Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

oracle managed file transfer 12.2.1.4.0 vulnerabilities and exploits

(subscribe to this query)
7
CVSSv3

CVE-2022-23181

The fix for bug CVE-2020-9484 introduced a time of check, time of use vulnerability into Apache Tomcat 10.1.0-M1 to 10.1.0-M8, 10.0.0-M5 to 10.0.14, 9.0.35 to 9.0.56 and 8.5.55 to 8.5.73 that allowed a local malicious user to perform actions with the privileges of the user that t...
Apache TomcatApache Tomcat 10.0.0Apache Tomcat 10.1.0Oracle Agile Engineering Data Management 6.2.1.0Oracle Communications Cloud Native Core Policy 1.15.0Oracle Financial Services Crime And Compliance Management Studio 8.0.8.2.0Oracle Financial Services Crime And Compliance Management Studio 8.0.8.3.0Oracle Managed File Transfer 12.2.1.3.0Oracle Managed File Transfer 12.2.1.4.0Oracle Mysql Enterprise MonitorDebian Debian Linux 10.0Debian Debian Linux 11.0
7.5
CVSSv3

CVE-2020-13934

An h2c direct connection to Apache Tomcat 10.0.0-M1 to 10.0.0-M6, 9.0.0.M5 to 9.0.36 and 8.5.1 to 8.5.56 did not release the HTTP/1.1 processor after the upgrade to HTTP/2. If a sufficient number of such requests were made, an OutOfMemoryException could occur leading to a denial ...
Apache TomcatApache Tomcat 9.0.0Apache Tomcat 10.0.0Debian Debian Linux 9.0Debian Debian Linux 10.0Netapp Oncommand System ManagerOpensuse Leap 15.1Opensuse Leap 15.2Canonical Ubuntu Linux 20.04Oracle Agile Engineering Data Management 6.2.1.0Oracle Agile Plm 9.3.3Oracle Agile Plm 9.3.5
7.5
CVSSv3

CVE-2019-17359

The ASN.1 parser in Bouncy Castle Crypto (aka BC Java) 1.63 can trigger a large attempted memory allocation, and resultant OutOfMemoryError error, via crafted ASN.1 data. This is fixed in 1.64.
Bouncycastle Legion-of-the-bouncy-castle-java-crytography-api 1.63Apache Tomee 7.0.7Apache Tomee 7.1.2Apache Tomee 8.0.1Netapp Active Iq Unified ManagerNetapp Oncommand Api Services -Netapp Oncommand Workflow Automation -Netapp Service Level Manager -Oracle Business Process Management Suite 12.2.1.3.0Oracle Business Process Management Suite 12.2.1.4.0Oracle Communications ConvergenceOracle Communications Diameter Signaling Router
7.5
CVSSv3

CVE-2021-25122

When responding to new h2c connection requests, Apache Tomcat versions 10.0.0-M1 to 10.0.0, 9.0.0.M1 to 9.0.41 and 8.5.0 to 8.5.61 could duplicate request headers and a limited amount of request body from one request to another meaning user A and user B could both see the results...
Apache TomcatApache Tomcat 9.0.0Apache Tomcat 10.0.0Debian Debian Linux 9.0Debian Debian Linux 10.0Oracle Agile Plm 9.3.3Oracle Agile Plm 9.3.6Oracle Communications Cloud Native Core Policy 1.14.0Oracle Communications Cloud Native Core Security Edge Protection Proxy 1.6.0Oracle Communications Instant Messaging Server 10.0.1.5.0Oracle Database 12.2.0.1Oracle Database 19c
7
CVSSv3

CVE-2021-25329

The fix for CVE-2020-9484 was incomplete. When using Apache Tomcat 10.0.0-M1 to 10.0.0, 9.0.0.M1 to 9.0.41, 8.5.0 to 8.5.61 or 7.0.0. to 7.0.107 with a configuration edge case that was highly unlikely to be used, the Tomcat instance was still vulnerable to CVE-2020-9494. Note tha...
Apache TomcatApache Tomcat 9.0.0Apache Tomcat 10.0.0Debian Debian Linux 9.0Debian Debian Linux 10.0Oracle Agile Plm 9.3.3Oracle Agile Plm 9.3.6Oracle Communications Cloud Native Core Policy 1.14.0Oracle Communications Cloud Native Core Security Edge Protection Proxy 1.6.0Oracle Communications Instant Messaging Server 10.0.1.5.0Oracle Database 12.2.0.1Oracle Database 19c
7.5
CVSSv3

CVE-2020-13935

The payload length in a WebSocket frame was not correctly validated in Apache Tomcat 10.0.0-M1 to 10.0.0-M6, 9.0.0.M1 to 9.0.36, 8.5.0 to 8.5.56 and 7.0.27 to 7.0.104. Invalid payload lengths could trigger an infinite loop. Multiple requests with invalid payload lengths could lea...
Apache TomcatApache Tomcat 9.0.0Apache Tomcat 10.0.0Debian Debian Linux 9.0Debian Debian Linux 10.0Netapp Oncommand System ManagerOpensuse Leap 15.1Opensuse Leap 15.2Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 20.04Mcafee Epolicy Orchestrator 5.9.0Mcafee Epolicy Orchestrator 5.9.1
7.5
CVSSv3

CVE-2021-42340

The fix for bug 63362 present in Apache Tomcat 10.1.0-M1 to 10.1.0-M5, 10.0.0-M1 to 10.0.11, 9.0.40 to 9.0.53 and 8.5.60 to 8.5.71 introduced a memory leak. The object introduced to collect metrics for HTTP upgrade connections was not released for WebSocket connections once the c...
Apache TomcatApache Tomcat 10.0.0Apache Tomcat 10.1.0Netapp Hci -Netapp Management Services For Element Software -Debian Debian Linux 11.0Oracle Agile Engineering Data Management 6.2.1.0Oracle Big Data Spatial And GraphOracle Communications Diameter Signaling RouterOracle Hospitality Cruise Shipboard Property Management System 20.1.0Oracle Managed File Transfer 12.2.1.3.0Oracle Managed File Transfer 12.2.1.4.0
5.3
CVSSv3

CVE-2021-33037

Apache Tomcat 10.0.0-M1 to 10.0.6, 9.0.0.M1 to 9.0.46 and 8.5.0 to 8.5.66 did not correctly parse the HTTP transfer-encoding request header in some circumstances leading to the possibility to request smuggling when used with a reverse proxy. Specifically: - Tomcat incorrectly ign...
Apache TomcatApache Tomee 8.0.6Debian Debian Linux 9.0Debian Debian Linux 10.0Oracle Agile Plm 9.3.6Oracle Communications Cloud Native Core Policy 1.14.0Oracle Communications Cloud Native Core Service Communication Proxy 1.14.0Oracle Communications Diameter Signaling RouterOracle Communications Instant Messaging Server 10.0.1.5.0Oracle Communications Policy Management 12.5.0Oracle Communications Pricing Design Center 12.0.0.3.0Oracle Communications Session Report Manager
7
CVSSv3

CVE-2020-9484

When using Apache Tomcat versions 10.0.0-M1 to 10.0.0-M4, 9.0.0.M1 to 9.0.34, 8.5.0 to 8.5.54 and 7.0.0 to 7.0.103 if a) an attacker is able to control the contents and name of a file on the server; and b) the server is configured to use the PersistenceManager with a FileStore; a...
Apache TomcatApache Tomcat 9.0.0Apache Tomcat 10.0.0Debian Debian Linux 8.0Debian Debian Linux 9.0Debian Debian Linux 10.0Opensuse Leap 15.1Fedoraproject Fedora 31Fedoraproject Fedora 32Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 20.04Oracle Agile Engineering Data Management 6.2.1.0
6.1
CVSSv3

CVE-2019-10219

A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.
Redhat Hibernate ValidatorRedhat Hibernate Validator 6.1.0Redhat Fuse 1.0Redhat Jboss Data Grid -Redhat Jboss Enterprise Application Platform -Redhat Openshift Application Runtimes -Redhat Single Sign-on -Redhat Jboss Enterprise Application Platform 7.2Redhat Jboss Enterprise Application Platform 7.3Netapp Active Iq Unified Manager -Netapp Management Services For Element Software And Netapp Hci -Netapp Snapcenter Plug-in -
Preferred Score:
CVSSv3
CVSSv2
CVSSv3
CVSSv4
EPSS
VMScore
Recommendations:
desktop browserurbancode velocityCVE-2024-57932CVE-2025-21655CVE-2024-12084CVE-2023-34960unauthorizedCSRFCVE-2024-57913privilegeCVE-2025-21649itsourcecodecp-xr-de21-s router
Home
/
Search Results
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook