Vendor/product archive

oracle / fmw_platform CVEs

Beta · best-effort

5 CVEs tagged to oracle / fmw_platform — 0 Critical, 4 High, 1 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to oracle vendor archive

CVE-2020-13935

Published Jul 14, 2020

The payload length in a WebSocket frame was not correctly validated in Apache Tomcat 10.0.0-M1 to 10.0.0-M6, 9.0.0.M1 to 9.0.36, 8.5.0 to 8.5.56 and 7.0.27 to 7.0.104. Invalid pay…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2020-13934

Published Jul 14, 2020

An h2c direct connection to Apache Tomcat 10.0.0-M1 to 10.0.0-M6, 9.0.0.M5 to 9.0.36 and 8.5.1 to 8.5.56 did not release the HTTP/1.1 processor after the upgrade to HTTP/2. If a s…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2020-9484

Published May 20, 2020

When using Apache Tomcat versions 10.0.0-M1 to 10.0.0-M4, 9.0.0.M1 to 9.0.34, 8.5.0 to 8.5.54 and 7.0.0 to 7.0.103 if a) an attacker is able to control the contents and name of a…

CVSS 7.0 · High

Vendor/product tagsBeta · best-effort

CVE-2019-10247

Published Apr 22, 2019

In Eclipse Jetty version 7.x, 8.x, 9.2.27 and older, 9.3.26 and older, and 9.4.16 and older, the server running on any OS and Jetty version combination will reveal the configured…

CVSS 5.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2017-12617

Published Oct 4, 2017

When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g. via setting the readonly initialisatio…

CVSS 8.1 · High

evidence mentions: 5
Buzz score: 49.4

KEV listed

Vendor/product tagsBeta · best-effort

Showing 1-5 of 5 CVEsPage 1 of 1