SG
Product
Secure Global Desktop
On CISA KEVExploited in the wildRansomware-linked
32
CVEs
1
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 11High 5Medium 12Low 0
Watch
Add Secure Global Desktop to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-40438 RansomwareIn wildKEV | 9.0 | Sep 16 | mod_proxy SSRF Affected: 5.6 |
| CVE-2021-2248 | 10.0 | Apr 22 | Vulnerability in the Oracle Secure Global Desktop product of Oracle Virtualization (component: Server) Affected: 5.6 |
| CVE-2021-2177 | 10.0 | Apr 22 | Vulnerability in the Oracle Secure Global Desktop product of Oracle Virtualization (component: Gateway) Affected: 5.6 |
| CVE-2021-2447 | 9.9 | Jul 21 | Vulnerability in the Oracle Secure Global Desktop product of Oracle Virtualization (component: Server) Affected: 5.6 |
| CVE-2019-3822 | 9.8 | Feb 6 | libcurl versions from 7.36.0 to before 7.64.0 are vulnerable to a stack-based buffer overflow Affected: 5.4 |
| CVE-2017-3167 | 9.8 | Jun 20 | In Apache httpd 2.2.x before 2.2.33 and 2.4.x before 2.4.26, use of the ap_get_basic_auth_pw() by third-party modules outside of the authentication phase may lead to… Affected: 5.3 |
| CVE-2016-3613 | 9.8 | Jul 21 | Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle Virtualization 4.63, 4.71, and 5.2 allows remote attackers to affect confidentiality, integrity,… Affected: 4.63; 4.71; 5.2 |
| CVE-2021-2446 | 9.6 | Jul 21 | Vulnerability in the Oracle Secure Global Desktop product of Oracle Virtualization (component: Client) Affected: 5.6 |
| CVE-2021-2221 | 9.6 | Apr 22 | Vulnerability in the Oracle Secure Global Desktop product of Oracle Virtualization (component: Client) Affected: 5.6 |
| CVE-2016-5580 | 9.6 | Oct 25 | Unspecified vulnerability in the Secure Global Desktop component in Oracle Virtualization 4.7 and 5.2 allows remote authenticated users to affect confidentiality and availability… Affected: 4.7; 5.2 |
| CVE-2017-9788 | 9.1 | Jul 13 | In Apache httpd before 2.2.34 and 2.4.x before 2.4.27, the value placeholder in [Proxy-]Authorization headers of type 'Digest' was not initialized or reset before or between… Affected: 5.3 |
Showing 11