Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

oracle sd-wan edge 9.0 vulnerabilities and exploits

(subscribe to this query)
10
CVSSv3

CVE-2020-14606

Vulnerability in the Oracle SD-WAN Edge product of Oracle Communications Applications (component: User Interface). Supported versions that are affected are 8.2 and 9.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Ora...
Oracle Sd-wan Edge 9.0Oracle Sd-wan Edge 8.2
7.5
CVSSv3

CVE-2020-12723

regcomp.c in Perl prior to 5.30.3 allows a buffer overflow via a crafted regular expression because of recursive S_study_chunk calls.
Perl PerlNetapp Snap Creator Framework -Netapp Oncommand Workflow Automation -Fedoraproject Fedora 31Opensuse Leap 15.1Oracle Communications Eagle Lnp Application Processor 10.1Oracle Communications Eagle Lnp Application Processor 10.2Oracle Sd-wan Edge 9.0Oracle Sd-wan Edge 8.2Oracle Enterprise Manager Base Platform 13.4.0.0Oracle Communications Billing And Revenue Management 12.0.0.3.0Oracle Communications Offline Mediation Controller 12.0.0.3.0Oracle Communications Billing And Revenue Management 12.0.0.2.0Oracle Communications Diameter Signaling RouterOracle Tekelec Platform DistributionOracle Communications LsmsOracle Configuration Manager 12.1.2.0.8Oracle Sd-wan Edge 9.1Oracle Communications Eagle Application ProcessorOracle Communications Performance Intelligence Center
8.2
CVSSv3

CVE-2020-10543

Perl prior to 5.30.3 on 32-bit platforms allows a heap-based buffer overflow because nested regular expression quantifiers have an integer overflow.
Perl PerlFedoraproject Fedora 31Opensuse Leap 15.1Oracle Communications Eagle Lnp Application Processor 10.1Oracle Communications Eagle Lnp Application Processor 10.2Oracle Sd-wan Edge 9.0Oracle Sd-wan Edge 8.2Oracle Enterprise Manager Base Platform 13.4.0.0Oracle Communications Billing And Revenue Management 12.0.0.3.0Oracle Communications Offline Mediation Controller 12.0.0.3.0Oracle Communications Billing And Revenue Management 12.0.0.2.0Oracle Communications Diameter Signaling RouterOracle Communications Pricing Design Center 12.0.0.3.0Oracle Tekelec Platform DistributionOracle Communications Eagle Lnp Application Processor 46.7Oracle Communications Eagle Lnp Application Processor 46.8Oracle Communications Eagle Lnp Application Processor 46.9Oracle Communications LsmsOracle Configuration Manager 12.1.2.0.8Oracle Sd-wan Edge 9.1Oracle Communications Eagle Application ProcessorOracle Communications Performance Intelligence Center
8.8
CVSSv3

CVE-2019-14821

An out-of-bounds access issue was found in the Linux kernel, all versions up to and including 5.3, in the way Linux kernel's KVM hypervisor implements the Coalesced MMIO write operation. It operates on an MMIO ring buffer 'struct kvm_coalesced_mmio' object, wherein...
Linux Linux KernelLinux Linux Kernel 5.4Redhat Enterprise Linux Desktop 7.0Redhat Enterprise Linux Workstation 7.0Redhat Enterprise Linux Server 7.0Redhat Enterprise Linux For Real Time 7Redhat Enterprise Linux Desktop 6.0Redhat Enterprise Linux Server 6.0Redhat Enterprise Linux For Real Time 8Redhat Enterprise Linux Eus 7.7Redhat Enterprise Linux Server Tus 7.7Redhat Enterprise Linux Server Aus 7.7Redhat Enterprise Linux 8.0Redhat Virtualization Host 4.0Redhat Enterprise Linux Workstation 6.0Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 19.04Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 16.04Opensuse Leap 15.0Opensuse Leap 15.1Fedoraproject Fedora 29
5.3
CVSSv3

CVE-2021-33037

Apache Tomcat 10.0.0-M1 to 10.0.6, 9.0.0.M1 to 9.0.46 and 8.5.0 to 8.5.66 did not correctly parse the HTTP transfer-encoding request header in some circumstances leading to the possibility to request smuggling when used with a reverse proxy. Specifically: - Tomcat incorrectly ign...
Apache TomcatApache Tomee 8.0.6Debian Debian Linux 9.0Debian Debian Linux 10.0Oracle Managed File Transfer 12.2.1.3.0Oracle Instantis Enterprisetrack 17.1Oracle Instantis Enterprisetrack 17.2Oracle Instantis Enterprisetrack 17.3Oracle Agile Plm 9.3.6Oracle Communications Policy Management 12.5.0Oracle Sd-wan Edge 9.0Oracle Managed File Transfer 12.2.1.4.0Oracle Secure Global Desktop 5.6Oracle Hospitality Cruise Shipboard Property Management System 20.1.0Oracle Communications Pricing Design Center 12.0.0.3.0Oracle Communications Session Route ManagerOracle Mysql Enterprise MonitorOracle Communications Session Report ManagerOracle Sd-wan Edge 9.1Oracle Utilities Testing Accelerator 6.0.0.2.2Oracle Utilities Testing Accelerator 6.0.0.3.1Oracle Utilities Testing Accelerator 6.0.0.1.1
7.5
CVSSv3

