Login Request a demo
MF
Product
Managed File Transfer
by Oracle · last CVE Aug 18, 2026
18
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Vulnerabilities18In the news0Timeline
Severity mix
Critical 4High 12Medium 2Low 0
Severity
All severities18Critical4High12Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Managed File Transfer to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-60549
8.8
0%
Jul 21
Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middleware (component: MFT Runtime Server)
Affected: 12.2.1.4.0; 14.1.2.0.0
CVE-2026-60545
8.8
0%
Jul 21
Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middleware (component: MFT Runtime Server)
Affected: 12.2.1.4.0; 14.1.2.0.0
CVE-2021-42340
7.5
12%
Oct 14
The fix for bug 63362 present in Apache Tomcat 10.1.0-M1 to 10.1.0-M5, 10.0.0-M1 to 10.0.11, 9.0.40 to 9.0.53 and 8.5.60 to 8.5.71 introduced a memory leak
Affected: 12.2.1.3.0; 12.2.1.4.0
CVE-2021-25122
7.5
18%
Mar 1
Apache Tomcat h2c request mix-up
Affected: 12.2.1.3.0; 12.2.1.4.0
CVE-2020-13935
7.5
87%
Jul 14
The payload length in a WebSocket frame was not correctly validated in Apache Tomcat 10.0.0-M1 to 10.0.0-M6, 9.0.0.M1 to 9.0.36, 8.5.0 to 8.5.56 and 7.0.27 to 7.0.104
Affected: 12.2.1.3.0; 12.2.1.4.0
CVE-2020-13934
7.5
64%
Jul 14
An h2c direct connection to Apache Tomcat 10.0.0-M1 to 10.0.0-M6, 9.0.0.M5 to 9.0.36 and 8.5.1 to 8.5.56 did not release the HTTP/1.1 processor after the upgrade to HTTP/2
Affected: 12.2.1.3.0; 12.2.1.4.0
CVE-2019-17359
7.5
9%
Oct 8
The ASN.1 parser in Bouncy Castle Crypto (aka BC Java) 1.63 can trigger a large attempted memory allocation, and resultant OutOfMemoryError error, via crafted ASN.1 data
Affected: 12.2.1.3.0; 12.2.1.4.0
CVE-2018-1000180
7.5
3%
Jun 5
Bouncy Castle BC 1.54 - 1.59, BC-FJA 1.0.0, BC-FJA 1.0.1 and earlier have a flaw in the Low-level interface to RSA key pair generator, specifically RSA Key Pairs generated in…
Affected: 12.1.3.0.0; 12.2.1.3.0
CVE-2019-2538
7.1
1%
Jan 16
Vulnerability in the Oracle Managed File Transfer component of Oracle Fusion Middleware (subcomponent: MFT Runtime Server)
Affected: 12.2.1.3.0; 19.1.0.0.0
CVE-2022-23181
7.0
1%
Jan 27
The fix for bug CVE-2020-9484 introduced a time of check, time of use vulnerability into Apache Tomcat 10.1.0-M1 to 10.1.0-M8, 10.0.0-M5 to 10.0.14, 9.0.35 to 9.0.56 and 8.5.55 to…
Affected: 12.2.1.3.0; 12.2.1.4.0
CVE-2021-25329
7.0
9%
Mar 1
Incomplete fix for CVE-2020-9484
Affected: 12.2.1.3.0; 12.2.1.4.0
CVE-2020-9484
7.0
56%
May 20
When using Apache Tomcat versions 10.0.0-M1 to 10.0.0-M4, 9.0.0.M1 to 9.0.34, 8.5.0 to 8.5.54 and 7.0.0 to 7.0.103 if a) an attacker is able to control the contents and name of a…
Affected: 12.2.1.3.0; 12.2.1.4.0
Showing 12