# Vulnerabilities published in 2023


- [CVE-2023-21992](https://insights.sbomify.com/CVE-2023-21992/): Other in PeopleSoft Enterprise HCM Human Resources (medium 5.4)
- [CVE-2023-21991](https://insights.sbomify.com/CVE-2023-21991/): Information disclosure in VM VirtualBox (low 3.2)
- [CVE-2023-21990](https://insights.sbomify.com/CVE-2023-21990/): Privilege escalation in VM VirtualBox (high 8.2)
- [CVE-2023-2199](https://insights.sbomify.com/CVE-2023-2199/): Denial of service in GitLab (high 7.5)
- [CVE-2023-21989](https://insights.sbomify.com/CVE-2023-21989/): Information disclosure in VM VirtualBox (medium 6.0)
- [CVE-2023-21988](https://insights.sbomify.com/CVE-2023-21988/): Information disclosure in VM VirtualBox (low 3.8)
- [CVE-2023-21987](https://insights.sbomify.com/CVE-2023-21987/): Privilege escalation in VM VirtualBox (high 7.8)
- [CVE-2023-21986](https://insights.sbomify.com/CVE-2023-21986/): Other in GraalVM Enterprise Edition (medium 5.7)
- [CVE-2023-21985](https://insights.sbomify.com/CVE-2023-21985/): Other in Solaris Operating System (high 7.7)
- [CVE-2023-21984](https://insights.sbomify.com/CVE-2023-21984/): Denial of service in Solaris Operating System (medium 6.5)
- [CVE-2023-21983](https://insights.sbomify.com/CVE-2023-21983/): Other in Application Express (APEX) (medium 5.6)
- [CVE-2023-21982](https://insights.sbomify.com/CVE-2023-21982/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2023-21981](https://insights.sbomify.com/CVE-2023-21981/): Other in PeopleSoft Enterprise PT PeopleTools (medium 4.9)
- [CVE-2023-21980](https://insights.sbomify.com/CVE-2023-21980/): Other in MySQL Server (high 7.1)
- [CVE-2023-2198](https://insights.sbomify.com/CVE-2023-2198/): Denial of service in GitLab (high 7.5)
- [CVE-2023-21979](https://insights.sbomify.com/CVE-2023-21979/): Missing authorization in WebLogic Server (high 7.5)
- [CVE-2023-21978](https://insights.sbomify.com/CVE-2023-21978/): Other in Application Object Library (medium 6.5)
- [CVE-2023-21977](https://insights.sbomify.com/CVE-2023-21977/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2023-21976](https://insights.sbomify.com/CVE-2023-21976/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2023-21975](https://insights.sbomify.com/CVE-2023-21975/): Other in Application Express (APEX) (critical 9.0)
- [CVE-2023-21974](https://insights.sbomify.com/CVE-2023-21974/): Other in Application Express (APEX) (critical 9.0)
- [CVE-2023-21973](https://insights.sbomify.com/CVE-2023-21973/): Other in iProcurement (medium 5.4)
- [CVE-2023-21972](https://insights.sbomify.com/CVE-2023-21972/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2023-21971](https://insights.sbomify.com/CVE-2023-21971/): Other in MySQL Connectors (medium 5.3)
- [CVE-2023-21970](https://insights.sbomify.com/CVE-2023-21970/): Other in BI Publisher (formerly XML Publisher) (medium 5.7)
- [CVE-2023-2197](https://insights.sbomify.com/CVE-2023-2197/): Vault Enterprise Vulnerable to Padding Oracle Attacks When Using a CBC-based Encryption Mechanism with a HSM (low 2.5)
- [CVE-2023-21969](https://insights.sbomify.com/CVE-2023-21969/): Other in SQL Developer (medium 6.7)
- [CVE-2023-21968](https://insights.sbomify.com/CVE-2023-21968/): Other in Java SE JDK and JRE (low 3.7)
- [CVE-2023-21967](https://insights.sbomify.com/CVE-2023-21967/): Denial of service in Java SE JDK and JRE (medium 5.9)
- [CVE-2023-21966](https://insights.sbomify.com/CVE-2023-21966/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2023-21965](https://insights.sbomify.com/CVE-2023-21965/): Other in Business Intelligence Enterprise Edition (medium 5.7)
- [CVE-2023-21964](https://insights.sbomify.com/CVE-2023-21964/): Denial of service in WebLogic Server (high 7.5)
- [CVE-2023-21963](https://insights.sbomify.com/CVE-2023-21963/): Denial of service in MySQL Server (low 2.7)
