Oracle Virtualization vulnerabilities

23 CVEs affecting Oracle Virtualization, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-20191, published 2021-05-26.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2014-0230, published 2015-06-07. High severity, CVSS 7.8. EPSS: 20.2% chance of exploitation in the next 30 days. Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle cases where an HTTP response occurs before finishing the reading of an entire request body, which…
CVE-2015-2581, published 2015-07-16. Medium severity, CVSS 6.4. EPSS: 2.2% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle Virtualization 5.1 and 5.2 allows remote attackers to affect confidentiality and availability via unknown vectors…
CVE-2011-3538, published 2011-10-18. Medium severity, CVSS 6.8. EPSS: 2.1% chance of exploitation in the next 30 days. Unspecified vulnerability in the Sun Ray component in Oracle Virtualization 4.0 allows remote attackers to affect integrity, related to Authentication. NOTE: this identifier was inadvertently used…
CVE-2014-4232, published 2014-07-17. Medium severity, CVSS 4.3. EPSS: 2.1% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle Secure Global Desktop (SGD) component in Oracle Virtualization 4.63, 4.71, 5.0, and 5.1 allows remote attackers to affect integrity via unknown vectors related…
CVE-2020-10775, published 2020-08-24. Medium severity, CVSS 5.3. EPSS: 1.9% chance of exploitation in the next 30 days. An Open redirect vulnerability was found in ovirt-engine versions 4.4 and earlier, where it allows remote attackers to redirect users to arbitrary web sites and attempt phishing attacks. Once the…
CVE-2014-2475, published 2014-10-15. Medium severity, CVSS 5.0. EPSS: 1.8% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle Virtualization 4.63, 4.71, 5.0, and 5.1 allows remote attackers to affect availability via vectors related to SGD…
CVE-2014-2439, published 2014-04-16. Medium severity, CVSS 6.4. EPSS: 1.8% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle Secure Global Desktop (SGD) component in Oracle Virtualization 5.0 and 5.1 allows remote attackers to affect confidentiality and integrity via unknown vectors…
CVE-2011-3571, published 2012-01-18. Low severity, CVSS 3.6. EPSS: 1.6% chance of exploitation in the next 30 days. Unspecified vulnerability in the Virtual Desktop Infrastructure (VDI) component in Oracle Virtualization 3.2 allows remote authenticated users to affect confidentiality and integrity via unknown…
CVE-2014-6459, published 2014-10-15. Medium severity, CVSS 5.0. EPSS: 1.6% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle Virtualization 5.0 and 5.1 allows remote attackers to affect availability via vectors related to SGD Proxy Server…
CVE-2013-3779, published 2013-07-17. High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days. Unspecified vulnerability in the Secure Global Desktop component in Oracle Virtualization All 4.6 releases including 4.63 and 4.7 prior to 4.71 allows remote attackers to affect confidentiality,…

Latest

CVE-2021-20191, published 2021-05-26. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. A flaw was found in ansible. Credentials, such as secrets, are being disclosed in console log by default and not protected by no_log feature when using those modules. An attacker can take advantage…
CVE-2014-2476, published 2014-10-15. Medium severity, CVSS 5.0. EPSS: 1.3% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle Virtualization 5.0 and 5.1 allows remote attackers to affect availability via vectors related to SGD Proxy Server…
CVE-2014-2474, published 2014-10-15. Medium severity, CVSS 5.0. EPSS: 1.3% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle Virtualization 5.0 and 5.1 allows remote attackers to affect availability via vectors related to SGD Proxy Server…
CVE-2014-2473, published 2014-10-15. Medium severity, CVSS 5.0. EPSS: 1.3% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle Virtualization 5.0 and 5.1 allows remote attackers to affect availability via vectors related to SGD Proxy Server…
CVE-2014-2472, published 2014-10-15. Medium severity, CVSS 5.0. EPSS: 1.3% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle Virtualization 5.0 and 5.1 allows remote attackers to affect availability via vectors related to SGD Proxy Server…