CISA Known Exploited Vulnerabilities catalog (page 18)
Page 18 of 18 of the CISA Known Exploited Vulnerabilities catalog, newest additions first, with PoC counts, Metasploit and EPSS.
Known exploited CVEs, newest addition first (page 18 of 18)
| CVE | Product | Severity | Added to KEV | Due date | Ransomware use | Public PoCs | Metasploit | EPSS | Summary |
|---|---|---|---|---|---|---|---|---|---|
CVE-2019-4716 | IBM Planning Analytics +1 | Critical 9.8 | — | 0 | Yes | 0.864 (99.7th percentile) | IBM Planning Analytics 2.0.0 through 2.0.8 is vulnerable to a configuration overwrite that allows an unauthenticated user to login as "admin", and then execute code as root or SYSTEM via TM1 scriptin… | ||
CVE-2019-3398 | Atlassian Confluence +1 | High 8.8 | — | 2 | — | 0.970 (99.9th percentile) | Confluence Server and Data Center had a path traversal vulnerability in the downloadallattachments resource. | ||
CVE-2019-3396 | Atlassian Confluence Server +1 | Critical 9.8 | Known | 24 | Yes | 0.999 (100.0th percentile) | The Widget Connector macro in Atlassian Confluence Server before version 6.6.12 (the fixed version for 6.6.x), from version 6.7.0 before 6.12.3 (the fixed version for 6.12.x), from version 6.13.0 bef… | ||
CVE-2019-2215 | Canonical Ubuntu Linux +77 | High 7.8 | — | 42 | Yes | 0.721 (99.4th percentile) | A use-after-free in binder.c allows an elevation of privilege from an application to the Linux Kernel. | ||
CVE-2019-20085 | — | High 7.5 | — | 4 | Yes | 0.961 (99.9th percentile) | TVT NVMS-1000 devices allow GET /.. | ||
CVE-2019-19781 | Citrix Application Delivery Controller Firmware +3 | Critical 9.8 | Known | 56 | Yes | 1.000 (100.0th percentile) | An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. | ||
CVE-2019-19356 | — | High 7.5 | — | 2 | — | 0.281 (98.1th percentile) | Netis WF2419 is vulnerable to authenticated Remote Code Execution (RCE) as root through the router Web management page. | ||
CVE-2019-18988 | — | High 7.0 | — | 2 | Yes | 0.047 (91.9th percentile) | TeamViewer Desktop through 14.7.1965 allows a bypass of remote-login access control because the same key is used for different customers' installations. | ||
CVE-2019-18935 | — | Critical 9.8 | Known | 19 | Yes | 0.997 (100.0th percentile) | Progress Telerik UI for ASP.NET AJAX through 2019.3.1023 contains a .NET deserialization vulnerability in the RadAsyncUpload function. | ||
CVE-2019-18187 | Trend Micro Trend Micro Officescan +1 | High 7.5 | — | 0 | — | 0.251 (97.9th percentile) | Trend Micro OfficeScan versions 11.0 and XG (12.0) could be exploited by an attacker utilizing a directory traversal vulnerability to extract files from an arbitrary zip file to a specific folder on… | ||
CVE-2019-17558 | Apache Solr +2 | High 7.5 | — | 7 | Yes | 0.986 (99.9th percentile) | Apache Solr 5.0.0 to Apache Solr 8.3.1 are vulnerable to a Remote Code Execution through the VelocityResponseWriter. | ||
CVE-2019-17026 | Canonical Ubuntu Linux +3 | High 8.8 | — | 2 | — | 0.463 (98.8th percentile) | Incorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a type confusion. | ||
CVE-2019-16759 | — | Critical 9.8 | — | 15 | Yes | 0.997 (100.0th percentile) | vBulletin 5.x through 5.5.4 allows remote command execution via the widgetConfig[code] parameter in an ajax/render/widget_php routestring request. | ||
