What’s Vulnerable › Products
Oracle Corporation Enterprise Manager Ops Center vulnerabilities
107 known vulnerabilities, 2 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.
Check whether your Oracle Corporation Enterprise Manager Ops Center version is affected
Exploited Oracle Corporation Enterprise Manager Ops Center vulnerabilities
- CVE-2021-40438 — Apache HTTP Server-Side Request Forgery (SSRF)
- CVE-2019-0211 — Apache HTTP Server Privilege Escalation Vulnerability
Latest Oracle Corporation Enterprise Manager Ops Center vulnerabilities
- CVE-2022-1292 — The c_rehash script allows command injection (CVSS 7.3)
- CVE-2022-22721 — core: Possible buffer overflow with very large or unlimited LimitXMLRequestBody (CVSS 9.1)
- CVE-2022-22720 — HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier (CVSS 9.8)
- CVE-2021-4160 — BN_mod_exp may produce incorrect results on MIPS (CVSS 5.9)
- CVE-2021-45105 — Apache Log4j2 does not always protect from infinite recursion in lookup evaluation (CVSS 5.9)
- CVE-2021-40438 — Apache HTTP Server-Side Request Forgery (SSRF) (CVSS 9.0) — exploited
- CVE-2021-2351 — (CVSS 5.1)
- CVE-2021-33503 — Catastrophic backtracking in URL authority parser when passed URL containing many @ characters (CVSS 7.5)
- CVE-2021-31618 — NULL pointer dereference on specially crafted HTTP/2 request (CVSS 7.5)
- CVE-2021-30641 — Unexpected URL matching with 'MergeSlashes OFF' (CVSS 5.3)
- CVE-2021-26691 — Apache HTTP Server mod_session response handling heap overflow (CVSS 9.8)
- CVE-2021-26690 — mod_session NULL pointer dereference (CVSS 7.5)
- CVE-2020-35452 — mod_auth_digest possible stack overflow by one nul byte (CVSS 7.3)
- CVE-2020-13950 — mod_proxy_http NULL pointer dereference (CVSS 7.5)
- CVE-2019-17567 — mod_proxy_wstunnel tunneling of non Upgraded connections (CVSS 5.3)
- CVE-2021-22222 — (CVSS 7.5)
- CVE-2021-29505 — XStream is vulnerable to a Remote Command Execution attack (CVSS 8.8)
- CVE-2021-3518 — Nokogiri Implements libxml2 version vulnerable to use-after-free (CVSS 8.8)
- CVE-2021-3537 — Nokogiri Implements libxml2 version vulnerable to null pointer dereferencing (CVSS 5.9)
- CVE-2021-23841 — Null pointer deref in X509_issuer_and_serial_hash() (CVSS 5.9)
- CVE-2021-23840 — Integer overflow in CipherUpdate (CVSS 7.5)
- CVE-2021-23839 — Incorrect SSLv2 rollback protection (CVSS 3.7)
- CVE-2021-23336 — Web Cache Poisoning (CVSS 5.9)
- CVE-2021-2015 — (CVSS 5.8)
- CVE-2021-1999 — (CVSS 1.2)