Product by Oracle
Oracle API Gateway
12 known vulnerabilities in Oracle API Gateway (Oracle), 0 of them actively exploited (CISA KEV).
Key figures
12
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2017-5645 | Apache Log4j: Deserialization of Untrusted Data | 9.8 | |
| Critical | CVE-2018-1000613 | Oracle Communications Diameter Signaling Router (DSR): Deserialization of Untrusted Data | 9.8 | |
| High | CVE-2019-17566 | Apache Batik: Server-Side Request Forgery (SSRF) | 7.5 | |
| High | CVE-2020-11979 | Apache Ant: Creation of Temporary File in Directory with Insecure Permissions | 7.5 | |
| Medium | CVE-2019-1559 | 0-byte record padding oracle | 5.9 | |
| Medium | CVE-2015-3195 | OpenSSL: Information Disclosure | 5.3 | |
| Medium | CVE-2018-0734 | Timing attack against DSA | 5.9 | |
| High | CVE-2018-1000180 | Oracle Business Process Management Suite: security vulnerability | 7.5 | |
| Medium | CVE-2020-1971 | EDIPARTYNAME NULL pointer dereference | 5.9 | |
| Medium | CVE-2018-0735 | Timing attack against ECDSA signature generation | 5.9 | |
| High | CVE-2017-3601 | Oracle API Gateway: security vulnerability | 8.1 | |
| Medium | CVE-2018-5407 | Oracle Primavera P6 Enterprise Project Portfolio Management: Exposure of Sensitive Information to an Unauthorized Actor | 4.7 |