CVE-2019-1653 | Cisco Cisco Small Business Rv Series Router Firmware +2 | High 7.5 | — | 5 | Yes | 0.999 (100.0th percentile) | A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an unauthenticated, remote attacker to retrieve sensitive inform… | ||
CVE-2019-16256 | — | Critical 9.8 | — | 0 | — | 0.049 (92.2th percentile) | Some Samsung devices include the SIMalliance Toolbox Browser (aka S@T Browser) on the UICC, which might allow remote attackers to retrieve location and IMEI information, or retrieve other data or exe… | ||
CVE-2019-15949 | — | High 8.8 | — | 1 | Yes | 0.770 (99.6th percentile) | Nagios XI before 5.6.6 allows remote command execution as root. | ||
CVE-2019-15752 | Apache Geode +2 | High 7.8 | — | 0 | Yes | 0.488 (98.9th percentile) | Docker Desktop Community Edition before 2.1.0.1 allows local users to gain privileges by placing a Trojan horse docker-credential-wincred.exe file in %PROGRAMDATA%\DockerDesktop\version-bin\ as a low… | ||
CVE-2019-1429 | Microsoft Internet Explorer +7 | High 7.5 | — | 0 | — | 0.773 (99.6th percentile) | A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. | ||
CVE-2019-1367 | Microsoft Internet Explorer +7 | High 7.5 | Known | 1 | — | 0.524 (99.0th percentile) | A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka 'Scripting Engine Memory Corruption Vulnerability'. | ||
CVE-2019-13608 | Citrix Storefront Server +1 | High 7.5 | Known | 0 | — | 0.300 (98.2th percentile) | Citrix StoreFront Server before 1903, 7.15 LTSR before CU4 (3.12.4000), and 7.6 LTSR before CU8 (3.0.8000) allows XXE attacks. | ||
CVE-2019-1215 | Microsoft Windows +21 | High 7.8 | Known | 1 | — | 0.193 (97.4th percentile) | An elevation of privilege vulnerability exists in the way that ws2ifsl.sys (Winsock) handles objects in memory, aka 'Windows Elevation of Privilege Vulnerability'. | ||
CVE-2019-1214 | Microsoft Windows +21 | High 7.8 | — | 0 | — | 0.014 (73.0th percentile) | An elevation of privilege vulnerability exists when the Windows Common Log File System (CLFS) driver improperly handles objects in memory, aka 'Windows Common Log File System Driver Elevation of Priv… | ||
CVE-2019-11634 | Citrix Receiver +2 | Critical 9.8 | Known | 0 | — | 0.081 (94.9th percentile) | Citrix Workspace App before 1904 for Windows has Incorrect Access Control. | ||
CVE-2019-11580 | Atlassian Crowd | Critical 9.8 | Known | 4 | Yes | 0.954 (99.9th percentile) | Atlassian Crowd and Crowd Data Center had the pdkinstall development plugin incorrectly enabled in release builds. | ||
CVE-2019-11539 | Ivanti Connect Secure +3 | High 7.2 | Known | 1 | Yes | 0.985 (99.9th percentile) | In Pulse Secure Pulse Connect Secure version 9.0RX before 9.0R3.4, 8.3RX before 8.3R7.1, 8.2RX before 8.2R12.1, and 8.1RX before 8.1R15.1 and Pulse Policy Secure version 9.0RX before 9.0R3.2, 5.4RX b… | ||
CVE-2019-11510 | Ivanti Connect Secure +1 | Critical 10.0 | Known | 13 | Yes | 1.000 (100.0th percentile) | In Pulse Secure Pulse Connect Secure (PCS) 8.2 before 8.2R12.1, 8.3 before 8.3R7.1, and 9.0 before 9.0R3.4, an unauthenticated remote attacker can send a specially crafted URI to perform an arbitrary… | ||
CVE-2019-0863 | Microsoft Windows +21 | High 7.8 | — | 0 | — | 0.052 (92.6th percentile) | An elevation of privilege vulnerability exists in the way Windows Error Reporting (WER) handles files, aka 'Windows Error Reporting Elevation of Privilege Vulnerability'. | ||
CVE-2019-0859 | Microsoft Windows +16 | High 7.8 | Known | 1 | — | 0.042 (91.0th percentile) | An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. | ||
CVE-2019-0808 | Microsoft Windows +3 | High 7.8 | — | 5 | Yes | 0.533 (99.0th percentile) | An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. | ||
CVE-2019-0803 | Microsoft Windows +16 | High 7.8 | Known | 2 | — | 0.452 (98.8th percentile) | An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. | ||
CVE-2019-0797 | Microsoft Windows +14 | High 7.8 | — | 0 | — | 0.019 (79.6th percentile) | An elevation of privilege vulnerability exists in Windows when the Win32k component fails to properly handle objects in memory, aka 'Win32k Elevation of Privilege Vulnerability'. | ||
CVE-2019-0708 | Huawei Agile Controller-Campus Firmware +68 | Critical 9.8 | Known | 148 | Yes | 1.000 (100.0th percentile) | A remote code execution vulnerability exists in Remote Desktop Services formerly known as Terminal Services when an unauthenticated attacker connects to the target system using RDP and sends speciall… | ||
CVE-2019-0604 | Microsoft Microsoft Sharepoint Enterprise Server +5 | Critical 9.8 | Known | 8 | — | 0.999 (100.0th percentile) | A remote code execution vulnerability exists in Microsoft SharePoint when the software fails to check the source markup of an application package, aka 'Microsoft SharePoint Remote Code Execution Vuln… | ||
CVE-2019-0541 | Microsoft Excel Viewer +10 | High 8.8 | — | 1 | — | 0.532 (99.0th percentile) | A remote code execution vulnerability exists in the way that the MSHTML engine inproperly validates input, aka "MSHTML Engine Remote Code Execution Vulnerability." This affects Microsoft Office, Micr… | ||
CVE-2019-0211 | Apache Apache HTTP Server +27 | High 7.8 | — | 2 | — | 0.650 (99.3th percentile) | In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privileged child processes or threads (including scripts executed by an in-process scrip… | ||
CVE-2018-8653 | Microsoft Internet Explorer +3 | High 7.5 | — | 0 | — | 0.296 (98.2th percentile) | A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engine Memory Corruption Vulnerability." This affects… | ||
CVE-2018-7600 | Debian Debian Linux +2 | Critical 9.8 | Known | 70 | Yes | 1.000 (100.0th percentile) | Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbitrary code because of an issue affecting multiple subsystems with default or co… | ||
CVE-2018-6789 | Canonical Ubuntu Linux +3 | Critical 9.8 | Known | 5 | — | 0.821 (99.7th percentile) | An issue was discovered in the base64d function in the SMTP listener in Exim before 4.90.1. | ||
CVE-2018-4939 | Adobe Coldfusion +1 | Critical 9.8 | — | 0 | — | 0.618 (99.2th percentile) | Adobe ColdFusion Update 5 and earlier versions, ColdFusion 11 Update 13 and earlier versions have an exploitable Deserialization of Untrusted Data vulnerability. | ||
CVE-2018-4878 | Adobe Flash Player +4 | High 7.8 | Known | 14 | — | 0.903 (99.8th percentile) | A use-after-free vulnerability was discovered in Adobe Flash Player before 28.0.0.161. | ||
CVE-2018-2380 | SAP Customer Relationship Management +1 | Medium 6.6 | Known | 1 | — | 0.289 (98.2th percentile) | SAP CRM, 7.01, 7.02,7.30, 7.31, 7.33, 7.54, allows an attacker to exploit insufficient validation of path information provided by users, thus characters representing "traverse to parent directory" ar… | ||
