Latest oracle instantis enterprisetrack Vulnerabilities

● CVE-2021-44224

apache. Multiple issues were addressed by updating apache to version 2.4.53.

Apple Catalina

Apple macOS Big Sur<11.6.6

<12.4

Apache HTTP server>=2.4.7<2.4.52

Fedoraproject Fedora=34

Fedoraproject Fedora=35

and 39 more

● CVE-2021-44790

apache. Multiple issues were addressed by updating apache to version 2.4.53.

Apple Catalina

Apple macOS Big Sur<11.6.6

<12.4

Apache HTTP server<=2.4.51

Fedoraproject Fedora=34

Fedoraproject Fedora=35

and 40 more

● CVE-2021-45105

Apache Log4j StrSubstitutor Uncontrolled Recursion Denial-of-Service Vulnerability

redhat/eap7-log4j<0:2.17.1-1.redhat_00001.1.el8ea

redhat/eap7-log4j<0:2.17.1-1.redhat_00001.1.el7ea

redhat/rh-sso7-keycloak<0:15.0.6-1.redhat_00001.1.el7

redhat/rh-sso7-keycloak<0:15.0.6-1.redhat_00001.1.el8

debian/apache-log4j2

debian/apache-log4j2<=2.16.0-1~deb10u1<=2.16.0-1<=2.16.0-1~deb11u1

and 217 more

● CVE-2021-42013

Apache HTTP Server Path Traversal Vulnerability

Apache HTTP server=2.4.49

Apache HTTP server=2.4.50

Fedoraproject Fedora=34

Fedoraproject Fedora=35

Oracle Instantis Enterprisetrack=17.1

Oracle Instantis Enterprisetrack=17.2

and 5 more

● CVE-2021-41773

Apache HTTP Server Path Traversal Vulnerability

PHPUnit unit testing framework

Apache HTTP server

Laravel web application framework

Apache HTTP server=2.4.49

Fedoraproject Fedora=34

Fedoraproject Fedora=35

and 4 more

● CVE-2021-41524

While fuzzing the 2.4.49 httpd, a new null pointer dereference was detected during HTTP/2 request processing, allowing an external source to DoS the server. This requires a specially crafted request. ...

redhat/httpd<2.4.50

redhat/jbcs-httpd24-httpd<0:2.4.51-28.el8

redhat/jbcs-httpd24-httpd<0:2.4.51-28.el7

Apache HTTP server=2.4.49

Fedoraproject Fedora=34

Fedoraproject Fedora=35

and 4 more

● CVE-2021-39275

ap_escape_quotes() may write beyond the end of a buffer when given malicious input. No included modules pass untrusted data to these functions, but third-party / external modules may. This issue affec...

Apache HTTP server<=2.4.48

Fedoraproject Fedora=34

Fedoraproject Fedora=35

Debian Debian Linux=9.0

Debian Debian Linux=10.0

Debian Debian Linux=11.0

and 16 more

● CVE-2021-40438

Apache HTTP Server-Side Request Forgery (SSRF)

Apache HTTP server<=2.4.48

Fedoraproject Fedora=34

Fedoraproject Fedora=35

Debian Debian Linux=9.0

Debian Debian Linux=10.0

and 27 more

● CVE-2021-36160

A carefully crafted request uri-path can cause mod_proxy_uwsgi to read above the allocated memory and crash (DoS). This issue affects Apache HTTP Server versions 2.4.30 to 2.4.48 (inclusive).

redhat/httpd<2.4.49

redhat/jbcs-httpd24-httpd<0:2.4.51-28.el8

redhat/jbcs-httpd24-httpd<0:2.4.51-28.el7

redhat/httpd24-httpd<0:2.4.34-23.el7.5

debian/apache2

debian/uwsgi<=2.0.18-1<=2.0.19.1-7.1<=2.0.21-5.1<=2.0.22-4

and 20 more

● CVE-2021-34798

Malformed requests may cause the server to dereference a NULL pointer. This issue affects Apache HTTP Server 2.4.48 and earlier.

redhat/jbcs-httpd24-apr<0:1.6.3-107.el8

redhat/jbcs-httpd24-apr-util<0:1.6.1-84.el8

redhat/jbcs-httpd24-curl<0:7.78.0-2.el8

redhat/jbcs-httpd24-httpd<0:2.4.37-78.el8

redhat/jbcs-httpd24-nghttp2<0:1.39.2-39.el8

redhat/jbcs-httpd24-openssl<1:1.1.1g-8.el8

and 38 more

● CVE-2021-2351

Vulnerability in the Advanced Networking Option component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c. Difficult to exploit vulnerability allows unau...

