OS
Product
Oncommand System Manager
On CISA KEVExploited in the wild
27
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 10Medium 13Low 0
Watch
Add Oncommand System Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-1938 In wildKEV | 9.8 | Feb 24 | Apache Tomcat Improper Privilege Management Vulnerability Affected: 3.0.0 through 3.1.3 |
| CVE-2019-17571 | 9.8 | Dec 20 | Included in Log4j 1.2 is a SocketServer class that is vulnerable to deserialization of untrusted data which can be exploited to remotely execute arbitrary code when combined with… Affected: 3.0 through 3.1.3 |
| CVE-2017-7658 | 9.8 | Jun 26 | In Eclipse Jetty Server, versions 9.2.x and older, 9.3.x (all non HTTP/1.x configurations), and 9.4.x (all HTTP/1.x configurations), when presented with two content-lengths… Affected: 3.0 through 3.1.3 |
| CVE-2017-7657 | 9.8 | Jun 26 | In Eclipse Jetty, versions 9.2.x and older, 9.3.x (all configurations), and 9.4.x (non-default configuration with RFC2616 compliance enabled), transfer-encoding chunks are handled… Affected: 3.x |
Showing 4