CVE-2018-20062 | 5none Nonecms +1 | Critical 9.8 | — | 5 | Yes | 0.995 (99.9th percentile) | An issue was discovered in NoneCms V1.3. | ||
CVE-2018-18325 | Dnnsoftware Dotnetnuke +1 | High 7.5 | — | 0 | Yes | 0.740 (99.5th percentile) | DNN (aka DotNetNuke) 9.2 through 9.2.2 uses a weak encryption algorithm to protect input parameters. | ||
CVE-2018-15961 | Adobe Coldfusion | Critical 9.8 | — | 8 | Yes | 1.000 (100.0th percentile) | Adobe ColdFusion versions July 12 release (2018.0.0.310739), Update 6 and earlier, and Update 14 and earlier have an unrestricted file upload vulnerability. | ||
CVE-2018-15811 | Dnnsoftware Dotnetnuke +1 | High 7.5 | — | 0 | Yes | 0.763 (99.5th percentile) | DNN (aka DotNetNuke) 9.2 through 9.2.1 uses a weak encryption algorithm to protect input parameters. | ||
CVE-2018-14558 | — | Critical 9.8 | — | 0 | — | 0.085 (95.1th percentile) | An issue was discovered on Tenda AC7 devices with firmware through V15.03.06.44_CN(AC7), AC9 devices with firmware through V15.03.05.19(6318)_CN(AC9), and AC10 devices with firmware through V15.03.06… | ||
CVE-2018-13379 | Fortinet Fortinet Fortios, Fortiproxy +2 | Critical 9.1 | Known | 15 | Yes | 1.000 (100.0th percentile) | An Improper Limitation of a Pathname to a Restricted Directory ("Path Traversal") in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.3 to 5.6.7 and 5.4.6 to 5.4.12 and FortiProxy 2.0.0, 1.2.0 to 1.2.8, 1.1.0 to… | ||
CVE-2018-11776 | Apache Struts +8 | High 8.1 | — | 19 | Yes | 1.000 (100.0th percentile) | Apache Struts versions 2.3 to 2.3.34 and 2.5 to 2.5.16 suffer from possible Remote Code Execution when alwaysSelectFullNamespace is true (either by user or a plugin like Convention Plugin) and then… | ||
CVE-2018-0802 | Microsoft Office +3 | High 7.8 | Known | 7 | — | 0.933 (99.8th percentile) | Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allow a remote code execution vulnerability due to the way objects are handled in mem… | ||
CVE-2018-0798 | Microsoft Office +3 | High 8.8 | — | 1 | — | 0.951 (99.9th percentile) | Equation Editor in Microsoft Office 2007, Microsoft Office 2010, Microsoft Office 2013, and Microsoft Office 2016 allows a remote code execution vulnerability due to the way objects are handled in me… | ||
CVE-2018-0296 | Cisco Adaptive Security Appliance Software +3 | High 7.5 | — | 4 | Yes | 0.999 (100.0th percentile) | A vulnerability in the web interface of the Cisco Adaptive Security Appliance (ASA) could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a… | ||
CVE-2018-0171 | Cisco iOS +1 | Critical 9.8 | — | 1 | — | 0.995 (99.9th percentile) | A vulnerability in the Smart Install feature of Cisco IOS Software and Cisco IOS XE Software could allow an unauthenticated, remote attacker to trigger a reload of an affected device, resulting in a… | ||
CVE-2017-9822 | Dnnsoftware Dotnetnuke +1 | High 8.8 | Known | 4 | Yes | 0.948 (99.9th percentile) | DNN (aka DotNetNuke) before 9.1.1 has Remote Code Execution via a cookie, aka "2017-08 (Critical) Possible remote code execution on DNN sites." | ||
CVE-2017-9805 | Apache Struts +7 | High 8.1 | — | 22 | Yes | 0.994 (99.9th percentile) | The REST Plugin in Apache Struts 2.1.1 through 2.3.x before 2.3.34 and 2.5.x before 2.5.13 uses an XStreamHandler with an instance of XStream for deserialization without any type filtering, which can… | ||
