MF
Product
Managed File Transfer
18
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 4High 12Medium 2Low 0
Watch
Add Managed File Transfer to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-61003 | 9.9 | Aug 18 | Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middleware (component: MFT Runtime Server) Affected: 12.2.1.4.0; 14.1.2.0.0 |
| CVE-2026-60547 | 9.9 | Jul 21 | Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middleware (component: MFT Runtime Server) Affected: 12.2.1.4.0; 14.1.2.0.0 |
| CVE-2026-60537 | 9.9 | Jul 21 | Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middleware (component: MFT Runtime Server) Affected: 12.2.1.4.0; 14.1.2.0.0 |
| CVE-2018-1000613 | 9.8 | Jul 9 | Legion of the Bouncy Castle Legion of the Bouncy Castle Java Cryptography APIs 1.58 up to but not including 1.60 contains a CWE-470: Use of Externally-Controlled Input to Select… Affected: 12.1.3.0.0; 12.2.1.3.0 |
| CVE-2026-60549 | 8.8 | Jul 21 | Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middleware (component: MFT Runtime Server) Affected: 12.2.1.4.0; 14.1.2.0.0 |
| CVE-2026-60545 | 8.8 | Jul 21 | Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middleware (component: MFT Runtime Server) Affected: 12.2.1.4.0; 14.1.2.0.0 |
| CVE-2021-42340 | 7.5 | Oct 14 | The fix for bug 63362 present in Apache Tomcat 10.1.0-M1 to 10.1.0-M5, 10.0.0-M1 to 10.0.11, 9.0.40 to 9.0.53 and 8.5.60 to 8.5.71 introduced a memory leak Affected: 12.2.1.3.0; 12.2.1.4.0 |
| CVE-2021-25122 | 7.5 | Mar 1 | Apache Tomcat h2c request mix-up Affected: 12.2.1.3.0; 12.2.1.4.0 |
| CVE-2020-13935 | 7.5 | Jul 14 | The payload length in a WebSocket frame was not correctly validated in Apache Tomcat 10.0.0-M1 to 10.0.0-M6, 9.0.0.M1 to 9.0.36, 8.5.0 to 8.5.56 and 7.0.27 to 7.0.104 Affected: 12.2.1.3.0; 12.2.1.4.0 |
| CVE-2020-13934 | 7.5 | Jul 14 | An h2c direct connection to Apache Tomcat 10.0.0-M1 to 10.0.0-M6, 9.0.0.M5 to 9.0.36 and 8.5.1 to 8.5.56 did not release the HTTP/1.1 processor after the upgrade to HTTP/2 Affected: 12.2.1.3.0; 12.2.1.4.0 |
| CVE-2019-17359 | 7.5 | Oct 8 | The ASN.1 parser in Bouncy Castle Crypto (aka BC Java) 1.63 can trigger a large attempted memory allocation, and resultant OutOfMemoryError error, via crafted ASN.1 data Affected: 12.2.1.3.0; 12.2.1.4.0 |
| CVE-2018-1000180 | 7.5 | Jun 5 | Bouncy Castle BC 1.54 - 1.59, BC-FJA 1.0.0, BC-FJA 1.0.1 and earlier have a flaw in the Low-level interface to RSA key pair generator, specifically RSA Key Pairs generated in… Affected: 12.1.3.0.0; 12.2.1.3.0 |
| CVE-2019-2538 | 7.1 | Jan 16 | Vulnerability in the Oracle Managed File Transfer component of Oracle Fusion Middleware (subcomponent: MFT Runtime Server) Affected: 12.2.1.3.0; 19.1.0.0.0 |
| CVE-2022-23181 | 7.0 | Jan 27 | The fix for bug CVE-2020-9484 introduced a time of check, time of use vulnerability into Apache Tomcat 10.1.0-M1 to 10.1.0-M8, 10.0.0-M5 to 10.0.14, 9.0.35 to 9.0.56 and 8.5.55 to… Affected: 12.2.1.3.0; 12.2.1.4.0 |
| CVE-2021-25329 | 7.0 | Mar 1 | Incomplete fix for CVE-2020-9484 Affected: 12.2.1.3.0; 12.2.1.4.0 |
| CVE-2020-9484 | 7.0 | May 20 | When using Apache Tomcat versions 10.0.0-M1 to 10.0.0-M4, 9.0.0.M1 to 9.0.34, 8.5.0 to 8.5.54 and 7.0.0 to 7.0.103 if a) an attacker is able to control the contents and name of a… Affected: 12.2.1.3.0; 12.2.1.4.0 |
| CVE-2018-1305 | 6.5 | Feb 23 | Security constraints defined by annotations of Servlets in Apache Tomcat 9.0.0.M1 to 9.0.4, 8.5.0 to 8.5.27, 8.0.0.RC1 to 8.0.49 and 7.0.0 to 7.0.84 were only applied once a… Affected: 12.1.3.0.0; 12.2.1.3.0 |
| CVE-2021-33037 | 5.3 | Jul 12 | Incorrect Transfer-Encoding handling with HTTP/1.0 Affected: 12.2.1.3.0; 12.2.1.4.0 |
Showing 18