Oracle Virtual Desktop Infrastructure — known CVE vulnerabilities

Every CVE whose affected-product data names Oracle Virtual Desktop Infrastructure, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2015-4852 — CVSS 9.8 (critical) — actively exploited: The WLS Security component in Oracle WebLogic Server 10.3.6.0, 12.1.2.0, 12.1.3.0, and 12.2.1.0 allows remote attackers to execute…
• CVE-2015-7940 — CVSS 5.0 (medium): The Bouncy Castle Java library before 1.51 does not validate a point is withing the elliptic curve, which makes it easier for remote…