CVE-2017-9248 | — | Critical 9.8 | — | 9 | — | 0.751 (99.5th percentile) | Telerik.Web.UI.dll in Progress Telerik UI for ASP.NET AJAX before R2 2017 SP1 and Sitefinity before 10.0.6412.0 does not properly protect Telerik.Web.UI.DialogParametersEncryptionKey or the MachineKe… | ||
CVE-2017-8759 | Microsoft .Net Framework +1 | High 7.8 | — | 19 | — | 0.887 (99.8th percentile) | Microsoft .NET Framework 2.0, 3.5, 3.5.1, 4.5.2, 4.6, 4.6.1, 4.6.2 and 4.7 allow an attacker to execute code remotely via a malicious document or application, aka ".NET Framework Remote Code Executio… | ||
CVE-2017-7269 | Microsoft Internet Information Services +1 | Critical 9.8 | — | 34 | Yes | 0.998 (100.0th percentile) | Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information Services (IIS) 6.0 in Microsoft Windows Server 2003 R2 allows remote attackers to execute arbitrary… | ||
CVE-2017-6327 | Symantec Message Gateway +1 | High 8.8 | — | 0 | — | 0.359 (98.5th percentile) | The Symantec Messaging Gateway before 10.6.3-267 can encounter an issue of remote code execution, which describes a situation whereby an individual may obtain the ability to execute commands remotely… | ||
CVE-2017-5638 | Apache Struts +9 | Critical 9.8 | Known | 95 | Yes | 1.000 (100.0th percentile) | The Jakarta Multipart parser in Apache Struts 2 2.3.x before 2.3.32 and 2.5.x before 2.5.10.1 has incorrect exception handling and error-message generation during file-upload attempts, which allows r… | ||
CVE-2017-16651 | Debian Debian Linux +2 | High 7.8 | — | 2 | Yes | 0.457 (98.8th percentile) | Roundcube Webmail before 1.1.10, 1.2.x before 1.2.7, and 1.3.x before 1.3.3 allows unauthorized access to arbitrary files on the host's filesystem, including configuration files, as exploited in the… | ||
CVE-2017-11882 | Microsoft Office +1 | High 7.8 | Known | 46 | Yes | 0.999 (100.0th percentile) | Microsoft Office 2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft Office 2013 Service Pack 1, and Microsoft Office 2016 allow an attacker to run arbitrary code in the context of t… | ||
CVE-2017-11774 | Microsoft Outlook +1 | High 7.8 | — | 1 | — | 0.596 (99.1th percentile) | Microsoft Outlook 2010 SP2, Outlook 2013 SP1 and RT SP1, and Outlook 2016 allow an attacker to execute arbitrary commands, due to how Microsoft Office handles objects in memory, aka "Microsoft Outloo… | ||
CVE-2017-0199 | Microsoft Office +6 | High 7.8 | Known | 29 | Yes | 0.995 (99.9th percentile) | Microsoft Office 2007 SP3, Microsoft Office 2010 SP2, Microsoft Office 2013 SP1, Microsoft Office 2016, Microsoft Windows Vista SP2, Windows Server 2008 SP2, Windows 7 SP1, Windows 8.1 allow remote a… | ||
CVE-2017-0143 | Microsoft Server Message Block +10 | High 8.8 | Known | 25 | Yes | 0.933 (99.8th percentile) | The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607… | ||
CVE-2016-9563 | — | Medium 6.5 | — | 0 | — | 0.242 (97.9th percentile) | BC-BMT-BPM-DSK in SAP NetWeaver AS JAVA 7.5 allows remote authenticated users to conduct XML External Entity (XXE) attacks via the sap.com~tc~bpem~him~uwlconn~provider~web/bpemuwlconn URI, aka SAP Se… | ||
CVE-2016-7255 | Microsoft Windows 10 1507 +10 | High 7.8 | Known | 5 | — | 0.810 (99.6th percentile) | The kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, and 160… | ||
