SE
Product
Sd-wan Edge
On CISA KEVExploited in the wild
24
CVEs
2
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 4High 11Medium 8Low 1
Watch
Add Sd-wan Edge to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-22965 In wildKEV | 9.8 | Apr 1 | Spring Framework JDK 9+ Remote Code Execution Vulnerability Affected: 9.0; 9.1 |
| CVE-2022-22963 In wildKEV | 9.8 | Apr 1 | VMware Tanzu Spring Cloud Function Remote Code Execution Vulnerability Affected: 9.0; 9.1 |
| CVE-2020-14606 | 10.0 | Jul 15 | Vulnerability in the Oracle SD-WAN Edge product of Oracle Communications Applications (component: User Interface) Affected: 8.2; 9.0 |
| CVE-2019-1010238 | 9.8 | Jul 19 | Gnome Pango 1.42 and later is affected by: Buffer Overflow Affected: 7.3; 8.0; 8.1; 8.2 |
| CVE-2019-14821 | 8.8 | Sep 19 | An out-of-bounds access issue was found in the Linux kernel, all versions through 5.3, in the way Linux kernel's KVM hypervisor implements the Coalesced MMIO write operation Affected: 7.3; 8.0; 8.1; 8.2 |
| CVE-2020-10543 | 8.2 | Jun 5 | Perl before 5.30.3 on 32-bit platforms allows a heap-based buffer overflow because nested regular expression quantifiers have an integer overflow Affected: 8.2; 9.0; 9.1 |
| CVE-2020-35491 | 8.1 | Dec 17 | FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to… Affected: 9.0 |
| CVE-2019-3900 | 7.7 | Apr 25 | An infinite loop issue was found in the vhost_net kernel module in Linux Kernel up to and including v5.1-rc6, while handling incoming packets in handle_rx() Affected: 8.2 |
| CVE-2020-36518 | 7.5 | Mar 11 | jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects Affected: 9.0; 9.1 |
| CVE-2021-42340 | 7.5 | Oct 14 | The fix for bug 63362 present in Apache Tomcat 10.1.0-M1 to 10.1.0-M5, 10.0.0-M1 to 10.0.11, 9.0.40 to 9.0.53 and 8.5.60 to 8.5.71 introduced a memory leak Affected: 9.0; 9.1 |
| CVE-2020-17527 | 7.5 | Dec 3 | Apache Tomcat: Request header mix-up between HTTP/2 streams Affected: 9.0 |
| CVE-2020-25649 | 7.5 | Dec 3 | A flaw was found in FasterXML Jackson Databind, where it did not have entity expansion secured properly Affected: 9.0 |
| CVE-2020-12723 | 7.5 | Jun 5 | regcomp.c in Perl before 5.30.3 allows a buffer overflow via a crafted regular expression because of recursive S_study_chunk calls Affected: 8.2; 9.0; 9.1 |
| CVE-2019-19052 | 7.5 | Nov 18 | A memory leak in the gs_can_open() function in drivers/net/can/usb/gs_usb.c in the Linux kernel before 5.3.11 allows attackers to cause a denial of service (memory consumption) by… Affected: 8.2 |
| CVE-2020-24394 | 7.1 | Aug 19 | In the Linux kernel before 5.7.8, fs/nfsd/vfs.c (in the NFS server) can set incorrect permissions on new filesystem objects when the filesystem lacks ACL support, aka… Affected: 8.2 |
| CVE-2019-5108 | 6.5 | Dec 23 | An exploitable denial-of-service vulnerability exists in the Linux kernel prior to mainline 5.3 Affected: 8.2 |
| CVE-2020-12771 | 5.5 | May 9 | An issue was discovered in the Linux kernel through 5.6.11 Affected: 8.2 |
| CVE-2019-19922 | 5.5 | Dec 22 | kernel/sched/fair.c in the Linux kernel before 5.3.9, when cpu.cfs_quota_us is used (e.g., with Kubernetes), allows attackers to cause a denial of service against non-cpu-bound… Affected: 8.2 |
| CVE-2021-33037 | 5.3 | Jul 12 | Incorrect Transfer-Encoding handling with HTTP/1.0 Affected: 9.0; 9.1 |
| CVE-2019-19535 | 4.6 | Dec 3 | In the Linux kernel before 5.2.9, there is an info-leak bug that can be caused by a malicious USB device in the drivers/net/can/usb/peak_usb/pcan_usb_fd.c driver, aka… Affected: 8.2 |
| CVE-2019-19063 | 4.6 | Nov 18 | Two memory leaks in the rtl_usb_probe() function in drivers/net/wireless/realtek/rtlwifi/usb.c in the Linux kernel through 5.3.11 allow attackers to cause a denial of service… Affected: 8.2 |
| CVE-2019-15218 | 4.6 | Aug 19 | An issue was discovered in the Linux kernel before 5.1.8 Affected: 8.2 |
| CVE-2020-13943 | 4.3 | Oct 12 | If an HTTP/2 client connecting to Apache Tomcat 10.0.0-M1 to 10.0.0-M7, 9.0.0.M1 to 9.0.37 or 8.5.0 to 8.5.57 exceeded the agreed maximum number of concurrent streams for a… Affected: 9.0 |
| CVE-2020-16166 | 3.7 | Jul 30 | The Linux kernel through 5.7.11 allows remote attackers to make observations that help to obtain sensitive information about the internal state of the network RNG, aka… Affected: 8.2 |
Showing 24