User management

This hub aggregates every CVE we track for User management, a product in the enterprise software space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 14 most recently published vulnerabilities affecting User management.

• CVE-2026-12097User Management <= 1.2 - Missing Authorization to Unauthenticated Plugin Settings Modification5.3Jul 8, 2026
• CVE-2026-22014Vulnerability in the Oracle User Management product of Oracle E-Business Suite (component: Workflow and Business Events). Supported versions that are affected are 12.2.7-12.2.15. Easily exploitabl...3.8Apr 21, 2026
• CVE-2025-30708Vulnerability in the Oracle User Management product of Oracle E-Business Suite (component: Search and Register Users). Supported versions that are affected are 12.2.4-12.2.14. Easily exploitable v...7.5Apr 15, 2025
• CVE-2025-22736WordPress User Management plugin <= 1.2 - Privilege Escalation vulnerability8.8Jan 15, 2025
• CVE-2024-52403WordPress User Management plugin <= 1.1 - Arbitrary File Upload vulnerability9.9Nov 16, 2024
• CVE-2023-36662The TechTime User Management components for Atlassian products allow stored XSS on the Bulk User Actions page. This affects User Management for Jira 2.0.0 through 2.17.1, User Management for Conflu...5.4Jun 26, 2023
• CVE-2023-21997Vulnerability in the Oracle User Management product of Oracle E-Business Suite (component: Proxy User Delegation). Supported versions that are affected are 12.2.3-12.2.12. Easily exploitable vulne...4.3Apr 18, 2023
• CVE-2022-21500Vulnerability in Oracle E-Business Suite (component: Manage Proxies). The supported version that is affected is 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network a...7.5May 19, 2022
• CVE-2021-2017Vulnerability in the Oracle User Management product of Oracle E-Business Suite (component: Proxy User Delegation). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily exploit...4.3Jan 20, 2021
• CVE-2018-18419Stored XSS has been discovered in the upload section of ARDAWAN.COM User Management 1.1, as demonstrated by a .jpg filename to the /account URI.5.4Oct 19, 2018
• CVE-2018-3236Vulnerability in the Oracle User Management component of Oracle E-Business Suite (subcomponent: Reports). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7....6.5Oct 17, 2018
• CVE-2018-2691Vulnerability in the Oracle User Management component of Oracle E-Business Suite (subcomponent: Proxy User Delegation). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2...5.4Jan 18, 2018
• CVE-2018-2684Vulnerability in the Oracle User Management component of Oracle E-Business Suite (subcomponent: Registration Process). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2....4.9Jan 18, 2018
• CVE-2017-3515Vulnerability in the Oracle User Management component of Oracle E-Business Suite (subcomponent: User Name/Password Management). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2...5.4Apr 24, 2017