Known vulnerabilities in Oracle Secure Global Desktop

Vendor: Oracle
Software: Oracle Secure Global Desktop
Software CPE: cpe:2.3:a:oracle:oracle_secure_global_desktop:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 20
Public exploits: 3
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle Secure Global Desktop Oracle Secure Global Desktop is affected by 20 known vulnerabilities: 1 critical, 7 high, 7 medium, 5 low Critical High Medium Low

Vulnerabilities (20)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU67016 - Out-of-bounds read
CVE-2021-35649		 CWE-125 Medium
No
No
 - 06.09.2022 SB2021101970
#VU67017 - Out-of-bounds read
CVE-2021-35650		 CWE-125 Medium
No
No
 - 06.09.2022 SB2021101970
#VU56678 - Server-Side Request Forgery (SSRF)
CVE-2021-40438		 CWE-918 High
Available
Exploited
 - 17.09.2021 SB2021091706
SB2021091707
SB2021092301
and 42 more
#VU55423 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-33037		 CWE-444 Medium
No
No
 - 29.07.2021 SB2021072907
SB2021080807
SB2021080808
and 30 more
#VU55095 - Improper input validation
CVE-2021-2447		 CWE-20 High
No
No
 - 20.07.2021 SB2021072061
#VU55096 - Improper input validation
CVE-2021-2446		 CWE-20 High
No
No
 - 20.07.2021 SB2021072061
#VU52425 - Improper input validation
CVE-2021-2177		 CWE-20 High
No
No
 - 21.04.2021 SB2021042114
#VU52426 - Improper input validation
CVE-2021-2248		 CWE-20 High
No
No
 - 21.04.2021 SB2021042114
#VU52427 - Improper input validation
CVE-2021-2221		 CWE-20 High
No
No
 - 21.04.2021 SB2021042114
#VU51732 - Security Features
CVE-2021-3450		 CWE-254 Medium
No
No
 - 25.03.2021 SB2021032518
SB2021032602
SB2021032617
and 50 more
#VU28618 - Improper input validation
CVE-2018-11784		 CWE-20 Low
No
No
 - 04.06.2020 SB2019101586
SB2018121316
SB2018121317
and 4 more
#VU24468 - Improper input validation
CVE-2019-0227		 CWE-20 Medium
Available
No
 - 21.01.2020 SB2020012205
SB2020012308
SB2020012309
and 40 more
#VU24469 - Improper input validation
CVE-2019-17091		 CWE-20 Medium
No
No
 - 21.01.2020 SB2020012203
SB2020012405
SB2020042311
and 13 more
#VU21043 - Cryptographic Issues
CVE-2019-1547		 CWE-310 Low
No
No
 - 11.09.2019 SB2019091112
SB2019091202
SB2019092407
and 39 more
#VU20384 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-10092		 CWE-79 Low
No
No
 - 23.08.2019 SB2019082303
SB2019082610
SB2019090202
and 17 more
#VU16062 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-19439		 CWE-79 Low
No
No
 5.4 22.11.2018 SB2018112615
#VU14913 - Resource Management Errors
CVE-2018-11763		 CWE-399 Medium
No
No
 - 27.09.2018 SB2018092701
SB2018101701
SB2018111102
and 8 more
#VU640 - Improper input validation
CVE-2016-2105		 CWE-20 Low
No
No
 - 23.09.2016 SB2016050505
SB2016061413
SB2016051903
and 22 more
#VU639 - Improper Access Control
CVE-2016-2107		 CWE-284 High
Available
No
 - 23.09.2016 SB2016050504
SB2016061413
SB2016050514
and 19 more
#VU175 - Permissions, Privileges, and Access Controls
CVE-2016-3613		 CWE-264 Critical
No
No
 - 20.07.2016 SB2016072011