TU
Product
Tuxedo
16
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 3High 7Medium 6Low 0
Watch
Add Tuxedo to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-10269 | 10.0 | Nov 14 | Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware (subcomponent: Core) Affected: 11.1.1; 12.1.1; 12.1.3; 12.2.2 |
| CVE-2017-10272 | 9.9 | Nov 14 | Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware (subcomponent: Core) Affected: 11.1.1; 12.1.1; 12.1.3; 12.2.2 |
| CVE-2022-23305 | 9.8 | Jan 18 | By design, the JDBCAppender in Log4j 1.2.x accepts an SQL statement as a configuration parameter where the values to be inserted are converters from PatternLayout Affected: 12.2.2.0.0 |
| CVE-2022-23307 | 8.8 | Jan 18 | CVE-2020-9493 identified a deserialization issue that was present in Apache Chainsaw Affected: 12.2.2.0.0 |
| CVE-2022-23302 | 8.8 | Jan 18 | JMSSink in all versions of Log4j 1.x is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration or if the configuration… Affected: 12.2.2.0.0 |
| CVE-2018-3007 | 8.6 | Jul 18 | Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware (subcomponent: Core) Affected: 12.1.1; 12.1.3; 12.2.2 |
| CVE-2021-4104 | 7.5 | Dec 14 | JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration Affected: 12.2.2.0.0 |
| CVE-2019-0227 | 7.5 | May 1 | A Server Side Request Forgery (SSRF) vulnerability affected the Apache Axis 1.4 distribution that was last released in 2006 Affected: 12.1.1.0.0; 12.1.3 |
| CVE-2017-10267 | 7.5 | Nov 14 | Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware (subcomponent: Core) Affected: 11.1.1; 12.1.1; 12.1.3; 12.2.2 |
| CVE-2017-10278 | 7.0 | Nov 14 | Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware (subcomponent: Security) Affected: 11.1.1; 12.1.1; 12.1.3; 12.2.2 |
| CVE-2018-8032 | 6.1 | Aug 2 | Apache Axis 1.x up to and including 1.4 is vulnerable to a cross-site scripting (XSS) attack in the default servlet/services Affected: 12.1.1.0.0; 12.1.3 |
| CVE-2018-0734 | 5.9 | Oct 30 | Timing attack against DSA Affected: 12.1.1.0.0 |
| CVE-2018-0735 | 5.9 | Oct 29 | Timing attack against ECDSA signature generation Affected: 12.1.1.0.0 |
| CVE-2015-3197 | 5.9 | Feb 15 | ssl/s2_srvr.c in OpenSSL 1.0.1 before 1.0.1r and 1.0.2 before 1.0.2f does not prevent use of disabled ciphers, which makes it easier for man-in-the-middle attackers to defeat… Affected: 12.1.1.0 |
| CVE-2017-10266 | 5.3 | Nov 14 | Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware (subcomponent: Core) Affected: 11.1.1; 12.1.1; 12.1.3; 12.2.2 |
| CVE-2018-5407 | 4.7 | Nov 15 | Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software vulnerable to timing attacks via a side-channel timing attack on 'port contention' Affected: 12.1.1.0.0 |
Showing 16