SG
Product
Secure Global Desktop
On CISA KEVExploited in the wildRansomware-linked
32
CVEs
1
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 11High 5Medium 12Low 0
Watch
Add Secure Global Desktop to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-17091 | 6.1 | Oct 2 | faces/context/PartialViewContextImpl.java in Eclipse Mojarra, as used in Mojarra for Eclipse EE4J before 2.3.10 and Mojarra JavaServer Faces before 2.2.20, allows Reflected XSS… Affected: 5.4; 5.5 |
| CVE-2019-10092 | 6.1 | Sep 26 | In Apache HTTP Server 2.4.0-2.4.39, a limited cross-site scripting issue was reported affecting the mod_proxy error page Affected: 5.4; 5.5 |
| CVE-2018-19439 | 6.1 | Dec 13 | XSS exists in the Administration Console in Oracle Secure Global Desktop 4.4 20080807152602 (but was fixed in later versions including 5.4) Affected: 4.4 |
| CVE-2018-8032 | 6.1 | Aug 2 | Apache Axis 1.x up to and including 1.4 is vulnerable to a cross-site scripting (XSS) attack in the default servlet/services Affected: 5.4; 5.5 |
| CVE-2021-3449 | 5.9 | Mar 25 | NULL pointer deref in signature_algorithms processing Affected: 5.6 |
| CVE-2018-0735 | 5.9 | Oct 29 | Timing attack against ECDSA signature generation Affected: 5.4 |
| CVE-2018-11763 | 5.9 | Sep 25 | In Apache HTTP Server 2.4.17 to 2.4.34, by sending continuous, large SETTINGS frames a client can occupy a connection, server thread and CPU time without any connection timeout… Affected: 5.4 |
| CVE-2018-1304 | 5.9 | Feb 28 | The URL pattern of "" (the empty string) which exactly maps to the context root was not correctly handled in Apache Tomcat 9.0.0.M1 to 9.0.4, 8.5.0 to 8.5.27, 8.0.0.RC1 to 8.0.49… Affected: 5.3; 5.4 |
| CVE-2021-35649 | 5.4 | Oct 20 | Vulnerability in the Oracle Secure Global Desktop product of Oracle Virtualization (component: Server) Affected: 5.6 |
| CVE-2021-33037 | 5.3 | Jul 12 | Incorrect Transfer-Encoding handling with HTTP/1.0 Affected: 5.6 |
| CVE-2021-35650 | 4.6 | Oct 20 | Vulnerability in the Oracle Secure Global Desktop product of Oracle Virtualization (component: Client) Affected: 5.6 |
| CVE-2018-11784 | 4.3 | Oct 4 | When the default servlet in Apache Tomcat versions 9.0.0.M1 to 9.0.11, 8.5.0 to 8.5.33 and 7.0.23 to 7.0.90 returned a redirect to a directory (e.g Affected: 5.4 |
Showing 12