CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

116 matches found

Tenable Nessus•added 2020/03/06 12:0 a.m.•23 views

Oracle GoldenGate Information Disclosure (April 2018 CPU)

The version of Oracle GoldenGate installed on the remote host is affected by an information disclosure vulnerability, as noted in the April 2018 CPU advisory. The vulnerability exists in Oracle GoldenGate due to an unknown reason. An unauthenticated, remote attacker can exploit this, via HTTP, to...

8.6CVSS8AI score0.01902EPSS

Exploits0References3

Tenable Nessus•added 2020/03/05 12:0 a.m.•65 views

Oracle GoldenGate for Big Data 12.2.0.1.x < 12.2.0.1.10 / 12.3.1.1.x < 12.3.1.1.6 Multiple Vulnerabilities (Oct 2018 CPU)

The version of Oracle GoldenGate for Big Data application located on the remote host is 12.2.0.1.x less than 12.2.0.1.10 or 12.3.1.1.x less than 12.3.1.1.6. It is, therefore, affected by multiple vulnerabilities : - An unspecified vulnerability exists in Oracle GoldenGate for Big Data. An...

9.8CVSS8.2AI score0.57632EPSS

Exploits0References4

Tenable Nessus•added 2020/01/28 12:0 a.m.•62 views

Oracle GoldenGate for Big Data 12.3.2.1.x < 12.3.2.1.2 Apache Log4j Insecure Deserialization RCE (Jan 2019 CPU)

According to its self-reported version number, the Oracle GoldenGate for Big Data application located on the remote host 12.3.2.1.x less than 12.3.2.1.2. It is, therefore, affected by a remote code execution vulnerability due to insecure deserialization of log events received by the Apache Log4j...

9.8CVSS8.8AI score0.8904EPSS

Exploits2References3

Tenable Nessus•added 2019/10/16 12:0 a.m.•56 views

Oracle GoldenGate for Big Data 12.3.1.1.x < 12.3.1.1.6 / 12.3.2.1.x < 12.3.2.1.5 Spring Framework DoS (Oct 2019 CPU)

According to its self-reported version number, the Oracle GoldenGate for Big Data application located on the remote host is 12.3.1.1.x less than 12.3.1.1.6 or 12.3.2.1.x less than 12.3.2.1.5. It is, therefore, affected by a denial of service DoS vulnerability. This vulnerability is due to its use...

7.5CVSS7.4AI score0.09513EPSS

Exploits0References2

Tenable Nessus•added 2019/10/02 12:0 a.m.•17 views

Oracle GoldenGate for Big Data JAR Detection

Binary data oraclegoldengateforbigdatainstalled.nbin...

7.3AI score

Exploits0References1

Check Point Advisories•added 2019/02/19 12:0 a.m.•6 views

Oracle GoldenGate Manager Command Report Denial of Service (CVE-2018-2914)

A denial of service vulnerability exists in Oracle GoldenGate Manager. The vulnerability is due to improper handling of an incomplete Report command. A remote unauthenticated attacker can exploit this vulnerability by sending a malformed command to the target application. Successful exploitation...

5CVSS8.3AI score0.03857EPSS

Exploits1

Check Point Advisories•added 2019/02/19 12:0 a.m.•4 views

Oracle GoldenGate Manager Command Stack Buffer Overflow (CVE-2018-2913)

A stack-based buffer overflow exists in Oracle GoldenGate Manager. The vulnerability is due an input validation error when processing overly long command name. Successful exploitation could lead to arbitrary code execution...

7.5CVSS9.5AI score0.04179EPSS

Exploits1

BDU FSTEC•added 2019/01/30 12:0 a.m.•7 views

The vulnerability of the Manager component in the real-time data synchronization tool Oracle GoldenGate, which allows a hacker to trigger a service failure.

The vulnerability of the Manager component in the real-time data synchronization tool Oracle GoldenGate relates to the handling of the zero pointer. Exploiting this vulnerability could allow a malicious actor to cause a service failure by sending an incorrect command during the TCP connection...

7.8CVSS7.2AI score0.03857EPSS

Exploits1References3Affected Software1

OSV•added 2018/10/17 1:31 a.m.•4 views

CVE-2018-2914

Vulnerability in the Oracle GoldenGate component of Oracle GoldenGate subcomponent: Manager. Supported versions that are affected are 12.1.2.1.0, 12.2.0.2.0 and 12.3.0.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle GoldenGate...

7.5CVSS5.8AI score0.03857EPSS

Exploits1References3

OSV•added 2018/10/17 1:31 a.m.•5 views

CVE-2018-2913

Vulnerability in the Oracle GoldenGate component of Oracle GoldenGate subcomponent: Monitoring Manager. Supported versions that are affected are 12.1.2.1.0, 12.2.0.2.0 and 12.3.0.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle...

10CVSS5.8AI score0.04179EPSS

Exploits1References3