AI
Product
Active IQ Unified Manager
On CISA KEVExploited in the wildRansomware-linked
848
CVEs
9
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 54High 179Medium 267Low 0
Watch
Add Active IQ Unified Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-21365 | 5.3 | Jan 19 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO) Affected: All versions, or not specified |
| CVE-2022-21360 | 5.3 | Jan 19 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO) Affected: All versions, or not specified |
| CVE-2022-21341 | 5.3 | Jan 19 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization) Affected: All versions, or not specified |
| CVE-2022-21340 | 5.3 | Jan 19 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries) Affected: All versions, or not specified |
| CVE-2022-21305 | 5.3 | Jan 19 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot) Affected: All versions, or not specified |
| CVE-2022-21302 | 5.3 | Jan 19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB) Affected: All versions, or not specified |
| CVE-2022-21299 | 5.3 | Jan 19 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP) Affected: All versions, or not specified |
| CVE-2022-21296 | 5.3 | Jan 19 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP) Affected: All versions, or not specified |
| CVE-2022-21294 | 5.3 | Jan 19 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries) Affected: All versions, or not specified |
| CVE-2022-21293 | 5.3 | Jan 19 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries) Affected: All versions, or not specified |
| CVE-2022-21291 | 5.3 | Jan 19 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot) Affected: All versions, or not specified |
| CVE-2022-21283 | 5.3 | Jan 19 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries) Affected: All versions, or not specified |
| CVE-2022-21282 | 5.3 | Jan 19 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP) Affected: All versions, or not specified |
| CVE-2022-21277 | 5.3 | Jan 19 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO) Affected: All versions, or not specified |
| CVE-2022-21271 | 5.3 | Jan 19 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries) Affected: All versions, or not specified |
| CVE-2022-21254 | 5.3 | Jan 19 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer) Affected: All versions, or not specified |
| CVE-2021-35586 | 5.3 | Oct 20 | Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO) Affected: All versions, or not specified |
| CVE-2021-35578 | 5.3 | Oct 20 | Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE) Affected: All versions, or not specified |
| CVE-2021-35565 | 5.3 | Oct 20 | Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE) Affected: All versions, or not specified |
| CVE-2021-35564 | 5.3 | Oct 20 | Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Keytool) Affected: All versions, or not specified |
| CVE-2021-35561 | 5.3 | Oct 20 | Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Utility) Affected: All versions, or not specified |
| CVE-2021-35559 | 5.3 | Oct 20 | Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing) Affected: All versions, or not specified |
| CVE-2021-35556 | 5.3 | Oct 20 | Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing) Affected: All versions, or not specified |
| CVE-2021-28169 | 5.3 | Jun 9 | For Eclipse Jetty versions <= 9.4.40, <= 10.0.2, <= 11.0.2, it is possible for requests to the ConcatServlet with a doubly encoded path to access protected resources within the… Affected: All versions, or not specified |
| CVE-2021-2163 | 5.3 | Apr 22 | Vulnerability in the Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries) Affected: All versions, or not specified |
| CVE-2021-2006 | 5.3 | Jan 20 | Vulnerability in the MySQL Client product of Oracle MySQL (component: C API) Affected: All versions, or not specified |
| CVE-2020-13956 | 5.3 | Dec 2 | Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in request URIs passed to the library as java.net.URI object and pick… Affected: All versions, or not specified |
| CVE-2020-14803 | 5.3 | Oct 21 | Vulnerability in the Java SE product of Oracle Java SE (component: Libraries) Affected: 7.3 and later; 9.5 and later |
| CVE-2020-14621 | 5.3 | Jul 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP) Affected: All versions, or not specified |
| CVE-2020-14550 | 5.3 | Jul 15 | Vulnerability in the MySQL Client product of Oracle MySQL (component: C API) Affected: All versions, or not specified |
| CVE-2020-14155 | 5.3 | Jun 15 | libpcre in PCRE before 8.44 allows an integer overflow via a large number after a (?C substring Affected: All versions, or not specified |
| CVE-2020-12888 | 5.3 | May 15 | The VFIO PCI driver in the Linux kernel through 5.6.13 mishandles attempts to access disabled memory space Affected: All versions, or not specified |
| CVE-2020-2830 | 5.3 | Apr 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Concurrency) Affected: 7.3 and later; 9.5 and later |
| CVE-2020-2806 | 5.3 | Apr 15 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Compiling) Affected: 7.3 and later; 9.5 and later |
| CVE-2020-2781 | 5.3 | Apr 15 | Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JSSE) Affected: 7.3 and later; 9.5 and later |
| CVE-2020-2752 | 5.3 | Apr 15 | Vulnerability in the MySQL Client product of Oracle MySQL (component: C API) Affected: 7.3 and later; 9.5 and later |
| CVE-2019-18282 | 5.3 | Jan 16 | The flow_dissector feature in the Linux kernel 4.3 through 5.x before 5.3.10 has a device tracking vulnerability, aka CID-55667441c84f Affected: All versions, or not specified |
| CVE-2019-2993 | 5.3 | Oct 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: C API) Affected: All versions, or not specified |
| CVE-2019-2924 | 5.3 | Oct 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption) Affected: All versions, or not specified |
| CVE-2019-2923 | 5.3 | Oct 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption) Affected: All versions, or not specified |
| CVE-2019-2922 | 5.3 | Oct 16 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption) Affected: All versions, or not specified |
| CVE-2019-13118 | 5.3 | Jul 1 | In numbers.c in libxslt 1.1.33, a type holding grouping characters of an xsl:number instruction was too narrow and an invalid character/length combination could be passed to… Affected: All versions, or not specified |
| CVE-2019-7317 | 5.3 | Feb 4 | png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute Affected: before 9.6; before 9.6; 9.6; 9.6 |
| CVE-2018-3174 | 5.3 | Oct 17 | Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs) Affected: 7.3 and later; 9.5 and later |
| CVE-2017-15906 | 5.3 | Oct 26 | The process_open function in sftp-server.c in OpenSSH before 7.6 does not properly prevent write operations in readonly mode, which allows attackers to create zero-length files Affected: All versions, or not specified |
| CVE-2017-10357 | 5.3 | Oct 19 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Serialization) Affected: 7.3 and later; 9.5 and later |
| CVE-2017-10355 | 5.3 | Oct 19 | Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking) Affected: 7.3 and later; 9.5 and later |
| CVE-2017-10350 | 5.3 | Oct 19 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAX-WS) Affected: 7.3 and later; 9.5 and later |
| CVE-2017-10349 | 5.3 | Oct 19 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP) Affected: 7.3 and later; 9.5 and later |
| CVE-2017-10348 | 5.3 | Oct 19 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries) Affected: 7.3 and later; 9.5 and later |
The 500 most important CVEs for this product (exploited first, then by severity)