TU
Product
Tuxedo
16
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 3High 7Medium 6Low 0
Watch
Add Tuxedo to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-8032 | 6.1 | Aug 2 | Apache Axis 1.x up to and including 1.4 is vulnerable to a cross-site scripting (XSS) attack in the default servlet/services Affected: 12.1.1.0.0; 12.1.3 |
| CVE-2018-0734 | 5.9 | Oct 30 | Timing attack against DSA Affected: 12.1.1.0.0 |
| CVE-2018-0735 | 5.9 | Oct 29 | Timing attack against ECDSA signature generation Affected: 12.1.1.0.0 |
| CVE-2015-3197 | 5.9 | Feb 15 | ssl/s2_srvr.c in OpenSSL 1.0.1 before 1.0.1r and 1.0.2 before 1.0.2f does not prevent use of disabled ciphers, which makes it easier for man-in-the-middle attackers to defeat… Affected: 12.1.1.0 |
| CVE-2017-10266 | 5.3 | Nov 14 | Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware (subcomponent: Core) Affected: 11.1.1; 12.1.1; 12.1.3; 12.2.2 |
| CVE-2018-5407 | 4.7 | Nov 15 | Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software vulnerable to timing attacks via a side-channel timing attack on 'port contention' Affected: 12.1.1.0.0 |
Showing 6