Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

enterprise manager ops center vulnerabilities and exploits

(subscribe to this query)
6.1
CVSSv2
CVE-2016-3494
Unspecified vulnerability in the Enterprise Manager Ops Center component in Oracle Enterprise Manager Grid Control 12.1.4, 12.2.2, and 12.3.2 allows remote malicious users to affect availability via vectors related to OS Provisioning.
Oracle Enterprise Manager Ops Center 12.3.2Oracle Enterprise Manager Ops Center 12.1.4Oracle Enterprise Manager Ops Center 12.2.2
4
CVSSv2
CVE-2019-2728
Vulnerability in the Enterprise Manager Ops Center component of Oracle Enterprise Manager Products Suite (subcomponent: Networking). Supported versions that are affected are 12.3.3 and 12.4.0. Easily exploitable vulnerability allows low privileged attacker with network access via...
Oracle Enterprise Manager Ops Center 12.3.3Oracle Enterprise Manager Ops Center 12.4.0
7.5
CVSSv2
CVE-2018-2742
Vulnerability in the Enterprise Manager Ops Center component of Oracle Enterprise Manager Products Suite (subcomponent: Framework). Supported versions that are affected are 12.2.2 and 12.3.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via...
Oracle Enterprise Manager Ops Center 12.2.2Oracle Enterprise Manager Ops Center 12.3.3
5
CVSSv2
CVE-2015-3153
The default configuration for cURL and libcurl prior to 7.42.1 sends custom HTTP headers to both the proxy and destination server, which might allow remote proxy servers to obtain sensitive information by reading the header contents.
Oracle Enterprise Manager Ops Center 12.3.0Oracle Enterprise Manager Ops Center 12.2.0Oracle Enterprise Manager Ops Center 12.2.1Oracle Enterprise Manager Ops CenterHaxx LibcurlHaxx CurlCanonical Ubuntu Linux 15.1Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 14.10Canonical Ubuntu Linux 12.04Apple Mac Os X 10.10.4Debian Debian Linux 8.0
6.4
CVSSv2
CVE-2018-2976
Vulnerability in the Enterprise Manager Ops Center component of Oracle Enterprise Manager Products Suite (subcomponent: Networking). The supported version that is affected is 12.2.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to ...
Oracle Enterprise Manager Ops Center 12.2.2
6.3
CVSSv2
CVE-2019-2726
Vulnerability in the Enterprise Manager Ops Center component of Oracle Enterprise Manager Products Suite (subcomponent: Services Integration). The supported version that is affected is 12.3.3. Difficult to exploit vulnerability allows low privileged attacker with network access v...
Oracle Enterprise Manager Ops Center 12.3.3
6.4
CVSSv2
CVE-2019-10082
In Apache HTTP Server 2.4.18-2.4.39, using fuzzed network input, the http/2 session handling could be made to read memory after being freed, during connection shutdown.
Apache Http ServerOracle Retail Xstore Point Of Service 7.1Oracle Http Server 12.2.1.3.0Oracle Enterprise Manager Ops Center 12.3.3Oracle Enterprise Manager Ops Center 12.4.0Oracle Instantis EnterprisetrackOracle Communications Element Manager 8.2.0Oracle Communications Element Manager 8.1.1Oracle Communications Element Manager 8.1.0Oracle Communications Element Manager 8.0.0Oracle Http Server 12.2.1.4.0Oracle Enterprise Manager Ops Center 12.4.0.0
4.3
CVSSv2
CVE-2014-8109
mod_lua.c in the mod_lua module in the Apache HTTP Server 2.3.x and 2.4.x up to and including 2.4.10 does not support an httpd configuration in which the same Lua authorization provider is used with different arguments within different contexts, which allows remote malicious user...
Apache Http Server 2.4.1Apache Http Server 2.4.6Apache Http Server 2.4.3Apache Http Server 2.4.4Apache Http Server 2.4.10Apache Http Server 2.4.7Apache Http Server 2.4.2Apache Http Server 2.4.9Canonical Ubuntu Linux 14.10Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 10.04Canonical Ubuntu Linux 12.04Fedoraproject Fedora 21Oracle Enterprise Manager Ops Center 12.2.1Oracle Enterprise Manager Ops Center 12.3.0Oracle Enterprise Manager Ops Center 12.2.0Oracle Enterprise Manager Ops Center
6.4
CVSSv2
CVE-2015-3237
The smb_request_state function in cURL and libcurl 7.40.0 up to and including 7.42.1 allows remote SMB servers to obtain sensitive information from memory or cause a denial of service (out-of-bounds read and crash) via crafted length and offset values.
Haxx Libcurl 7.40.0Haxx Libcurl 7.41.0Haxx Curl 7.40.0Haxx Curl 7.41.0Haxx Curl 7.42.0Haxx Curl 7.42.1Haxx Libcurl 7.42.0Haxx Libcurl 7.42.1Hp System Management HomepageOracle Glassfish Server 3.1.2Oracle Enterprise Manager Ops Center 12.1.4Oracle Enterprise Manager Ops Center 12.2.2Oracle Enterprise Manager Ops Center 12.3.2Oracle Glassfish Server 3.0.1
4.4
CVSSv2
CVE-2019-5443
A non-privileged user or program can put code and a config file in a known non-privileged path (under C:/usr/local/) that will make curl <= 7.65.1 automatically run the code (as an openssl "engine") on invocation. If that curl is invoked by a privileged user it can d...
Haxx CurlOracle Enterprise Manager Ops Center 12.3.3Oracle Enterprise Manager Ops Center 12.4.0Oracle Http Server 12.2.1.3.0Oracle Http Server 12.2.1.4.0Oracle Mysql ServerOracle Oss Support Tools 20.0Netapp Oncommand Insight -Netapp Oncommand Unified ManagerNetapp Oncommand Workflow Automation -Netapp Snapcenter -
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-30924CVE-2024-3400overflowCVE-2024-23528CVE-2024-21338CVE-2024-3818CVE-2024-23535NULL pointer dereferenceelevation of privilege
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook