What’s Vulnerable › Products

Oracle Instantis Enterprisetrack vulnerabilities

57 known vulnerabilities, 6 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Check whether your Oracle Instantis Enterprisetrack version is affected

Exploited Oracle Instantis Enterprisetrack vulnerabilities

• CVE-2017-12617 — Apache Tomcat Remote Code Execution Vulnerability
• CVE-2020-1938 — Apache Tomcat Improper Privilege Management Vulnerability
• CVE-2021-40438 — Apache HTTP Server-Side Request Forgery (SSRF)
• CVE-2021-42013 — Apache HTTP Server Path Traversal Vulnerability
• CVE-2021-41773 — Apache HTTP Server Path Traversal Vulnerability
• CVE-2019-0211 — Apache HTTP Server Privilege Escalation Vulnerability

Latest Oracle Instantis Enterprisetrack vulnerabilities

• CVE-2021-44790 — Possible buffer overflow when parsing multipart content in mod_lua of Apache HTTP Server 2.4.51 and earlier (CVSS 9.8)
• CVE-2021-44224 — Possible NULL dereference or SSRF in forward proxy configurations in Apache HTTP Server 2.4.51 and earlier (CVSS 8.2)
• CVE-2021-45105 — Apache Log4j2 does not always protect from infinite recursion in lookup evaluation (CVSS 5.9)
• CVE-2021-42013 — Apache HTTP Server Path Traversal Vulnerability (CVSS 9.8) — exploited
• CVE-2021-41773 — Apache HTTP Server Path Traversal Vulnerability (CVSS 9.8) — exploited
• CVE-2021-41524 — null pointer dereference in h2 fuzzing (CVSS 7.5)
• CVE-2021-40438 — Apache HTTP Server-Side Request Forgery (SSRF) (CVSS 9.0) — exploited
• CVE-2021-39275 — ap_escape_quotes buffer overflow (CVSS 9.8)
• CVE-2021-36160 — mod_proxy_uwsgi out of bound read (CVSS 7.5)
• CVE-2021-34798 — NULL pointer dereference in httpd core (CVSS 7.5)
• CVE-2021-2351 — (CVSS 5.1)
• CVE-2021-33037 — Incorrect Transfer-Encoding handling with HTTP/1.0 (CVSS 5.3)
• CVE-2021-33503 — Catastrophic backtracking in URL authority parser when passed URL containing many @ characters (CVSS 7.5)
• CVE-2021-31618 — NULL pointer dereference on specially crafted HTTP/2 request (CVSS 7.5)
• CVE-2021-30641 — Unexpected URL matching with 'MergeSlashes OFF' (CVSS 5.3)
• CVE-2021-26691 — Apache HTTP Server mod_session response handling heap overflow (CVSS 9.8)
• CVE-2021-26690 — mod_session NULL pointer dereference (CVSS 7.5)
• CVE-2020-35452 — mod_auth_digest possible stack overflow by one nul byte (CVSS 7.3)
• CVE-2020-13950 — mod_proxy_http NULL pointer dereference (CVSS 7.5)
• CVE-2019-17567 — mod_proxy_wstunnel tunneling of non Upgraded connections (CVSS 5.3)
• CVE-2021-22222 — (CVSS 7.5)
• CVE-2021-25329 — Incomplete fix for CVE-2020-9484 (CVSS 7.0)
• CVE-2021-25122 — Apache Tomcat h2c request mix-up (CVSS 7.5)
• CVE-2020-11987 — (CVSS 8.2)
• CVE-2020-17527 — Apache Tomcat: Request header mix-up between HTTP/2 streams (CVSS 7.5)