Affected Products

Vendor	Product	Versions	Platforms
oracle	analytics_desktop	—	—

Aliases

CVE-2021-23926 CVE-2021-37533 CVE-2022-0239 CVE-2022-21797 CVE-2022-40152 CVE-2023-1370 CVE-2023-1436 CVE-2023-26031 CVE-2023-33202 CVE-2023-46589 CVE-2023-48795 CVE-2023-49083 CVE-2023-52428 CVE-2024-0727 CVE-2024-21139 CVE-2024-25710

References

advisory

Browse GCVE Records

73,118 records in the GCVE database · Updated July 16, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON