CVE-2023-23951

Ability to enumerate the Oracle LDAP attributes for the current user by modifying the query used by the application

CVE-2023-23949

An authenticated user can supply malicious HTML and JavaScript code that will be executed in the client browser.

CVE-2023-23950

User’s supplied input (usually a CRLF sequence) can be used to split a returning response into two responses.