Product by Oracle
Oracle Instantis EnterpriseTrack
57 known vulnerabilities in Oracle Instantis EnterpriseTrack (Oracle), 6 of them actively exploited (CISA KEV).
Key figures
57
Vulnerabilities
6
Actively exploited (KEV)
3
Used by ransomware
14
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2021-41773 | Path traversal and file disclosure vulnerability in Apache HTTP Server 2.4.49 In CISA KEVRansomwarealso in 4 other products | 9.8 | |
| Critical | CVE-2021-42013 | Apache HTTP Server Path Traversal Vulnerability In CISA KEVRansomwarealso in 6 other products | 9.8 | |
| Critical | CVE-2021-40438 | mod_proxy SSRF In CISA KEVRansomwarealso in 39 other products | 9.0 | |
| Critical | CVE-2020-1938 | Apache Tomcat Improper Privilege Management Vulnerability In CISA KEValso in 20 other products | 9.8 | |
| Critical | CVE-2017-12617 | Apache Tomcat Remote Code Execution Vulnerability In CISA KEValso in 54 other products | 8.1 | |
| Critical | CVE-2019-0211 | Apache HTTP Server Privilege Escalation Vulnerability In CISA KEValso in 27 other products | 7.8 | |
| Critical | CVE-2021-44790 | Apache HTTP Server: Out-of-bounds Write | 9.8 | |
| Critical | CVE-2020-11984 | Apache HTTP Server: Remote Code Execution | 9.8 | |
| Critical | CVE-2017-5645 | Apache Log4j: Deserialization of Untrusted Data | 9.8 | |
| Critical | CVE-2021-26691 | Apache HTTP Server mod_session response handling heap overflow | 9.8 | |
| Critical | CVE-2021-39275 | ap_escape_quotes buffer overflow | 9.8 | |
| Critical | CVE-2018-8013 | Apache Batik: Deserialization of Untrusted Data | 9.8 | |
| Critical | CVE-2019-10082 | Apache HTTP Server: security vulnerability | 9.1 | |
| Critical | CVE-2019-0219 | Apache Cordova: security vulnerability | 9.8 | |
| High | CVE-2021-44224 | Apache HTTP Server: NULL Pointer Dereference | 8.2 | |
| High | CVE-2019-0227 | Apache Axis 1.4: Server-Side Request Forgery (SSRF) | 7.5 | |
| High | CVE-2020-9490 | Apache HTTP Server: security vulnerability | 7.5 | |
| High | CVE-2020-13935 | Apache Tomcat: Infinite Loop | 7.5 | |
| High | CVE-2021-26690 | mod_session NULL pointer dereference | 7.5 | |
| High | CVE-2021-34798 | NULL pointer dereference in httpd core | 7.5 | |
| High | CVE-2020-13934 | Apache Tomcat: Denial of Service | 7.5 | |
| High | CVE-2021-36160 | mod_proxy_uwsgi out of bound read | 7.5 | |
| High | CVE-2019-0190 | Apache HTTP Server: Denial of Service | 7.5 | |
| High | CVE-2020-11993 | Apache HTTP Server: security vulnerability | 7.5 | |
| High | CVE-2021-31618 | NULL pointer dereference on specially crafted HTTP/2 request | 7.5 |
News
- SSA-501673 V1.0: Apache Log4j Denial of Service Vulnerability (CVE-2021-45105) - Impact to Siemens Productssiemens-productcert
- SSA-661247 V1.0: Apache Log4j Vulnerability (CVE-2021-44228, Log4Shell) - Impact to Siemens Productssiemens-productcert
- SSA-479842 V1.0: Apache Log4j Vulnerabilities - Impact to Siemens Energy Sensformer (Platform, Basic and Advanced)siemens-productcert