Oracle Advanced Networking Option=12.1.0.2

Oracle Advanced Networking Option=12.2.0.1

Oracle Advanced Networking Option=19c

Oracle Agile Engineering Data Management=6.2.1.0

Oracle Agile PLM=9.3.6

Oracle Agile Product Lifecycle Management for Process=6.2.2.0

and 242 more

● CVE-2021-33037

Apache Tomcat is vulnerable to HTTP request smuggling, caused by improper parsing of the HTTP transfer-encoding request header. By sending a specially-crafted HTTP(S) transfer-encoding request header,...

redhat/jws5-tomcat<0:9.0.50-3.redhat_00004.1.el7

redhat/jws5-tomcat-native<0:1.2.30-3.redhat_3.el7

redhat/jws5-tomcat-vault<0:1.1.8-4.Final_redhat_00004.1.el7

redhat/jws5-tomcat<0:9.0.50-3.redhat_00004.1.el8

redhat/jws5-tomcat-native<0:1.2.30-3.redhat_3.el8

redhat/jws5-tomcat-vault<0:1.1.8-4.Final_redhat_00004.1.el8

and 91 more

● CVE-2021-22222

Infinite loop in DVB-S2-BB dissector in Wireshark 3.4.0 to 3.4.5 allows denial of service via packet injection or crafted capture file

debian/wireshark

Wireshark Wireshark>=3.4.0<=3.4.5

Oracle Enterprise Manager Ops Center=12.4.0.0

Oracle Instantis Enterprisetrack=17.1

Oracle Instantis Enterprisetrack=17.2

Oracle Instantis Enterprisetrack=17.3

and 3 more

● CVE-2021-31618

NULL pointer dereference on specially crafted HTTP/2 request

Apache HTTP server=1.15.17

Apache HTTP server=2.4.47

Fedoraproject Fedora=33

Fedoraproject Fedora=34

Debian Debian Linux=9.0

Debian Debian Linux=10.0

and 5 more

● CVE-2021-30641

Apache HTTP Server versions 2.4.39 to 2.4.46 Unexpected matching behavior with 'MergeSlashes OFF'

redhat/jbcs-httpd24-apr<0:1.6.3-107.el8

redhat/jbcs-httpd24-apr-util<0:1.6.1-84.el8

redhat/jbcs-httpd24-curl<0:7.78.0-2.el8

redhat/jbcs-httpd24-httpd<0:2.4.37-78.el8

redhat/jbcs-httpd24-nghttp2<0:1.39.2-39.el8

redhat/jbcs-httpd24-openssl<1:1.1.1g-8.el8

and 20 more

● CVE-2019-17567

Apache HTTP Server versions 2.4.6 to 2.4.46 mod_proxy_wstunnel configured on an URL that is not necessarily Upgraded by the origin server was tunneling the whole connection regardless, thus allowing f...

Apache HTTP server>=2.4.6<=2.4.46

Fedoraproject Fedora=34

Fedoraproject Fedora=35

Oracle Enterprise Manager Ops Center=12.4.0.0

Oracle Instantis Enterprisetrack=17.1

Oracle Instantis Enterprisetrack=17.2

and 2 more

● CVE-2020-13950

Apache HTTP Server versions 2.4.41 to 2.4.46 mod_proxy_http can be made to crash (NULL pointer dereference) with specially crafted requests using both Content-Length and Transfer-Encoding headers, lea...

Apache HTTP server>=2.4.41<=2.4.46

Debian Debian Linux=9.0

Debian Debian Linux=10.0

Fedoraproject Fedora=34

Fedoraproject Fedora=35

Oracle Enterprise Manager Ops Center=12.4.0.0

and 20 more

● CVE-2021-26691

In Apache HTTP Server versions 2.4.0 to 2.4.46 a specially crafted SessionHeader sent by an origin server could cause a heap overflow

redhat/jbcs-httpd24-apr<0:1.6.3-107.el8

redhat/jbcs-httpd24-apr-util<0:1.6.1-84.el8

redhat/jbcs-httpd24-curl<0:7.78.0-2.el8

redhat/jbcs-httpd24-httpd<0:2.4.37-78.el8

redhat/jbcs-httpd24-nghttp2<0:1.39.2-39.el8

redhat/jbcs-httpd24-openssl<1:1.1.1g-8.el8

and 23 more

● CVE-2021-26690

Apache HTTP Server versions 2.4.0 to 2.4.46 A specially crafted Cookie header handled by mod_session can cause a NULL pointer dereference and crash, leading to a possible Denial Of Service

redhat/jbcs-httpd24-apr<0:1.6.3-107.el8

redhat/jbcs-httpd24-apr-util<0:1.6.1-84.el8

redhat/jbcs-httpd24-curl<0:7.78.0-2.el8

redhat/jbcs-httpd24-httpd<0:2.4.37-78.el8

redhat/jbcs-httpd24-nghttp2<0:1.39.2-39.el8

redhat/jbcs-httpd24-openssl<1:1.1.1g-8.el8

and 20 more

● CVE-2020-35452

Apache HTTP Server versions 2.4.0 to 2.4.46 A specially crafted Digest nonce can cause a stack overflow in mod_auth_digest. There is no report of this overflow being exploitable, nor the Apache HTTP S...

redhat/jbcs-httpd24-apr<0:1.6.3-107.el8

redhat/jbcs-httpd24-apr-util<0:1.6.1-84.el8

redhat/jbcs-httpd24-curl<0:7.78.0-2.el8

redhat/jbcs-httpd24-httpd<0:2.4.37-78.el8

redhat/jbcs-httpd24-nghttp2<0:1.39.2-39.el8

redhat/jbcs-httpd24-openssl<1:1.1.1g-8.el8

and 20 more

● CVE-2021-33503

### Impact When provided with a URL containing many `@` characters in the authority component the authority regular expression exhibits catastrophic backtracking causing a denial of service if a URL ...

redhat/automation-hub<0:4.2.6-1.el7

redhat/python3-chardet<0:3.0.4-3.el7

redhat/python3-click<0:7.1.2-3.el7

redhat/python3-gnupg<0:0.4.6-3.el7

redhat/python3-jinja2<0:2.11.2-3.el7

redhat/python3-markupsafe<0:1.1.1-4.el7

and 38 more

● CVE-2021-25122

A flaw was found in Apache Tomcat. When responding to new h2c connection requests, Apache Tomcat could duplicate request headers and a limited amount of request body from one request to another meanin...

redhat/jws5-ecj<0:4.12.0-3.redhat_2.2.el7

redhat/jws5-tomcat<0:9.0.43-11.redhat_00011.1.el7

redhat/jws5-tomcat-native<0:1.2.26-3.redhat_3.el7

redhat/jws5-tomcat-vault<0:1.1.8-2.Final_redhat_00003.1.el7

redhat/jws5-ecj<0:4.12.0-3.redhat_2.2.el8

redhat/jws5-tomcat<0:9.0.43-11.redhat_00011.1.el8

and 65 more

● CVE-2021-25329

The fix for CVE-2020-9484 was incomplete. When using Apache Tomcat 10.0.0-M1 to 10.0.0, 9.0.0.M1 to 9.0.41, 8.5.0 to 8.5.61 or 7.0.0. to 7.0.107 with a configuration edge case that was highly unlikely...

redhat/jws5-ecj<0:4.12.0-3.redhat_2.2.el7

redhat/jws5-tomcat<0:9.0.43-11.redhat_00011.1.el7

redhat/jws5-tomcat-native<0:1.2.26-3.redhat_3.el7

redhat/jws5-tomcat-vault<0:1.1.8-2.Final_redhat_00003.1.el7

redhat/jws5-ecj<0:4.12.0-3.redhat_2.2.el8

redhat/jws5-tomcat<0:9.0.43-11.redhat_00011.1.el8

and 69 more

● CVE-2020-11987

Apache Batik 1.13 is vulnerable to server-side request forgery, caused by improper input validation by the NodePickerPanel. By using a specially-crafted argument, an attacker could exploit this vulner...

Apache Batik<=1.13

Fedoraproject Fedora=33

Fedoraproject Fedora=34

Oracle Banking Apis=18.3

Oracle Banking Apis=19.1

Oracle Banking Apis=19.2

and 38 more

● CVE-2020-17527

Apache Tomcat could allow a remote attacker to obtain sensitive information, caused by an issue when the HTTP request header value can be reused from the previous stream received on an HTTP/2 connecti...

redhat/jws5-tomcat<0:9.0.36-9.redhat_8.1.el7

redhat/jws5-tomcat-native<0:1.2.25-3.redhat_3.el7

redhat/jws5-tomcat<0:9.0.36-9.redhat_8.1.el8

redhat/jws5-tomcat-native<0:1.2.25-3.redhat_3.el8

redhat/tomcat<10.0.0

redhat/tomcat<9.0.40

and 65 more

● CVE-2020-13943

A flaw was found in Apache Tomcat. If an HTTP/2 client exceeded the agreed maximum number of concurrent streams for a connection (in violation of the HTTP/2 protocol), it is possible that a subsequent...

maven/org.apache.tomcat:tomcat-coyote>=8.5.0<=8.5.57

maven/org.apache.tomcat:tomcat-coyote>=9.0.0-M1<=9.0.37

maven/org.apache.tomcat:tomcat-coyote>=10.0.0-M1<=10.0.0-M7

redhat/jws5-tomcat<0:9.0.36-9.redhat_8.1.el7

redhat/jws5-tomcat-native<0:1.2.25-3.redhat_3.el7

redhat/jws5-tomcat<0:9.0.36-9.redhat_8.1.el8

and 139 more

● CVE-2020-9490

Apache HTTP Server versions 2.4.20 to 2.4.43. A specially crafted value for the 'Cache-Digest' header in a HTTP/2 request would result in a crash when the server actually tries to HTTP/2 PUSH a resour...

ubuntu/apache2<2.4.29-1ubuntu4.14

ubuntu/apache2<2.4.41-4ubuntu3.1

ubuntu/apache2<2.4.44

>=2.4.20<2.4.46

>=8.2.0<=8.2.2

and 106 more

● CVE-2020-11993

Apache HTTP Server versions 2.4.20 to 2.4.43 When trace/debug was enabled for the HTTP/2 module and on certain traffic edge patterns, logging statements were made on the wrong connection, causing conc...

redhat/httpd<2.4.44

redhat/jbcs-httpd24-apr<0:1.6.3-104.jbcs.el6

redhat/jbcs-httpd24-apr-util<0:1.6.1-75.jbcs.el6

redhat/jbcs-httpd24-brotli<0:1.0.6-38.jbcs.el6

redhat/jbcs-httpd24-curl<0:7.64.1-44.jbcs.el6

redhat/jbcs-httpd24-httpd<0:2.4.37-64.jbcs.el6

and 55 more

● CVE-2020-11984

Apache HTTP server 2.4.32 to 2.4.44 mod_proxy_uwsgi info disclosure and possible RCE

redhat/jbcs-httpd24-apr<0:1.6.3-104.jbcs.el6

redhat/jbcs-httpd24-apr-util<0:1.6.1-75.jbcs.el6

redhat/jbcs-httpd24-brotli<0:1.0.6-38.jbcs.el6

redhat/jbcs-httpd24-curl<0:7.64.1-44.jbcs.el6

redhat/jbcs-httpd24-httpd<0:2.4.37-64.jbcs.el6

redhat/jbcs-httpd24-jansson<0:2.11-53.jbcs.el6

and 44 more

● CVE-2020-13935

The payload length in a WebSocket frame was not correctly validated in Apache Tomcat 10.0.0-M1 to 10.0.0-M6, 9.0.0.M1 to 9.0.36, 8.5.0 to 8.5.56 and 7.0.27 to 7.0.104. Invalid payload lengths could tr...

redhat/tomcat<0:7.0.76-15.el7

redhat/jbossweb<0:7.5.31-2.Final_redhat_2.1.ep6.el5

redhat/jbossweb<0:7.5.31-2.Final_redhat_2.1.ep6.el6

redhat/jboss-as-appclient<0:7.5.24-2.Final_redhat_00001.1.ep6.el6

redhat/jbossas-appclient<0:7.5.24-2.Final_redhat_00001.1.ep6.el6

redhat/jbossas-bundles<0:7.5.24-2.Final_redhat_00001.1.ep6.el6

and 220 more

● CVE-2020-13934

A flaw was found in Apache Tomcat, where an h2c direct connection did not release the HTTP/1.1 processor after the upgrade to HTTP/2. If a sufficient number of such requests are made, an OutOfMemoryEx...

redhat/jws5-tomcat<0:9.0.30-5.redhat_6.1.el6

redhat/jws5-tomcat<0:9.0.30-5.redhat_6.1.el7

redhat/jws5-tomcat<0:9.0.30-5.redhat_6.1.el8

redhat/tomcat<10.0.0

redhat/tomcat<9.0.37

redhat/tomcat<8.5.57

and 58 more

● CVE-2019-17566

Apache Batik is vulnerable to server-side request forgery, caused by improper input validation by the "xlink:href" attributes. By using a specially-crafted argument, an attacker could exploit this vul...

maven/org.apache.xmlgraphics:batik<1.13

Apache Batik<1.13

Oracle API Gateway=11.1.2.4.0

Oracle Business Intelligence=5.5.0.0.0

Oracle Business Intelligence=5.9.0.0.0

Oracle Business Intelligence=12.2.1.3.0

and 26 more

● CVE-2020-9484

When using Apache Tomcat versions 10.0.0-M1 to 10.0.0-M4, 9.0.0.M1 to 9.0.34, 8.5.0 to 8.5.54 and 7.0.0 to 7.0.103 if a) an attacker is able to control the contents and name of a file on the server; a...

redhat/tomcat6<0:6.0.24-115.el6_10

redhat/tomcat<0:7.0.76-12.el7_8

redhat/tomcat7<0:7.0.70-40.ep7.el6

redhat/tomcat8<0:8.0.36-44.ep7.el6

redhat/tomcat-native<0:1.2.23-22.redhat_22.ep7.el6

redhat/tomcat7<0:7.0.70-40.ep7.el7

and 99 more

● CVE-2020-11655

SQLite through 3.31.1 allows attackers to cause a denial of service (segmentation fault) via a malformed window-function query because the AggInfo object's initialization is mishandled.

SQLite SQLite<=3.31.1

NetApp ONTAP Select Deploy administration utility

Debian Debian Linux=8.0

Debian Debian Linux=9.0

Canonical Ubuntu Linux=16.04

Canonical Ubuntu Linux=18.04

and 26 more

● CVE-2020-1927

In Apache HTTP Server 2.4.0 to 2.4.41, redirects configured with mod_rewrite that were intended to be self-referential might be fooled by encoded newlines and redirect instead to an an unexpected URL ...

redhat/jbcs-httpd24-apr<0:1.6.3-86.jbcs.el6

redhat/jbcs-httpd24-brotli<0:1.0.6-21.jbcs.el6

redhat/jbcs-httpd24-httpd<0:2.4.37-52.jbcs.el6

redhat/jbcs-httpd24-openssl<1:1.1.1c-16.jbcs.el6

redhat/jbcs-httpd24-apr<0:1.6.3-86.jbcs.el7

redhat/jbcs-httpd24-brotli<0:1.0.6-21.jbcs.el7

and 59 more

● CVE-2020-1934

In Apache HTTP Server 2.4.0 to 2.4.41, mod_proxy_ftp may use uninitialized memory when proxying to a malicious FTP server.

redhat/jbcs-httpd24-curl<0:7.64.1-36.jbcs.el6

redhat/jbcs-httpd24-httpd<0:2.4.37-57.jbcs.el6

redhat/jbcs-httpd24-nghttp2<0:1.39.2-25.jbcs.el6

redhat/jbcs-httpd24-curl<0:7.64.1-36.jbcs.el7

redhat/jbcs-httpd24-httpd<0:2.4.37-57.jbcs.el7

redhat/jbcs-httpd24-nghttp2<0:1.39.2-25.jbcs.el7

and 50 more

● CVE-2019-17569

Apache Tomcat is vulnerable to HTTP request smuggling, caused by a flaw when handling unusual Transfer-Encoding HTTP header. By sending a specially-crafted request, an attacker could exploit this vuln...

redhat/jws5-tomcat<0:9.0.30-3.redhat_4.1.el6

redhat/jws5-tomcat-native<0:1.2.23-4.redhat_4.el6

redhat/jws5-tomcat<0:9.0.30-3.redhat_4.1.el7

redhat/jws5-tomcat-native<0:1.2.23-4.redhat_4.el7

redhat/jws5-tomcat<0:9.0.30-3.redhat_4.1.el8

redhat/jws5-tomcat-native<0:1.2.23-4.redhat_4.el8

and 30 more

● CVE-2020-1935

redhat/tomcat<0:7.0.76-16.el7_9

redhat/tomcat<0:7.0.76-11.el7_6

redhat/tomcat<0:7.0.76-12.el7_7

redhat/tomcat7<0:7.0.70-41.ep7.el6

redhat/tomcat8<0:8.0.36-45.ep7.el6

redhat/tomcat7<0:7.0.70-41.ep7.el7

and 75 more

● CVE-2020-1938

Apache Tomcat Improper Privilege Management Vulnerability

redhat/tomcat6<0:6.0.24-114.el6_10

redhat/tomcat<0:7.0.76-11.el7_7

redhat/tomcat<0:7.0.76-10.el7_6

redhat/jbossweb<0:7.5.30-2.Final_redhat_2.1.ep6.el5

redhat/glassfish-jsf12-eap6<0:1.2.15-11.b01_SP2_redhat_2.1.ep6.el5

redhat/hornetq<0:2.3.25-29.SP31_redhat_00001.1.ep6.el5

and 265 more

● CVE-2019-0219

A website running in the InAppBrowser webview on Android could execute arbitrary JavaScript in the main application's webview using a specially crafted gap-iab: URI.

Apache Cordova Inappbrowser<=3.0.0

Oracle Instantis Enterprisetrack=17.1

Oracle Instantis Enterprisetrack=17.2

Oracle Instantis Enterprisetrack=17.3

Oracle Retail Xstore Point of Service=16.0.6

Oracle Retail Xstore Point of Service=17.0.4

and 2 more

● CVE-2019-17563

Apache Tomcat could allow a local attacker to hijack a user's session. By using the FORM authentication function, an attacker could exploit this vulnerability to gain access to another user's ...

redhat/tomcat<0:7.0.76-15.el7

redhat/tomcat<0:7.0.76-11.el7_6

redhat/tomcat<0:7.0.76-12.el7_7

redhat/tomcat7<0:7.0.70-38.ep7.el6

redhat/tomcat8<0:8.0.36-42.ep7.el6

redhat/tomcat-native<0:1.2.23-21.redhat_21.ep7.el6

and 30 more

● CVE-2019-12415

Apache POI could allow a remote attacker to obtain sensitive information, caused by an XML external entity (XXE) error when processing XML data by tool XSSFExportToXml. By sending a specially-crafted ...

redhat/poi<4.1.0

IBM Cloud Pak for Business Automation<=V22.0.2

IBM Cloud Pak for Business Automation<=V21.0.3 - V21.0.3-IF016

IBM Cloud Pak for Business Automation<=V22.0.1 - V22.0.1-IF006 and later fixes V21.0.2 - V21.0.2-IF012 and later fixesV21.0.1 - V21.0.1-IF007 and later fixesV20.0.1 - V20.0.3 and later fixesV19.0.1 - V19.0.3 and later fixesV18.0.0 - V18.0.2 and later fixes

Apache POI<=4.1.0

Oracle Application Testing Suite=12.5.0.3

and 63 more

● CVE-2019-10097

In Apache HTTP Server 2.4.32-2.4.39, when mod_remoteip was configured to use a trusted intermediary proxy server using the "PROXY" protocol, a specially crafted PROXY header could trigger a stack buff...

Apache HTTP server=2.4.33

Apache HTTP server=2.4.34

Apache HTTP server=2.4.35

Apache HTTP server=2.4.37

Apache HTTP server=2.4.38

Oracle Communications Element Manager=8.0.0

and 32 more

● CVE-2019-10082

In Apache HTTP Server 2.4.18-2.4.39, using fuzzed network input, the http/2 session handling could be made to read memory after being freed, during connection shutdown.

redhat/jbcs-httpd24-apr<0:1.6.3-86.jbcs.el6

redhat/jbcs-httpd24-brotli<0:1.0.6-21.jbcs.el6

redhat/jbcs-httpd24-httpd<0:2.4.37-52.jbcs.el6

redhat/jbcs-httpd24-openssl<1:1.1.1c-16.jbcs.el6

redhat/jbcs-httpd24-apr<0:1.6.3-86.jbcs.el7

redhat/jbcs-httpd24-brotli<0:1.0.6-21.jbcs.el7

and 31 more

● CVE-2019-9517

Some HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to a denial of service. The attacker opens the HTTP/2 window so the peer can send without constr...

redhat/jbcs-httpd24-httpd<0:2.4.29-41.jbcs.el6

redhat/jbcs-httpd24-nghttp2<0:1.39.2-1.jbcs.el6

redhat/jbcs-httpd24-apr<0:1.6.3-63.jbcs.el6

redhat/jbcs-httpd24-apr-util<0:1.6.1-48.jbcs.el6

redhat/jbcs-httpd24-brotli<0:1.0.6-7.jbcs.el6

redhat/jbcs-httpd24-curl<0:7.64.1-14.jbcs.el6

and 77 more

● CVE-2019-10219

A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This...

redhat/eap7-apache-cxf<0:3.2.11-1.redhat_00001.1.el6ea

redhat/eap7-glassfish-jsf<0:2.3.5-6.SP3_redhat_00004.1.el6ea

redhat/eap7-hal-console<0:3.0.19-1.Final_redhat_00001.1.el6ea

redhat/eap7-hibernate<0:5.3.14-1.Final_redhat_00001.1.el6ea

redhat/eap7-hibernate-validator<0:6.0.18-1.Final_redhat_00001.1.el6ea

redhat/eap7-jackson-annotations<0:2.9.10-1.redhat_00003.1.el6ea

and 795 more

● CVE-2019-0227

A Server Side Request Forgery (SSRF) vulnerability affected the Apache Axis 1.4 distribution that was last released in 2006. Security and bug commits commits continue in the projects Axis 1.x Subversi...

Apache Axis=1.4

Oracle Agile Engineering Data Management=6.2.1.0

Oracle Agile Product Lifecycle Management Framework=9.3.3

Oracle Application Testing Suite=13.2.0.1

Oracle Application Testing Suite=13.3.0.1

Oracle Big Data Discovery=1.6

and 76 more

● CVE-2019-0197

A vulnerability was found in Apache HTTP Server 2.4.34 to 2.4.38. When HTTP/2 was enabled for a http: host or H2Upgrade was enabled for h2 on a https: host, an Upgrade request from http/1.1 to http/2 ...

redhat/jbcs-httpd24-apr<0:1.6.3-63.jbcs.el6

redhat/jbcs-httpd24-apr-util<0:1.6.1-48.jbcs.el6

redhat/jbcs-httpd24-brotli<0:1.0.6-7.jbcs.el6

redhat/jbcs-httpd24-curl<0:7.64.1-14.jbcs.el6

redhat/jbcs-httpd24-httpd<0:2.4.37-33.jbcs.el6

redhat/jbcs-httpd24-jansson<0:2.11-20.jbcs.el6

and 49 more

● CVE-2019-0190

A bug exists in the way mod_ssl handled client renegotiations. A remote attacker could send a carefully crafted request that would cause mod_ssl to enter a loop leading to a denial of service. This bu...

Apache HTTP server=2.4.37

OpenSSL OpenSSL>=1.1.1

Oracle Enterprise Manager Ops Center=12.3.3

Oracle Hospitality Guest Access=4.2.0

Oracle Hospitality Guest Access=4.2.1

Oracle Instantis Enterprisetrack=17.1

and 4 more

● CVE-2018-17189

In Apache HTTP server versions 2.4.37 and prior, by sending request bodies in a slow loris way to plain resources, the h2 stream for that request unnecessarily occupied a server thread cleaning up tha...

redhat/jbcs-httpd24-apr<0:1.6.3-63.jbcs.el6

redhat/jbcs-httpd24-apr-util<0:1.6.1-48.jbcs.el6

redhat/jbcs-httpd24-brotli<0:1.0.6-7.jbcs.el6

redhat/jbcs-httpd24-curl<0:7.64.1-14.jbcs.el6

redhat/jbcs-httpd24-httpd<0:2.4.37-33.jbcs.el6

redhat/jbcs-httpd24-jansson<0:2.11-20.jbcs.el6

and 60 more

Latest oracle instantis enterprisetrack Vulnerabilities

Company

Resources

Contact