Ilearning

CVEs (16)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2021-2351	Oracle Corporation Advanced Networking Option	Hig	0.54	8.3	0.03	Jul 21, 2021	Vulnerability in the Advanced Networking Option component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise Advanced…
CVE-2020-14595	Oracle Corporation Ilearning	Hig	0.53	8.2	0.02	Jul 15, 2020	Vulnerability in the Oracle iLearning product of Oracle iLearning (component: Assessment Manager). Supported versions that are affected are 6.1 and 6.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle…
CVE-2018-3146	Oracle Corporation Ilearning	Hig	0.53	8.2	0.02	Oct 17, 2018	Vulnerability in the Oracle iLearning component of Oracle iLearning (subcomponent: Learner Administration). Supported versions that are affected are 6.1 and 6.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle…
CVE-2018-2989	Oracle Corporation Ilearning	Hig	0.53	8.2	0.01	Jul 18, 2018	Vulnerability in the Oracle iLearning component of Oracle iLearning (subcomponent: Learner Administration). The supported version that is affected is 6.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle…
CVE-2017-10199	Oracle Corporation Ilearning	Hig	0.53	8.2	0.02	Aug 8, 2017	Vulnerability in the Oracle iLearning component of Oracle iLearning (subcomponent: Learner Pages). The supported version that is affected is 6.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iLearning.…
CVE-2022-23437	Apache Xerces J	Med	0.43	6.5	0.04	Jan 24, 2022	There's a vulnerability within the Apache Xerces Java (XercesJ) XML parser when handling specially crafted XML document payloads. This causes, the XercesJ XML parser to wait in an infinite loop, which may sometimes consume system resources for prolonged duration. This…
CVE-2020-2709	Oracle Corporation Ilearning	Med	0.31	4.7	0.01	Jan 15, 2020	Vulnerability in the Oracle iLearning product of Oracle iLearning (component: Learner Pages). The supported version that is affected is 6.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iLearning. Successful…
CVE-2020-17521	Apache Groovy	Med	0.29	5.5	0.01	Dec 7, 2020	Apache Groovy provides extension methods to aid with creating temporary directories. Prior to this fix, Groovy's implementation of those extension methods was using a now superseded Java JDK method call that is potentially not secure on some operating systems in some contexts.…
CVE-2016-0508	Oracle Corporation Ilearning		0.00	—	0.02	Jan 21, 2016	Unspecified vulnerability in the Oracle iLearning component in Oracle iLearning 6.0 and 6.1 allows remote attackers to affect integrity via unknown vectors related to Learner Administration.
CVE-2015-0436	Oracle Corporation Ilearning		0.00	—	0.01	Jan 21, 2015	Unspecified vulnerability in the Oracle iLearning component in Oracle iLearning 6.0 and 6.1 allows remote attackers to affect confidentiality via unknown vectors related to Login.
CVE-2014-6594	Oracle Corporation Ilearning		0.00	—	0.01	Jan 21, 2015	Unspecified vulnerability in the Oracle iLearning component in Oracle iLearning 6.0 and 6.1 allows remote attackers to affect confidentiality via unknown vectors related to Learner Pages.
CVE-2014-2471	Oracle Corporation Ilearning		0.00	—	0.01	Apr 16, 2014	Unspecified vulnerability in the Oracle iLearning component in Oracle iLearning 6.0 and 6.1 allows remote attackers to affect integrity via unknown vectors related to Learner Pages.
CVE-2014-0389	Oracle Corporation Ilearning		0.00	—	0.02	Jan 15, 2014	Unspecified vulnerability in Oracle iLearning 6.0 allows remote attackers to affect integrity via unknown vectors related to Learner Pages.
CVE-2013-5845	Oracle Corporation Ilearning		0.00	—	0.01	Oct 16, 2013	Unspecified vulnerability in the Oracle iLearning component in Oracle iLearning 5.2.1 and 6.0 allows remote attackers to affect integrity via unknown vectors related to Learner Administration.
CVE-2013-5822	Oracle Corporation Ilearning		0.00	—	0.01	Oct 16, 2013	Unspecified vulnerability in the Oracle iLearning component in Oracle iLearning 5.2.1 and 6.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Learner Administration.
CVE-2013-3775	Oracle Corporation Ilearning		0.00	—	0.01	Jul 17, 2013	Unspecified vulnerability in the Oracle iLearning component in Oracle iLearning 5.2.1 and 6.0 allows remote attackers to affect integrity via unknown vectors related to Learner Pages.

