Product by Oracle
Oracle Tuxedo
17 known vulnerabilities in Oracle Tuxedo (Oracle), 0 of them actively exploited (CISA KEV).
Key figures
17
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
3
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2022-23305 | SQL injection in JDBC Appender in Apache Log4j V1 | 9.8 | |
| High | CVE-2022-23302 | Deserialization of untrusted data in JMSSink in Apache Log4j 1.x | 8.8 | |
| High | CVE-2022-23307 | Apache Log4j 1.x: Deserialization of Untrusted Data | 8.8 | |
| High | CVE-2019-0227 | Apache Axis 1.4: Server-Side Request Forgery (SSRF) | 7.5 | |
| High | CVE-2021-4104 | Deserialization of untrusted data in JMSAppender in Apache Log4j 1.2 | 7.5 | |
| Critical | CVE-2017-10269 | Oracle Tuxedo: Denial of Service | 10.0 | |
| Medium | CVE-2018-8032 | Apache Axis: Cross-Site Scripting (XSS) | 6.1 | |
| Medium | CVE-2018-0734 | Timing attack against DSA | 5.9 | |
| Medium | CVE-2015-3197 | OpenSSL: security vulnerability | 5.9 | |
| High | CVE-2018-3007 | Oracle Tuxedo: security vulnerability | 8.6 | |
| Medium | CVE-2018-0735 | Timing attack against ECDSA signature generation | 5.9 | |
| Critical | CVE-2017-10272 | Oracle Tuxedo: Denial of Service | 9.9 | |
| Medium | CVE-2018-5407 | Oracle Primavera P6 Enterprise Project Portfolio Management: Exposure of Sensitive Information to an Unauthorized Actor | 4.7 | |
| High | CVE-2017-10267 | Oracle Tuxedo: security vulnerability | 7.5 | |
| High | CVE-2017-10278 | Oracle Tuxedo: Denial of Service | 7.0 | |
| Medium | CVE-2017-10266 | Oracle Tuxedo: security vulnerability | 5.3 | |
| Not rated | CVE-2007-5576 | Bea Tuxedo R3: Information Disclosure | — |