Product by Oracle

    Oracle Managed File Transfer

    20 known vulnerabilities in Oracle Managed File Transfer (Oracle), 0 of them actively exploited (CISA KEV).

    Key figures

    20

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    4

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Oracle Managed File Transfer (Oracle)
    HighCVE-2020-13935

    Apache Tomcat: Infinite Loop

    also in 17 other products

    		7.5
    CriticalCVE-2018-1000613

    Oracle Communications Diameter Signaling Router (DSR): Deserialization of Untrusted Data

    also in 22 other products

    		9.8
    HighCVE-2020-13934

    Apache Tomcat: Denial of Service

    also in 13 other products

    		7.5
    HighCVE-2020-9484

    Apache Tomcat: Deserialization of Untrusted Data

    also in 25 other products

    		7.0
    HighCVE-2021-25122

    Apache Tomcat h2c request mix-up

    also in 13 other products

    		7.5
    HighCVE-2021-42340

    DoS via memory leak with WebSocket connections

    also in 18 other products

    		7.5
    HighCVE-2019-17359

    Apache Software Foundation TomEE: security vulnerability

    also in 20 other products

    		7.5
    MediumCVE-2021-45105

    Apache Log4j2 does not always protect from infinite recursion in lookup evaluation

    also in 107 other products

    		5.9
    HighCVE-2021-25329

    Incomplete fix for CVE-2020-9484

    also in 13 other products

    		7.0
    MediumCVE-2018-1305

    Apache Tomcat: security vulnerability

    also in 6 other products

    		6.5
    MediumCVE-2021-33037

    Incorrect Transfer-Encoding handling with HTTP/1.0

    also in 23 other products

    		5.3
    HighCVE-2018-1000180

    Oracle Business Process Management Suite: security vulnerability

    also in 18 other products

    		7.5
    MediumCVE-2019-10219

    Hibernate Hibernate-validator: Cross-site Scripting

    also in 166 other products

    		6.5
    CriticalCVE-2026-61003

    Oracle Managed File Transfer: Improper Access Control

    also in 2 other products

    		9.9
    CriticalCVE-2026-60547

    Oracle Managed File Transfer: Improper Access Control

    also in 2 other products

    		9.9
    CriticalCVE-2026-60537

    Oracle Managed File Transfer: Missing Authentication for Critical Function

    also in 2 other products

    		9.9
    HighCVE-2026-60549

    Oracle Managed File Transfer: Missing Authentication for Critical Function

    also in 2 other products

    		8.8
    HighCVE-2026-60545

    Oracle Managed File Transfer: Missing Authentication for Critical Function

    also in 2 other products

    		8.8
    HighCVE-2019-2538

    Oracle Managed File Transfer: security vulnerability

    also in 1 other product

    		7.1
    HighCVE-2022-23181

    Local privilege escalation with FileStore

    also in 8 other products

    		7.0

    News

    All products by Oracle