Oracle

Secure Global Desktop

33 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.9

CVE-2021-35650

  • EPSS 0.21%
  • Veröffentlicht 20.10.2021 11:17:19
  • Zuletzt bearbeitet 21.11.2024 06:12:44

Vulnerability in the Oracle Secure Global Desktop product of Oracle Virtualization (component: Client). The supported version that is affected is 5.6. Easily exploitable vulnerability allows low privileged attacker with network access via multiple pr...

5.5

CVE-2021-35649

  • EPSS 0.3%
  • Veröffentlicht 20.10.2021 11:17:18
  • Zuletzt bearbeitet 21.11.2024 06:12:44

Vulnerability in the Oracle Secure Global Desktop product of Oracle Virtualization (component: Server). The supported version that is affected is 5.6. Easily exploitable vulnerability allows low privileged attacker with network access via multiple pr...

9

CVE-2021-40438

Warnung
  • EPSS 94.43%
  • Veröffentlicht 16.09.2021 15:15:07
  • Zuletzt bearbeitet 16.05.2025 15:27:13

A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier.

6.5

CVE-2021-2447

  • EPSS 1.77%
  • Veröffentlicht 21.07.2021 15:16:19
  • Zuletzt bearbeitet 21.11.2024 06:03:08

Vulnerability in the Oracle Secure Global Desktop product of Oracle Virtualization (component: Server). The supported version that is affected is 5.6. Easily exploitable vulnerability allows low privileged attacker with network access via multiple pr...

6.8

CVE-2021-2446

  • EPSS 1.09%
  • Veröffentlicht 21.07.2021 15:16:19
  • Zuletzt bearbeitet 21.11.2024 06:03:08

Vulnerability in the Oracle Secure Global Desktop product of Oracle Virtualization (component: Client). The supported version that is affected is 5.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple p...

5.3

CVE-2021-33037

  • EPSS 3.1%
  • Veröffentlicht 12.07.2021 15:15:08
  • Zuletzt bearbeitet 21.11.2024 06:08:10

Apache Tomcat 10.0.0-M1 to 10.0.6, 9.0.0.M1 to 9.0.46 and 8.5.0 to 8.5.66 did not correctly parse the HTTP transfer-encoding request header in some circumstances leading to the possibility to request smuggling when used with a reverse proxy. Specific...

7.5

CVE-2021-2248

  • EPSS 3.97%
  • Veröffentlicht 22.04.2021 22:15:15
  • Zuletzt bearbeitet 21.11.2024 06:02:43

Vulnerability in the Oracle Secure Global Desktop product of Oracle Virtualization (component: Server). The supported version that is affected is 5.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple p...

6.8

CVE-2021-2221

  • EPSS 2.29%
  • Veröffentlicht 22.04.2021 22:15:14
  • Zuletzt bearbeitet 21.11.2024 06:02:39

Vulnerability in the Oracle Secure Global Desktop product of Oracle Virtualization (component: Client). The supported version that is affected is 5.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple p...

7.5

CVE-2021-2177

  • EPSS 3.97%
  • Veröffentlicht 22.04.2021 22:15:13
  • Zuletzt bearbeitet 21.11.2024 06:02:32

Vulnerability in the Oracle Secure Global Desktop product of Oracle Virtualization (component: Gateway). The supported version that is affected is 5.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple ...

7.4

CVE-2021-3450

  • EPSS 0.69%
  • Veröffentlicht 25.03.2021 15:15:13
  • Zuletzt bearbeitet 21.11.2024 06:21:33

The X509_V_FLAG_X509_STRICT flag enables additional security checks of the certificates present in a certificate chain. It is not set by default. Starting from OpenSSL version 1.1.1h a check to disallow certificates in the chain that have explicitly ...