Oracle Tuxedo vulnerabilities

• apache chainsaw, log4j, apache software foundation log4j 1.x +24 more +26 more A deserialization flaw in the Chainsaw component of Log4j 1 can lead to malicious code execution. CVE-2022-23307 Fix available EPSS 54.4% 8.8 HighJanuary 18, 2022
• apache log4j, apache software foundation log4j 1.x, broadcom brocade sannav +26 more +28 more SQL injection in JDBC Appender in Apache Log4j V1 CVE-2022-23305 Public exploitFix available EPSS 66.5% 9.8 CriticalJanuary 18, 2022
• apache log4j, apache software foundation log4j 1.x, broadcom brocade sannav +24 more +26 more Deserialization of untrusted data in JMSSink in Apache Log4j 1.x CVE-2022-23302 Fix available EPSS 63.8% 8.8 HighJanuary 18, 2022
• apache log4j, apache software foundation log4j 1.x, fedoraproject fedora +44 more +46 more Deserialization of untrusted data in JMSAppender in Apache Log4j 1.2 CVE-2021-4104 Public exploitFix available EPSS 80.6% 7.5 HighDecember 14, 2021
• apache axis 1.4, axis, oracle agile engineering data management +35 more +37 more Server Side Request Forgery in Apache Axis CVE-2019-0227 Public exploitFix available EPSS 91.9% 7.5 HighMay 1, 2019
• canonical ubuntu linux, debian linux, nodejs node.js +17 more +19 more Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software... CVE-2018-5407 Public exploitFix available 4.7 MediumNovember 15, 2018
• openssl, canonical ubuntu linux, debian linux +16 more +18 more Timing attack against DSA CVE-2018-0734 Fix available EPSS 12.2% 5.9 MediumOctober 30, 2018
• openssl, canonical ubuntu linux, debian linux +19 more +21 more Timing attack against ECDSA signature generation CVE-2018-0735 Fix available 5.9 MediumOctober 29, 2018
• apache axis, debian linux, oracle agile engineering data management +35 more +37 more Moderate severity vulnerability that affects apache axis CVE-2018-8032 Public exploitFix available EPSS 10.6% 6.1 MediumAugust 2, 2018
• oracle tuxedo Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware (subcomponent: Core).... CVE-2018-3007 8.6 HighJuly 18, 2018
• pivotal spring framework, pivotal software spring security, netapp oncommand insight +39 more +41 more Spring Framework when used in combination with any versions of Spring Security contains an authorization bypass CVE-2018-1258 Fix available 8.8 HighMay 11, 2018
• pivotal spring framework, oracle agile product lifecycle management, application testing suite +27 more +29 more Denial of Service in org.springframework:spring-core CVE-2018-1257 Fix available 6.5 MediumMay 11, 2018
• spring by pivotal framework, vmware spring framework, oracle application testing suite +17 more +19 more Spring Framework has Improperly Implemented Security Check for Standard CVE-2018-1275 Fix available EPSS 57.7% 9.8 CriticalApril 11, 2018
• spring by pivotal framework, vmware spring framework, oracle application testing suite +23 more +25 more Possible privilege escalation in org.springframework:spring-core CVE-2018-1272 Fix available 7.5 HighApril 6, 2018
• spring by pivotal framework, vmware spring framework, oracle application testing suite +26 more +28 more Path Traversal in org.springframework:spring-core CVE-2018-1271 Fix available EPSS 30.3% 5.9 MediumApril 6, 2018
• spring by pivotal framework, vmware spring framework, debian linux +26 more +28 more Spring Framework allows applications to expose STOMP over WebSocket endpoints CVE-2018-1270 Public exploitFix available EPSS 77.6% 9.8 CriticalApril 6, 2018
• oracle tuxedo Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware (subcomponent: Security)... CVE-2017-10278 7.0 HighNovember 14, 2017
• oracle tuxedo Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware (subcomponent: Core).... CVE-2017-10272 9.9 CriticalNovember 14, 2017
• oracle tuxedo Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware (subcomponent: Core).... CVE-2017-10269 10.0 CriticalNovember 14, 2017
• oracle tuxedo Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware (subcomponent: Core).... CVE-2017-10267 7.5 HighNovember 14, 2017
• oracle tuxedo Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware (subcomponent: Core).... CVE-2017-10266 5.3 MediumNovember 14, 2017
• apache tomcat, canonical ubuntu linux, debian linux +55 more +57 more Unrestricted Upload of File with Dangerous Type Apache Tomcat CVE-2017-12617 In KEVPublic exploitFix available EPSS 100.0% 8.1 HighOctober 3, 2017
• openssl, oracle exalogic infrastructure, oss support tools +3 more +5 more ssl/s2_srvr.c in OpenSSL 1.0.1 before 1.0.1r and 1.0.2 before 1.0.2f does not prevent use of... CVE-2015-3197 Public exploitFix available EPSS 10.7% 5.9 MediumFebruary 9, 2016