Login Request a demo
TU
Product
Tuxedo
by Oracle · last CVE Jan 18, 2022
16
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Vulnerabilities16In the news0Timeline
Severity mix
Critical 3High 7Medium 6Low 0
Severity
All severities16Critical3High7Medium6Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Tuxedo to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2022-23307
8.8
54%
Jan 18
CVE-2020-9493 identified a deserialization issue that was present in Apache Chainsaw
Affected: 12.2.2.0.0
CVE-2022-23302
8.8
64%
Jan 18
JMSSink in all versions of Log4j 1.x is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration or if the configuration…
Affected: 12.2.2.0.0
CVE-2018-3007
8.6
3%
Jul 18
Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware (subcomponent: Core)
Affected: 12.1.1; 12.1.3; 12.2.2
CVE-2021-4104
7.5
81%
Dec 14
JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration
Affected: 12.2.2.0.0
CVE-2019-0227
7.5
92%
May 1
A Server Side Request Forgery (SSRF) vulnerability affected the Apache Axis 1.4 distribution that was last released in 2006
Affected: 12.1.1.0.0; 12.1.3
CVE-2017-10267
7.5
1%
Nov 14
Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware (subcomponent: Core)
Affected: 11.1.1; 12.1.1; 12.1.3; 12.2.2
CVE-2017-10278
7.0
1%
Nov 14
Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware (subcomponent: Security)
Affected: 11.1.1; 12.1.1; 12.1.3; 12.2.2
Showing 7