- [CVE-2023-21962](https://insights.sbomify.com/CVE-2023-21962/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2023-21961](https://insights.sbomify.com/CVE-2023-21961/): Other in Hyperion Essbase Administration Services (medium 6.0)
- [CVE-2023-21960](https://insights.sbomify.com/CVE-2023-21960/): Other in WebLogic Server (medium 5.6)
- [CVE-2023-2196](https://insights.sbomify.com/CVE-2023-2196/): Missing permission checks in Code Dx Plugin (medium 4.3)
- [CVE-2023-21959](https://insights.sbomify.com/CVE-2023-21959/): Information disclosure in iReceivables (medium 4.3)
- [CVE-2023-21956](https://insights.sbomify.com/CVE-2023-21956/): Cross-site scripting in WebLogic Server (medium 6.1)
- [CVE-2023-21955](https://insights.sbomify.com/CVE-2023-21955/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2023-21954](https://insights.sbomify.com/CVE-2023-21954/): Information disclosure in Java SE JDK and JRE (medium 5.9)
- [CVE-2023-21953](https://insights.sbomify.com/CVE-2023-21953/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2023-21952](https://insights.sbomify.com/CVE-2023-21952/): Other in Business Intelligence Enterprise Edition (medium 5.7)
- [CVE-2023-21950](https://insights.sbomify.com/CVE-2023-21950/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2023-2195](https://insights.sbomify.com/CVE-2023-2195/): CSRF vulnerability and missing permission checks in Code Dx Plugin (medium 4.3)
- [CVE-2023-21949](https://insights.sbomify.com/CVE-2023-21949/): Other in Advanced Networking Option (low 3.7)
- [CVE-2023-21948](https://insights.sbomify.com/CVE-2023-21948/): Other in Solaris Operating System (high 7.8)
- [CVE-2023-21947](https://insights.sbomify.com/CVE-2023-21947/): Denial of service in MySQL Server (medium 4.4)
- [CVE-2023-21946](https://insights.sbomify.com/CVE-2023-21946/): Denial of service in MySQL Server (medium 6.5)
- [CVE-2023-21945](https://insights.sbomify.com/CVE-2023-21945/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2023-21944](https://insights.sbomify.com/CVE-2023-21944/): Other in Hyperion Essbase (medium 5.3)
- [CVE-2023-21943](https://insights.sbomify.com/CVE-2023-21943/): Other in Hyperion Essbase (medium 5.3)
- [CVE-2023-21942](https://insights.sbomify.com/CVE-2023-21942/): Other in Hyperion Essbase (medium 5.3)
- [CVE-2023-21941](https://insights.sbomify.com/CVE-2023-21941/): Information disclosure in BI Publisher (formerly XML Publisher) (medium 4.3)
- [CVE-2023-21940](https://insights.sbomify.com/CVE-2023-21940/): Denial of service in MySQL Server (medium 4.4)
- [CVE-2023-2194](https://insights.sbomify.com/CVE-2023-2194/): Memory corruption in Linux kernel: i2c: xgene-slimpro (medium 6.7)
- [CVE-2023-21939](https://insights.sbomify.com/CVE-2023-21939/): Other in Java SE JDK and JRE (medium 5.3)
- [CVE-2023-21938](https://insights.sbomify.com/CVE-2023-21938/): Other in Java SE JDK and JRE (low 3.7)
- [CVE-2023-21937](https://insights.sbomify.com/CVE-2023-21937/): Other in Java SE JDK and JRE (low 3.7)
- [CVE-2023-21936](https://insights.sbomify.com/CVE-2023-21936/): Other in JD Edwards EnterpriseOne Tools (medium 5.4)
- [CVE-2023-21935](https://insights.sbomify.com/CVE-2023-21935/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2023-21934](https://insights.sbomify.com/CVE-2023-21934/): Other in Database - Enterprise Edition (medium 6.8)
- [CVE-2023-21933](https://insights.sbomify.com/CVE-2023-21933/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2023-21932](https://insights.sbomify.com/CVE-2023-21932/): Other in Hospitality OPERA 5 Property Services (high 7.2)
- [CVE-2023-21931](https://insights.sbomify.com/CVE-2023-21931/): Missing authorization in WebLogic Server (high 7.5)
- [CVE-2023-21930](https://insights.sbomify.com/CVE-2023-21930/): Other in Java SE JDK and JRE (high 7.4)
- [CVE-2023-2193](https://insights.sbomify.com/CVE-2023-2193/): Oauth authorization codes do not expire when deauthorizing an oauth2 app (medium 6.5)
- [CVE-2023-21929](https://insights.sbomify.com/CVE-2023-21929/): Other in MySQL Server (medium 5.5)