CVE-2021-2351HigJul 21, 2021
Oracle Corporation
Advanced Networking Option
risk 0.54cvss 8.3epss 0.03
Vulnerability in the Advanced Networking Option component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise Advanced…
CVE-2020-14595HigJul 15, 2020
Oracle Corporation
Ilearning
risk 0.53cvss 8.2epss 0.02
Vulnerability in the Oracle iLearning product of Oracle iLearning (component: Assessment Manager). Supported versions that are affected are 6.1 and 6.1.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle…
CVE-2018-3146HigOct 17, 2018
Oracle Corporation
Ilearning
risk 0.53cvss 8.2epss 0.02
Vulnerability in the Oracle iLearning component of Oracle iLearning (subcomponent: Learner Administration). Supported versions that are affected are 6.1 and 6.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle…
CVE-2018-2989HigJul 18, 2018
Oracle Corporation
Ilearning
risk 0.53cvss 8.2epss 0.01
Vulnerability in the Oracle iLearning component of Oracle iLearning (subcomponent: Learner Administration). The supported version that is affected is 6.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle…
CVE-2017-10199HigAug 8, 2017
Oracle Corporation
Ilearning
risk 0.53cvss 8.2epss 0.02
Vulnerability in the Oracle iLearning component of Oracle iLearning (subcomponent: Learner Pages). The supported version that is affected is 6.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iLearning.…
CVE-2022-23437MedJan 24, 2022
Apache
Xerces J
risk 0.43cvss 6.5epss 0.04
There's a vulnerability within the Apache Xerces Java (XercesJ) XML parser when handling specially crafted XML document payloads. This causes, the XercesJ XML parser to wait in an infinite loop, which may sometimes consume system resources for prolonged duration. This…
CVE-2020-2709MedJan 15, 2020
Oracle Corporation
Ilearning
risk 0.31cvss 4.7epss 0.01
Vulnerability in the Oracle iLearning product of Oracle iLearning (component: Learner Pages). The supported version that is affected is 6.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iLearning. Successful…
CVE-2020-17521MedDec 7, 2020
Apache
Groovy
risk 0.29cvss 5.5epss 0.01
Apache Groovy provides extension methods to aid with creating temporary directories. Prior to this fix, Groovy's implementation of those extension methods was using a now superseded Java JDK method call that is potentially not secure on some operating systems in some contexts.…
CVE-2016-0508Jan 21, 2016
Oracle Corporation
Ilearning
risk 0.00cvss —epss 0.02
Unspecified vulnerability in the Oracle iLearning component in Oracle iLearning 6.0 and 6.1 allows remote attackers to affect integrity via unknown vectors related to Learner Administration.
CVE-2015-0436Jan 21, 2015
Oracle Corporation
Ilearning
risk 0.00cvss —epss 0.01
Unspecified vulnerability in the Oracle iLearning component in Oracle iLearning 6.0 and 6.1 allows remote attackers to affect confidentiality via unknown vectors related to Login.
CVE-2014-6594Jan 21, 2015
Oracle Corporation
Ilearning
risk 0.00cvss —epss 0.01
Unspecified vulnerability in the Oracle iLearning component in Oracle iLearning 6.0 and 6.1 allows remote attackers to affect confidentiality via unknown vectors related to Learner Pages.
CVE-2014-2471Apr 16, 2014
Oracle Corporation
Ilearning
risk 0.00cvss —epss 0.01
Unspecified vulnerability in the Oracle iLearning component in Oracle iLearning 6.0 and 6.1 allows remote attackers to affect integrity via unknown vectors related to Learner Pages.
CVE-2014-0389Jan 15, 2014
Oracle Corporation
Ilearning
risk 0.00cvss —epss 0.02
Unspecified vulnerability in Oracle iLearning 6.0 allows remote attackers to affect integrity via unknown vectors related to Learner Pages.
CVE-2013-5845Oct 16, 2013
Oracle Corporation
Ilearning
risk 0.00cvss —epss 0.01
Unspecified vulnerability in the Oracle iLearning component in Oracle iLearning 5.2.1 and 6.0 allows remote attackers to affect integrity via unknown vectors related to Learner Administration.
CVE-2013-5822Oct 16, 2013
Oracle Corporation
Ilearning
risk 0.00cvss —epss 0.01
Unspecified vulnerability in the Oracle iLearning component in Oracle iLearning 5.2.1 and 6.0 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Learner Administration.
CVE-2013-3775Jul 17, 2013
Oracle Corporation
Ilearning
risk 0.00cvss —epss 0.01
Unspecified vulnerability in the Oracle iLearning component in Oracle iLearning 5.2.1 and 6.0 allows remote attackers to affect integrity via unknown vectors related to Learner Pages.