CVE-2016-4437 | Apache Aurora +4 | Critical 9.8 | — | 7 | Yes | 0.930 (99.8th percentile) | Apache Shiro before 1.2.5, when a cipher key has not been configured for the "remember me" feature, allows remote attackers to execute arbitrary code or bypass intended access restrictions via an uns… | ||
CVE-2016-3976 | — | High 7.5 | — | 0 | — | 0.473 (98.8th percentile) | Directory traversal vulnerability in SAP NetWeaver AS Java 7.1 through 7.5 allows remote attackers to read arbitrary files via a ..\ (dot dot backslash) in the fileName parameter to CrashFileDownload… | ||
CVE-2016-3718 | Canonical Ubuntu Linux +30 | Medium 5.5 | — | 0 | — | 0.756 (99.5th percentile) | The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted image. | ||
CVE-2016-3715 | Canonical Ubuntu Linux +30 | Medium 5.5 | — | 0 | — | 0.753 (99.5th percentile) | The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted image. | ||
CVE-2016-3643 | — | High 7.8 | — | 0 | — | 0.037 (89.8th percentile) | SolarWinds Virtualization Manager 6.3.1 and earlier allow local users to gain privileges by leveraging a misconfiguration of sudo, as demonstrated by "sudo cat /etc/passwd." | ||
CVE-2016-3235 | Microsoft Visio +2 | High 7.8 | — | 0 | Yes | 0.433 (98.7th percentile) | Microsoft Visio 2007 SP3, Visio 2010 SP2, Visio 2013 SP1, Visio 2016, Visio Viewer 2007 SP3, and Visio Viewer 2010 mishandle library loading, which allows local users to gain privileges via a crafted… | ||
CVE-2016-0185 | Microsoft Windows 7 +3 | High 7.8 | — | 0 | — | 0.698 (99.4th percentile) | Media Center in Microsoft Windows Vista SP2, Windows 7 SP1, and Windows 8.1 allows remote attackers to execute arbitrary code via a crafted Media Center link (aka .mcl) file, aka "Windows Media Cente… | ||
CVE-2016-0167 | Microsoft Windows 10 1507 +8 | High 7.8 | Known | 0 | — | 0.057 (93.0th percentile) | The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 al… | ||
CVE-2015-4852 | — | Critical 9.8 | — | 4 | Yes | 0.950 (99.9th percentile) | The WLS Security component in Oracle WebLogic Server 10.3.6.0, 12.1.2.0, 12.1.3.0, and 12.2.1.0 allows remote attackers to execute arbitrary commands via a crafted serialized Java object in T3 protoc… | ||
CVE-2015-1641 | Microsoft Office +6 | High 7.8 | — | 1 | — | 0.972 (99.9th percentile) | Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word for Mac 2011, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP2 and… | ||
CVE-2014-1812 | Microsoft Windows 7 +6 | High 8.8 | Known | 1 | Yes | 0.651 (99.3th percentile) | The Group Policy implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 does not properly handle… | ||
CVE-2012-3152 | — | Critical 9.1 | — | 1 | Yes | 0.988 (99.9th percentile) | Unspecified vulnerability in the Oracle Reports Developer component in Oracle Fusion Middleware 11.1.1.4, 11.1.1.6, and 11.1.2.0 allows remote attackers to affect confidentiality and integrity via un… | ||
CVE-2012-0158 | Microsoft Biztalk Server +10 | High 8.8 | Known | 2 | Yes | 1.000 (100.0th percentile) | The (1) ListView, (2) ListView2, (3) TreeView, and (4) TreeView2 ActiveX controls in MSCOMCTL.OCX in the Common Controls in Microsoft Office 2003 SP3, 2007 SP2 and SP3, and 2010 Gold and SP1; Office… | ||
CVE-2010-5326 | — | Critical 10.0 | — | 0 | — | 0.178 (97.2th percentile) | The Invoker Servlet on SAP NetWeaver Application Server Java platforms, possibly before 7.3, does not require authentication, which allows remote attackers to execute arbitrary code via an HTTP or HT… |