oracle http server güvenlik açıkları (CVE)

oracle http server için yayımlanan CVE kayıtları, en yenisi üstte. Yeni bir açık çıktığında e-posta almak için takip edin.

18 sonuç
7.8Yüksek
CVE-2026-91473
Oracle Corporation Oracle HTTP Server

Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Web Listener). The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure whe…

7.8Yüksek
CVE-2026-91419
Oracle Corporation Oracle HTTP Server

Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: OSSL Module). The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure wher…

9.6Kritik
CVE-2026-87347
Oracle Corporation Oracle HTTP Server

Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: OSSL Module). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via…

8.7Yüksek
CVE-2026-87346
Oracle Corporation Oracle HTTP Server

Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Oracle Weblogic Server Proxy Plug-in for Oracle HTTP Server). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allo…

7.8Yüksek
CVE-2026-60530
Oracle Corporation Oracle HTTP Server

Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: mod_http2.so). The supported version that is affected is 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure whe…

7.8Yüksek
CVE-2026-60454
Oracle Corporation Oracle HTTP Server

Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructu…

9.1Kritik
CVE-2026-60438
Oracle Corporation Oracle HTTP Server

Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: mod_ssl). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HT…

8.6Yüksek
CVE-2026-60431
Oracle Corporation Oracle HTTP Server

Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: mod_proxy). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via …

10.0Kritik
CVE-2026-60365
Oracle Corporation Oracle HTTP Server; Oracle Corporation Oracle Weblogic Server Proxy Plug-in

Vulnerability in the Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware (component: WebLogic Server Proxy Plug-In for Third-Party Web Servers). The supported version that is affected is 15.1.1.0.0. Easily exploitable vulnerability allo…

9.8Kritik
CVE-2026-60364
Oracle Corporation Oracle HTTP Server; Oracle Corporation Oracle Weblogic Server Proxy Plug-in

Vulnerability in the Oracle Weblogic Server Proxy Plug-in product of Oracle Fusion Middleware (component: WebLogic Server Proxy Plug-In for Third-Party Web Servers). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vuln…

9.8Kritik
CVE-2026-60363
Oracle Corporation Oracle HTTP Server

Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Apache Plugin). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access …

8.7Yüksek
CVE-2026-34291
Oracle Corporation Oracle HTTP Server

Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTT…

5.3Orta
CVE-2025-21498
Oracle Corporation Oracle HTTP Server

Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Core). The supported version that is affected is 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise …

7.8Yüksek
CVE-2021-4034 KEV Fidye yazılımında kullanılıyor

Red Hat Polkit Out-of-Bounds Read and Write Vulnerability

polkit

A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec does…

95%EPSS
7.0Yüksek
CVE-2021-41617
Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AB0); Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP (6ES7518-4AX00-1AC0); Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AB0); Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP (6ES7518-4FX00-1AC0)

sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used, allows privilege escalation because supplemental groups are not initialized as expected. Helper programs for AuthorizedKeysCommand and AuthorizedPrincipalsCommand ma…

2.5%EPSS
9.0Kritik
CVE-2021-40438 KEV Fidye yazılımında kullanılıyor

mod_proxy SSRF

Apache Software Foundation Apache HTTP Server

A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier.

100%EPSS
7.8Yüksek
CVE-2019-0211 KEV

Apache HTTP Server Privilege Escalation Vulnerability

Apache Apache HTTP Server

In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privileged child processes or threads (including scripts executed by an in-process scripting interpreter) could execute arbitrary code with the priv…

65%EPSS