CVE-2020-17527

While investigating bug 64830 it exists that Apache Tomcat 10.0.0-M1 to 10.0.0-M9, 9.0.0-M1 to 9.0.39 and 8.5.0 to 8.5.59 could re-use an HTTP request header value from the previous stream received on an HTTP/2 connection for the request associated with the subsequent stream. Whi...
Apache Tomcat 9.0.0Apache Tomcat 10.0.0Apache Tomcat 9.0.36Apache Tomcat 9.0.37Apache Tomcat 9.0.38Apache Tomcat 9.0.39Apache Tomcat 9.0.35-3.39.1Apache Tomcat 9.0.35-3.57.3Apache TomcatNetapp Oncommand System ManagerNetapp Element Plug-in -Debian Debian Linux 9.0Debian Debian Linux 10.0Oracle Instantis Enterprisetrack 17.1Oracle Instantis Enterprisetrack 17.2Oracle Instantis Enterprisetrack 17.3Oracle Sd-wan Edge 9.0Oracle Workload Manager 18cOracle Workload Manager 19cOracle Mysql Enterprise MonitorOracle Communications Cloud Native Core Binding Support Function 1.10.0Oracle Communications Cloud Native Core Policy 1.14.0
7.5
CVSSv3

CVE-2021-42340

The fix for bug 63362 present in Apache Tomcat 10.1.0-M1 to 10.1.0-M5, 10.0.0-M1 to 10.0.11, 9.0.40 to 9.0.53 and 8.5.60 to 8.5.71 introduced a memory leak. The object introduced to collect metrics for HTTP upgrade connections was not released for WebSocket connections once the c...
Apache Tomcat 10.0.0Apache Tomcat 10.1.0Apache TomcatNetapp Hci -Netapp Management Services For Element Software -Debian Debian Linux 11.0Oracle Managed File Transfer 12.2.1.3.0Oracle Sd-wan Edge 9.0Oracle Agile Engineering Data Management 6.2.1.0Oracle Managed File Transfer 12.2.1.4.0Oracle Hospitality Cruise Shipboard Property Management System 20.1.0Oracle Sd-wan Edge 9.1Oracle Communications Diameter Signaling RouterOracle Big Data Spatial And GraphOracle Middleware Common Libraries And Tools 12.2.1.4.0Oracle Retail Customer Insights 15.0.2Oracle Retail Customer Insights 16.0.2Oracle Taleo PlatformOracle Payment Interface 20.3Oracle Payment Interface 19.1Oracle Retail Eftlink 21.0.0Oracle Retail Data Extractor For Merchandising 16.0.2
6.5
CVSSv3

CVE-2019-5108

An exploitable denial-of-service vulnerability exists in the Linux kernel prior to mainline 5.3. An attacker could exploit this vulnerability by triggering AP to send IAPP location updates for stations before the required authentication process has completed. This could lead to d...
Linux Linux KernelDebian Debian Linux 8.0Debian Debian Linux 9.0Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 16.04Netapp Cloud Backup -Netapp Steelstore Cloud Integrated Storage -Netapp Data Availability Services -Netapp Solidfire -Netapp Hci Management Node -Netapp Active Iq Unified Manager -Netapp E-series Santricity Os ControllerNetapp A700s Firmware -Netapp H610s Firmware -Netapp 8300 Firmware -Netapp 8700 Firmware -Netapp A400 Firmware -Oracle Sd-wan Edge 8.2
3.7
CVSSv3

CVE-2020-16166

The Linux kernel up to and including 5.7.11 allows remote malicious users to make observations that help to obtain sensitive information about the internal state of the network RNG, aka CID-f227e3ec3b5c. This is related to drivers/char/random.c and kernel/time/timer.c.
Linux Linux KernelOpensuse Leap 15.1Opensuse Leap 15.2Fedoraproject Fedora 31Fedoraproject Fedora 32Debian Debian Linux 9.0Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 20.04Netapp Steelstore Cloud Integrated Storage -Netapp Active Iq Unified ManagerNetapp Solidfire -Netapp Hci Management Node -Netapp Cloud Volumes Ontap Mediator -Netapp E-series Santricity Os ControllerNetapp Hci Bootstrap Os -Netapp StoragegridNetapp H410c Firmware -Oracle Sd-wan Edge 8.2
5.5
CVSSv3

CVE-2020-12771

An issue exists in the Linux kernel up to and including 5.6.11. btree_gc_coalesce in drivers/md/bcache/btree.c has a deadlock if a coalescing operation fails.
Linux Linux KernelDebian Debian Linux 9.0Opensuse Leap 15.1Opensuse Leap 15.2Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 20.04Canonical Ubuntu Linux 16.04Netapp Cloud Backup -Netapp Element Software -Netapp Steelstore Cloud Integrated Storage -Netapp Solidfire -Netapp Hci Management Node -Netapp Active Iq Unified Manager -Netapp Hci Bootstrap Os -Netapp A700s Firmware -Netapp H300s Firmware -Netapp H500s Firmware -Netapp H700s Firmware -Netapp H300e Firmware -Netapp H500e Firmware -Netapp H700e Firmware -
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
XPath injectioncross-site request forgeryCVE-2024-53505CVE-2024-53768CVE-2024-53743HTML injectionCVE-2024-49039CVE-2024-53786CVE-2014-2120
Home
/
Search Results
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook