Skip to contentOracle Enterprise Manager vulnerabilities
- softwareag quartz, apache tomee, atlassian jira service management +28 more +30 moreXML external entity injection in Terracotta Quartz SchedulerCVE-2019-13990Public exploitFix availableEPSS 16.6%9.8 Critical
- oracle enterprise manager ops centerVulnerability in the Enterprise Manager Ops Center component of Oracle Enterprise Manager...CVE-2019-27284.3 Medium
- curl, netapp oncommand insight, oncommand unified manager +9 more +11 moreA non-privileged user or program can put code and a config file in a known non-privileged path ...CVE-2019-54437.8 High
- apache camel, oracle enterprise data quality, enterprise manager base platform +2 more +4 moreXML External Entity injection in Apache CamelCVE-2019-0188Fix available7.5 High
- oracle enterprise manager ops centerVulnerability in the Enterprise Manager Ops Center component of Oracle Enterprise Manager...CVE-2019-27266.3 Medium
- curl, haxx libcurl, debian linux +12 more +14 moreA heap buffer overflow in the TFTP receiving code allows for DoS or arbitrary code execution in...CVE-2019-5436Fix availableEPSS 49.7%7.8 High
- apache axis 1.4, axis, oracle agile engineering data management +35 more +37 moreServer Side Request Forgery in Apache AxisCVE-2019-0227Public exploitFix availableEPSS 91.9%7.5 High
- mchange c3p0, fedoraproject fedora, oracle communications ip service activator +8 more +10 moreBillion laughs attack in c3p0CVE-2019-5427Public exploitFix available7.5 High
- eclipse jetty, the eclipse foundation eclipse jetty, debian linux +24 more +26 moreInstallation information leak in Eclipse JettyCVE-2019-10247Fix available5.3 Medium
- eclipse jetty, the eclipse foundation eclipse jetty, netapp element +23 more +25 moreInformation Exposure vulnerability in Eclipse JettyCVE-2019-10246Fix available5.3 Medium
- backdropcms backdrop, drupal, jquery +102 more +104 moreXSS in jQuery as used in Drupal, Backdrop CMS, and other productsCVE-2019-11358Public exploitFix availableEPSS 86.8%6.1 Medium
- apache http server, canonical ubuntu linux, fedoraproject fedora +7 more +9 moreA vulnerability was found in Apache HTTP Server 2.4.34 to 2.4.38. When HTTP/2 was enabled for a...CVE-2019-0197Fix available4.2 Medium
- apache http server, canonical ubuntu linux, debian linux +10 more +12 moreIn Apache HTTP Server 2.4 release 2.4.38 and prior, a race condition in mod_auth_digest when...CVE-2019-0217Public exploitFix availableEPSS 16.4%7.5 High
- apache http server, canonical ubuntu linux, debian linux +23 more +25 moreIn Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code...CVE-2019-0211In KEVPublic exploitFix availableEPSS 65.0%7.8 High
- apache activemq, debian linux, netapp e-series santricity web services +5 more +7 moreImproper Control of Generation of Code ('Code Injection') in org.apache.activemq:activemq-clientCVE-2019-0222Public exploitFix availableEPSS 12.0%7.5 High
- openssl, canonical ubuntu linux, debian linux +79 more +81 more0-byte record padding oracleCVE-2019-1559Fix availableEPSS 17.1%5.9 Medium
- curl, haxx libcurl, oracle http server +14 more +16 morelibcurl versions from 7.36.0 to before 7.64.0 are vulnerable to a stack-based buffer overflow....CVE-2019-3822Fix availableEPSS 12.9%7.1 High
- apache http server, oracle enterprise manager ops center, hospitality guest access +2 more +4 moreA bug exists in the way mod_ssl handled client renegotiations. A remote attacker could send a...CVE-2019-0190Fix availableEPSS 59.9%7.5 High
- apache http server, canonical ubuntu linux, debian linux +9 more +11 moreIn Apache HTTP server versions 2.4.37 and prior, by sending request bodies in a slow loris way to...CVE-2018-17189Fix availableEPSS 19.4%5.3 Medium
- apache http server, canonical ubuntu linux, debian linux +3 more +5 moreIn Apache HTTP Server 2.4 release 2.4.37 and prior, mod_session checks the session expiry time...CVE-2018-17199Fix availableEPSS 20.0%7.5 High
- oracle enterprise manager base platformVulnerability in the Enterprise Manager Base Platform component of Oracle Enterprise Manager...CVE-2018-33036.5 Medium
- fasterxml jackson-databind, debian linux, oracle banking platform +9 more +11 moreServer-Side Request Forgery (SSRF) in jackson-databindCVE-2018-14721Fix availableEPSS 10.5%10.0 Critical
- fasterxml jackson-databind, debian linux, oracle banking platform +9 more +11 moreXML External Entity Reference (XXE) in jackson-databindCVE-2018-14720Fix available9.8 Critical
- fasterxml jackson-databind, debian linux, netapp oncommand workflow automation +17 more +19 moreArbitrary Code Execution in jackson-databindCVE-2018-14719Fix available9.8 Critical
- fasterxml jackson-databind, debian linux, netapp oncommand workflow automation +22 more +24 moreArbitrary Code Execution in jackson-databindCVE-2018-14718Fix availableEPSS 12.7%9.8 Critical
- dell bsafe, oracle application testing suite, communications analytics +9 more +11 moreRSA BSAFE Micro Edition Suite versions prior to 4.0.11 (in 4.0.x series) and versions prior to 4...CVE-2018-157697.5 High
- canonical ubuntu linux, debian linux, nodejs node.js +17 more +19 moreSimultaneous Multi-threading (SMT) in processors can enable local users to exploit software...CVE-2018-5407Public exploitFix available4.7 Medium
- openssl, canonical ubuntu linux, debian linux +16 more +18 moreTiming attack against DSACVE-2018-0734Fix availableEPSS 12.2%5.9 Medium
- openssl, canonical ubuntu linux, debian linux +19 more +21 moreTiming attack against ECDSA signature generationCVE-2018-0735Fix available5.9 Medium
- pivotal spring framework, debian linux, oracle agile product lifecycle management +37 more +39 moreDoS Attack via Range RequestsCVE-2018-15756Fix available7.5 High
- apache http server, canonical ubuntu linux, netapp storage automation store +6 more +8 moreIn Apache HTTP Server 2.4.17 to 2.4.34, by sending continuous, large SETTINGS frames a client can...CVE-2018-11763Fix availableEPSS 51.0%5.9 Medium
- dell bsafe, bsafe micro edition suite, bsafe crypto-c +12 more +14 moreRSA BSAFE Micro Edition Suite, versions prior to 4.0.11 (in 4.0.x) and prior to 4.1.6 (in 4.1.x),...CVE-2018-110587.5 High
- dell bsafe, bsafe micro edition suite, oracle application testing suite +10 more +12 moreRSA BSAFE Micro Edition Suite, versions prior to 4.0.11 (in 4.0.x) and prior to 4.1.6.1 (in 4.1.x...CVE-2018-110575.9 Medium
- dell bsafe, bsafe crypto-c micro edition, bsafe micro edition suite +12 more +14 moreRSA BSAFE Micro Edition Suite, prior to 4.1.6.1 (in 4.1.x), and RSA BSAFE Crypto-C Micro Edition...CVE-2018-110566.5 Medium
- dell bsafe, bsafe micro edition suite, oracle application testing suite +10 more +12 moreRSA BSAFE Micro Edition Suite, versions prior to 4.0.11 (in 4.0.x) and prior to 4.1.6.1 (in 4.1.x...CVE-2018-110554.4 Medium
- dell bsafe, bsafe micro edition suite, oracle application testing suite +10 more +12 moreRSA BSAFE Micro Edition Suite, version 4.1.6, contains an integer overflow vulnerability. A...CVE-2018-110547.5 High
- apache struts, netapp active iq unified manager, oncommand insight +5 more +7 moreApache Struts vulnerable to remote command execution (RCE) due to improper input validationCVE-2018-11776In KEVPublic exploitFix availableEPSS 100.0%8.1 High
- ibm sdk, sdk, java technology edition, oracle enterprise manager base platform +4 more +6 moreThe IBM Java Runtime Environment's Diagnostic Tooling Framework for Java (DTFJ) (IBM SDK, Java...CVE-2018-16567.4 High
- eclipse openj9, the eclipse foundation eclipse openj9, oracle enterprise manager base platform +2 moreIn Eclipse OpenJ9 version 0.8, users other than the process owner may be able to use Java Attach...CVE-2018-125397.8 High
- apache axis, debian linux, oracle agile engineering data management +35 more +37 moreModerate severity vulnerability that affects apache axisCVE-2018-8032Public exploitFix availableEPSS 10.6%6.1 Medium
- oracle enterprise manager ops centerVulnerability in the Enterprise Manager Ops Center component of Oracle Enterprise Manager...CVE-2018-29768.2 High
- bouncycastle bc-java, netapp oncommand workflow automation, opensuse leap +21 more +23 moreDeserialization of Untrusted Data in Bouncy castleCVE-2018-1000613Fix available9.8 Critical
- pivotal spring framework, debian linux, oracle agile product lifecycle management +25 more +27 moreModerate severity vulnerability that affects org.springframework:spring-coreCVE-2018-11040Fix available7.5 High
- pivotal spring framework, debian linux, oracle agile product lifecycle management +30 more +32 moreSpring Framework Cross Site Tracing (XST)CVE-2018-11039Fix available5.9 Medium
- haxx curl, canonical ubuntu linux, debian linux +6 more +8 morecurl version curl 7.20.0 to and including curl 7.59.0 contains a CWE-126: Buffer Over-read...CVE-2018-1000301Fix available9.1 Critical
- pivotal spring framework, pivotal software spring security, netapp oncommand insight +39 more +41 moreSpring Framework when used in combination with any versions of Spring Security contains an authorization bypassCVE-2018-1258Fix available8.8 High
- pivotal spring framework, oracle agile product lifecycle management, application testing suite +27 more +29 moreDenial of Service in org.springframework:spring-coreCVE-2018-1257Fix available6.5 Medium
- oracle enterprise manager base platformVulnerability in the Enterprise Manager Base Platform component of Oracle Enterprise Manager...CVE-2018-27507.1 High
- oracle enterprise manager ops centerVulnerability in the Enterprise Manager Ops Center component of Oracle Enterprise Manager...CVE-2018-27427.3 High
- spring by pivotal framework, vmware spring framework, oracle application testing suite +23 more +25 morePossible privilege escalation in org.springframework:spring-coreCVE-2018-1272Fix available7.5 High
- Show moreLoading…