Product by Oracle

    Oracle Secure Global Desktop

    33 known vulnerabilities in Oracle Secure Global Desktop (Oracle), 1 of them actively exploited (CISA KEV).

    Key figures

    33

    Vulnerabilities

    1

    Actively exploited (KEV)

    1

    Used by ransomware

    11

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Oracle Secure Global Desktop (Oracle)
    CriticalCVE-2021-40438

    mod_proxy SSRF

    In CISA KEVRansomwarealso in 39 other products

    		9.0
    CriticalCVE-2017-3167

    Apache HTTP Server: Improper Authentication

    also in 14 other products

    		9.8
    CriticalCVE-2017-9788

    Apache HTTP Server: Denial of Service

    also in 15 other products

    		9.1
    CriticalCVE-2016-3613

    Oracle Secure Global Desktop: security vulnerability

    		9.8
    HighCVE-2019-0227

    Apache Axis 1.4: Server-Side Request Forgery (SSRF)

    also in 34 other products

    		7.5
    HighCVE-2017-7668

    Apache HTTP Server: Buffer Over-read

    also in 13 other products

    		7.5
    HighCVE-2021-3450

    CA certificate check bypass with X509_V_FLAG_X509_STRICT

    also in 30 other products

    		7.4
    MediumCVE-2019-10092

    Apache HTTP Server: Cross-Site Scripting (XSS)

    also in 9 other products

    		6.1
    CriticalCVE-2019-3822

    The curl Project Curl: Stack-based Buffer Overflow

    also in 15 other products

    		7.1
    MediumCVE-2021-3449

    NULL pointer deref in signature_algorithms processing

    also in 90 other products

    		5.9
    MediumCVE-2018-11763

    Apache HTTP Server: security vulnerability

    also in 9 other products

    		5.9
    CriticalCVE-2021-2248

    Oracle Secure Global Desktop: security vulnerability

    also in 1 other product

    		10.0
    CriticalCVE-2021-2177

    Oracle Secure Global Desktop: security vulnerability

    also in 1 other product

    		10.0
    MediumCVE-2018-19439

    Oracle Secure Global Desktop: Cross-Site Scripting (XSS)

    		6.1
    MediumCVE-2021-33037

    Incorrect Transfer-Encoding handling with HTTP/1.0

    also in 23 other products

    		5.3
    MediumCVE-2019-1559

    0-byte record padding oracle

    also in 79 other products

    		5.9
    MediumCVE-2018-1304

    Apache Tomcat: security vulnerability

    also in 10 other products

    		5.9
    MediumCVE-2018-8032

    Apache Axis: Cross-Site Scripting (XSS)

    also in 36 other products

    		6.1
    MediumCVE-2018-11784

    Apache Tomcat: security vulnerability

    also in 15 other products

    		4.3
    CriticalCVE-2021-2221

    Oracle Secure Global Desktop: security vulnerability

    also in 1 other product

    		9.6
    MediumCVE-2018-0735

    Timing attack against ECDSA signature generation

    also in 21 other products

    		5.9
    CriticalCVE-2016-5580

    Oracle Secure Global Desktop: security vulnerability

    		9.6
    HighCVE-2018-16890

    The curl Project Curl: Out-of-bounds Read

    also in 10 other products

    		5.4
    CriticalCVE-2021-2446

    Oracle Secure Global Desktop: security vulnerability

    also in 1 other product

    		9.6
    MediumCVE-2019-17091

    Eclipse Mojarra: Cross-Site Scripting (XSS)

    also in 21 other products

    		6.1

    All vulnerabilities in search

    All products by Oracle