Oracle

Managed File Transfer

20 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.9

CVE-2026-61003

  • EPSS 0.49%
  • Veröffentlicht 18.08.2026 21:16:51
  • Zuletzt bearbeitet 20.08.2026 15:10:38

Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middleware (component: MFT Runtime Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attack...

8.8

CVE-2026-60549

  • EPSS 0.4%
  • Veröffentlicht 21.07.2026 22:17:54
  • Zuletzt bearbeitet 28.07.2026 19:25:57

Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middleware (component: MFT Runtime Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attack...

9.9

CVE-2026-60547

  • EPSS 0.4%
  • Veröffentlicht 21.07.2026 22:17:54
  • Zuletzt bearbeitet 28.07.2026 19:29:23

Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middleware (component: MFT Runtime Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attack...

8.8

CVE-2026-60545

  • EPSS 0.4%
  • Veröffentlicht 21.07.2026 22:17:54
  • Zuletzt bearbeitet 28.07.2026 19:25:46

Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middleware (component: MFT Runtime Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attack...

9.9

CVE-2026-60537

  • EPSS 0.4%
  • Veröffentlicht 21.07.2026 22:17:53
  • Zuletzt bearbeitet 28.07.2026 19:29:04

Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middleware (component: MFT Runtime Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attack...

7

CVE-2022-23181

  • EPSS 0.69%
  • Veröffentlicht 27.01.2022 13:15:08
  • Zuletzt bearbeitet 21.11.2024 06:48:08

The fix for bug CVE-2020-9484 introduced a time of check, time of use vulnerability into Apache Tomcat 10.1.0-M1 to 10.1.0-M8, 10.0.0-M5 to 10.0.14, 9.0.35 to 9.0.56 and 8.5.55 to 8.5.73 that allowed a local attacker to perform actions with the privi...

5.9

CVE-2021-45105

Warnung
  • EPSS 100%
  • Veröffentlicht 18.12.2021 12:15:07
  • Zuletzt bearbeitet 29.05.2026 13:16:19

Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread Context Map data to cause a denial of service wh...

7.5

CVE-2021-42340

  • EPSS 11.8%
  • Veröffentlicht 14.10.2021 20:15:09
  • Zuletzt bearbeitet 21.11.2024 06:27:38

The fix for bug 63362 present in Apache Tomcat 10.1.0-M1 to 10.1.0-M5, 10.0.0-M1 to 10.0.11, 9.0.40 to 9.0.53 and 8.5.60 to 8.5.71 introduced a memory leak. The object introduced to collect metrics for HTTP upgrade connections was not released for We...

5.3

CVE-2021-33037

  • EPSS 75.35%
  • Veröffentlicht 12.07.2021 15:15:08
  • Zuletzt bearbeitet 21.11.2024 06:08:10

Apache Tomcat 10.0.0-M1 to 10.0.6, 9.0.0.M1 to 9.0.46 and 8.5.0 to 8.5.66 did not correctly parse the HTTP transfer-encoding request header in some circumstances leading to the possibility to request smuggling when used with a reverse proxy. Specific...

7

CVE-2021-25329

  • EPSS 9.49%
  • Veröffentlicht 01.03.2021 12:15:14
  • Zuletzt bearbeitet 21.11.2024 05:54:45

The fix for CVE-2020-9484 was incomplete. When using Apache Tomcat 10.0.0-M1 to 10.0.0, 9.0.0.M1 to 9.0.41, 8.5.0 to 8.5.61 or 7.0.0. to 7.0.107 with a configuration edge case that was highly unlikely to be used, the Tomcat instance was still vulnera...