OB
Product
Oncommand Balance
On CISA KEVExploited in the wildRansomware-linked
83
CVEs
7
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 19High 24Medium 35Low 3
Watch
Add Oncommand Balance to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-5638 RansomwareIn wildKEV | 9.8 | Mar 11 | The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception handling and error-message generation during file-upload… Affected: All versions, or not specified |
| CVE-2016-3427 In wildKEV | 9.8 | Apr 21 | Oracle Java SE and JRockit Unspecified Vulnerability Affected: All versions, or not specified |
| CVE-2017-15095 | 9.8 | Feb 6 | A deserialization flaw was discovered in the jackson-databind in versions before 2.8.10 and 2.9.1, which could allow an unauthenticated user to perform code execution by sending… Affected: All versions, or not specified |
| CVE-2017-7525 | 9.8 | Feb 6 | A deserialization flaw was discovered in the jackson-databind, versions before 2.6.7.1, 2.7.9.1 and 2.8.9, which could allow an unauthenticated user to perform code execution by… Affected: All versions, or not specified |
| CVE-2015-7871 | 9.8 | Aug 7 | Crypto-NAK packets in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to bypass authentication Affected: All versions, or not specified |
| CVE-2015-7853 | 9.8 | Aug 7 | The datalen parameter in the refclock driver in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to execute arbitrary code or cause a denial of service… Affected: All versions, or not specified |
| CVE-2016-9841 | 9.8 | May 23 | inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic Affected: All versions, or not specified |
| CVE-2017-10346 | 9.6 | Oct 19 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot) Affected: All versions, or not specified |
| CVE-2017-10285 | 9.6 | Oct 19 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI) Affected: All versions, or not specified |
| CVE-2017-10111 | 9.6 | Aug 8 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries) Affected: All versions, or not specified |
| CVE-2017-10110 | 9.6 | Aug 8 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: AWT) Affected: All versions, or not specified |
| CVE-2017-10107 | 9.6 | Aug 8 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI) Affected: All versions, or not specified |
| CVE-2017-10101 | 9.6 | Aug 8 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP) Affected: All versions, or not specified |
| CVE-2017-10096 | 9.6 | Aug 8 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP) Affected: All versions, or not specified |
| CVE-2017-10090 | 9.6 | Aug 8 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries) Affected: All versions, or not specified |
| CVE-2017-10089 | 9.6 | Aug 8 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: ImageIO) Affected: All versions, or not specified |
| CVE-2017-10087 | 9.6 | Aug 8 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries) Affected: All versions, or not specified |
| CVE-2017-10086 | 9.6 | Aug 8 | Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX) Affected: All versions, or not specified |
| CVE-2017-10102 | 9.0 | Aug 8 | Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI) Affected: All versions, or not specified |
Showing 19