- [CVE-2023-21928](https://insights.sbomify.com/CVE-2023-21928/): Other in Solaris Operating System (low 1.8)
- [CVE-2023-21927](https://insights.sbomify.com/CVE-2023-21927/): Information disclosure in JD Edwards EnterpriseOne Tools (medium 4.3)
- [CVE-2023-21926](https://insights.sbomify.com/CVE-2023-21926/): Other in Health Sciences InForm (medium 5.5)
- [CVE-2023-21925](https://insights.sbomify.com/CVE-2023-21925/): Denial of service in Health Sciences InForm (medium 5.3)
- [CVE-2023-21924](https://insights.sbomify.com/CVE-2023-21924/): Other in Health Sciences InForm (medium 5.9)
- [CVE-2023-21923](https://insights.sbomify.com/CVE-2023-21923/): Missing authorization in Health Sciences InForm (high 8.3)
- [CVE-2023-21922](https://insights.sbomify.com/CVE-2023-21922/): Missing authorization in Health Sciences InForm (medium 6.8)
- [CVE-2023-21921](https://insights.sbomify.com/CVE-2023-21921/): Other in Health Sciences InForm (medium 5.4)
- [CVE-2023-21920](https://insights.sbomify.com/CVE-2023-21920/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2023-21919](https://insights.sbomify.com/CVE-2023-21919/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2023-21918](https://insights.sbomify.com/CVE-2023-21918/): Denial of service in Database - Enterprise Edition (medium 6.8)
- [CVE-2023-21917](https://insights.sbomify.com/CVE-2023-21917/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2023-21916](https://insights.sbomify.com/CVE-2023-21916/): Information disclosure in PeopleSoft Enterprise PT PeopleTools (medium 5.3)
- [CVE-2023-21915](https://insights.sbomify.com/CVE-2023-21915/): Other in Banking Payments (medium 4.6)
- [CVE-2023-21913](https://insights.sbomify.com/CVE-2023-21913/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2023-21912](https://insights.sbomify.com/CVE-2023-21912/): Denial of service in MySQL Server (high 7.5)
- [CVE-2023-21911](https://insights.sbomify.com/CVE-2023-21911/): Denial of service in MySQL Server (medium 4.9)
- [CVE-2023-21910](https://insights.sbomify.com/CVE-2023-21910/): Other in Business Intelligence Enterprise Edition (medium 6.5)
- [CVE-2023-2191](https://insights.sbomify.com/CVE-2023-2191/): Cross-site Scripting (XSS) - Stored in azuracast/azuracast (low 3.5)
- [CVE-2023-21909](https://insights.sbomify.com/CVE-2023-21909/): Other in Siebel UI Framework (medium 6.5)
- [CVE-2023-21908](https://insights.sbomify.com/CVE-2023-21908/): Other in Banking Virtual Account Management (medium 6.0)
- [CVE-2023-21907](https://insights.sbomify.com/CVE-2023-21907/): Other in Banking Virtual Account Management (medium 6.0)
- [CVE-2023-21906](https://insights.sbomify.com/CVE-2023-21906/): Other in Banking Virtual Account Management (medium 6.1)
- [CVE-2023-21905](https://insights.sbomify.com/CVE-2023-21905/): Missing authorization in Banking Virtual Account Management (medium 6.1)
- [CVE-2023-21904](https://insights.sbomify.com/CVE-2023-21904/): Other in Banking Virtual Account Management (medium 5.3)
- [CVE-2023-21903](https://insights.sbomify.com/CVE-2023-21903/): Other in Banking Virtual Account Management (medium 5.3)
- [CVE-2023-21902](https://insights.sbomify.com/CVE-2023-21902/): Information disclosure in Financial Services Behavior Detection Platform (medium 4.3)
- [CVE-2023-21901](https://insights.sbomify.com/CVE-2023-21901/): Missing authorization in Financial Services Analytical Applications Infrastructure (high 7.4)
- [CVE-2023-21900](https://insights.sbomify.com/CVE-2023-21900/): Other in Solaris Operating System (medium 4.0)
- [CVE-2023-2190](https://insights.sbomify.com/CVE-2023-2190/): Authorization Bypass Through User-Controlled Key in GitLab (medium 6.5)
- [CVE-2023-21899](https://insights.sbomify.com/CVE-2023-21899/): Denial of service in VM VirtualBox (medium 5.5)
- [CVE-2023-21898](https://insights.sbomify.com/CVE-2023-21898/): Denial of service in VM VirtualBox (medium 5.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2023/page/393/