Vulnerabilities

ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.48084 Published 2021-08-24 Partial fix · 111.16.0 CWE-125

TI-2021-12741 CVE-2021-33193 · GHSA-p9fg-6rr5-38xc

Request splitting via HTTP/2 method injection and mod_proxy

MEDIUM 63

A crafted method sent through HTTP/2 will bypass validation and be forwarded by mod_proxy, which can lead to request splitting or cache poisoning.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.46179 Published 2021-08-16 Partial fix

TI-2021-08375 CVE-2021-26691 · GHSA-j3ww-p97m-gh9x

Apache HTTP Server mod_session response handling heap overflow

HIGH 79

In Apache HTTP Server versions 2.4.0 to 2.4.46 a specially crafted SessionHeader sent by an origin server could cause a heap overflow

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.68067 Published 2021-06-10 Partial fix CWE-122

TI-2021-02414 CVE-2021-3450 · GHSA-8hfj-xrj2-pm22

CA certificate check bypass with X509_V_FLAG_X509_STRICT

MEDIUM 58

The X509_V_FLAG_X509_STRICT flag enables additional security checks of the certificates present in a certificate chain.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.18339 Published 2021-03-25 Fixed in 111.15.0 CWE-295

TI-2021-02413 CVE-2021-3449 · GHSA-83mx-573x-5rw9

NULL pointer deref in signature_algorithms processing

HIGH 68

An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.63542 Published 2021-03-25 Fixed in 111.15.0 CWE-476

TI-2019-07539 CVE-2019-10219 · GHSA-m8p2-495h-ccmh

Cross-site scripting in hibernate-validator

LOW 31

A vulnerability was found in Hibernate-Validator.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.02157 Published 2019-11-08 Partial fix · 6.0.18.Final, 6.1.0.Final +1 CWE-79

TI-2015-01230 CVE-2015-1351 · GHSA-4p3m-vcw5-28gr

Use-after-free vulnerability in the _zend_shared_memdup function in zend_shared_alloc.c…

MEDIUM 44

Use-after-free vulnerability in the _zend_shared_memdup function in zend_shared_alloc.c in the OPcache extension in PHP through 5.6.7 allows remote attackers to cause a denial of service or possibly have unspecified othe…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.08314 Published 2015-03-30 Partial fix CWE-416

TI-2011-01974 CVE-2011-2261 · GHSA-c786-c7x8-8rr7

Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup…

MEDIUM 49

Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.3.0.3 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerabili…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.03244 Published 2011-07-20 No fix listed

TI-2011-01967 CVE-2011-2252 · GHSA-fx4w-7j2g-gxjv

Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup…

LOW 34

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01938 Published 2011-07-20 No fix listed

TI-2011-01966 CVE-2011-2251 · GHSA-8mfh-jxj9-7jw9

Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup…

LOW 23

Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.3.0.3 allows remote attackers to affect integrity via unknown vectors.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01554 Published 2011-07-20 No fix listed

TI-2010-03425 CVE-2010-3596 · GHSA-8fv8-q2j6-7f9w

Unspecified vulnerability in the mod_ssl component in Oracle Secure Backup 10.3.0.2…

LOW 31

Unspecified vulnerability in the mod_ssl component in Oracle Secure Backup 10.3.0.2 allows remote attackers to affect integrity and availability via unknown vectors.

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.01486 Published 2011-01-19 No fix listed

TI-2010-00868 CVE-2010-0907 · GHSA-3vg7-45rw-hpgj

Unspecified vulnerability in Oracle Secure Backup 10.3.0.1 allows remote attackers to…

MEDIUM 53

Unspecified vulnerability in Oracle Secure Backup 10.3.0.1 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2010-0898, CVE-2010-0899,…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.07465 Published 2010-07-13 No fix listed

TI-2010-00867 CVE-2010-0906 · GHSA-363m-j8q4-hfrx

Unspecified vulnerability in Oracle Secure Backup 10.3.0.1 allows remote authenticated…

MEDIUM 43

Unspecified vulnerability in Oracle Secure Backup 10.3.0.1 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.

CVSS 2.0HIGH 9.0 Network Low privileges Interaction — EPSS 0.02243 Published 2010-07-13 No fix listed

TI-2010-00865 CVE-2010-0904 · GHSA-xc8c-w9hw-359j

Unspecified vulnerability in Oracle Secure Backup 10.3.0.1 allows remote attackers to…

MEDIUM 54

Unspecified vulnerability in Oracle Secure Backup 10.3.0.1 allows remote attackers to affect integrity via unknown vectors.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.50625 Published 2010-07-13 No fix listed

TI-2010-00860 CVE-2010-0899 · GHSA-mr93-2m3c-xxxf

Unspecified vulnerability in Oracle Secure Backup 10.3.0.1 allows remote authenticated…

MEDIUM 43

Unspecified vulnerability in Oracle Secure Backup 10.3.0.1 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2010-0898, CVE-2…

CVSS 2.0HIGH 9.0 Network Low privileges Interaction — EPSS 0.02243 Published 2010-07-13 No fix listed

TI-2010-00859 CVE-2010-0898 · GHSA-p7gg-mq2q-pxv7

Unspecified vulnerability in Oracle Secure Backup 10.3.0.1 allows remote attackers to…

MEDIUM 48

Unspecified vulnerability in Oracle Secure Backup 10.3.0.1 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.02885 Published 2010-07-13 No fix listed

TI-2010-00071 CVE-2010-0072 · GHSA-m7jg-f799-8948

Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup…

MEDIUM 52

Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.3 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.06065 Published 2010-01-13 No fix listed

TI-2009-01886 CVE-2009-1978 · GHSA-vrqg-fhw8-px6v

Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup…

HIGH 75

Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.3 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.

CVSS 2.0HIGH 9.0 Network Low privileges Interaction — EPSS 0.64694 Published 2009-07-14 No fix listed

TI-2009-01885 CVE-2009-1977 · GHSA-654f-pfp4-h5x6

Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup…

HIGH 81

Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.3 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.72638 Published 2009-07-14 No fix listed

TI-2008-05185 CVE-2008-5445 · GHSA-65xv-wrrq-q434

Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup…

LOW 28

Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.2 allows remote attackers to affect availability via unknown vectors.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02583 Published 2009-01-14 No fix listed

TI-2008-05183 CVE-2008-5443 · GHSA-g8qj-m54j-8887

Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup…

LOW 27

Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.2 allows remote attackers to affect availability via unknown vectors, a different vulnerability than CVE-2008-5441 and CVE-20…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01834 Published 2009-01-14 No fix listed

TI-2008-05189 CVE-2008-5449 · GHSA-x6hv-vghf-34rm

Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup…

MEDIUM 50

Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerabili…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.04209 Published 2009-01-14 No fix listed

TI-2008-05188 CVE-2008-5448 · GHSA-qpj8-xcmr-qg4j

Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup…

HIGH 71

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.40542 Published 2009-01-14 No fix listed