[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f9vYOApcIhSVU1h-USKuMdtJKO2mVWn_gz02Tw3DCrZI":3,"g5a-family:oracle\u002Fenterprise_manager_ops_center":163,"g5a-ex:oracle\u002Fenterprise_manager_ops_center@*":164},{"success":4,"data":5},true,{"product":6,"versions":52,"topVulnerabilitiesByEpss":67,"kevVulnerabilities":127,"seoMetadata":141,"meta":160},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":51},"oracle","enterprise_manager_ops_center",14,107,2,"2022-05-03",[14,19,21,23,25,28,30,32,34,37,39,42,45,48],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},"11.1",1,0,false,{"version":20,"cve_count":16,"kev_count":17,"has_kev":18},"11.1.3",{"version":22,"cve_count":16,"kev_count":17,"has_kev":18},"12.1",{"version":24,"cve_count":17,"kev_count":17,"has_kev":18},"12.1.3",{"version":26,"cve_count":27,"kev_count":17,"has_kev":18},"12.1.4",6,{"version":29,"cve_count":16,"kev_count":17,"has_kev":18},"12.2",{"version":31,"cve_count":27,"kev_count":17,"has_kev":18},"12.2.0",{"version":33,"cve_count":27,"kev_count":17,"has_kev":18},"12.2.1",{"version":35,"cve_count":36,"kev_count":17,"has_kev":18},"12.2.2",17,{"version":38,"cve_count":27,"kev_count":17,"has_kev":18},"12.3.0",{"version":40,"cve_count":41,"kev_count":17,"has_kev":18},"12.3.2",5,{"version":43,"cve_count":44,"kev_count":16,"has_kev":4},"12.3.3",43,{"version":46,"cve_count":47,"kev_count":16,"has_kev":4},"12.4.0",22,{"version":49,"cve_count":50,"kev_count":16,"has_kev":4},"12.4.0.0",50,"Enterprise Manager Ops Center by Oracle is a technology product with 14 tracked versions and 107 known security vulnerabilities including 2 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[53,54,55,56,57,58,59,60,61,62,63,64,65,66],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},{"version":20,"cve_count":16,"kev_count":17,"has_kev":18},{"version":22,"cve_count":16,"kev_count":17,"has_kev":18},{"version":24,"cve_count":17,"kev_count":17,"has_kev":18},{"version":26,"cve_count":27,"kev_count":17,"has_kev":18},{"version":29,"cve_count":16,"kev_count":17,"has_kev":18},{"version":31,"cve_count":27,"kev_count":17,"has_kev":18},{"version":33,"cve_count":27,"kev_count":17,"has_kev":18},{"version":35,"cve_count":36,"kev_count":17,"has_kev":18},{"version":38,"cve_count":27,"kev_count":17,"has_kev":18},{"version":40,"cve_count":41,"kev_count":17,"has_kev":18},{"version":43,"cve_count":44,"kev_count":16,"has_kev":4},{"version":46,"cve_count":47,"kev_count":16,"has_kev":4},{"version":49,"cve_count":50,"kev_count":16,"has_kev":4},[68,76,82,88,94,100,105,112,117,122],{"cveId":69,"description":70,"publishedDate":71,"cvssScore":72,"cvssVersion":73,"severity":74,"isKev":4,"epssScore":75},"CVE-2021-40438","A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier.","2021-09-16",9,"v3.1","Critical",0.99999,{"cveId":77,"description":78,"publishedDate":79,"cvssScore":80,"cvssVersion":73,"severity":81,"isKev":18,"epssScore":75},"CVE-2021-45105","Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread Context Map data to cause a denial of service when a crafted string is interpreted. This issue was fixed in Log4j 2.17.0, 2.12.3, and 2.3.1.","2021-12-18",5.9,"Medium",{"cveId":83,"description":84,"publishedDate":85,"cvssScore":86,"cvssVersion":73,"severity":81,"isKev":18,"epssScore":87},"CVE-2020-11022","In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.","2020-04-29",6.1,0.99215,{"cveId":89,"description":90,"publishedDate":91,"cvssScore":92,"cvssVersion":73,"severity":74,"isKev":18,"epssScore":93},"CVE-2020-11984","Apache HTTP server 2.4.32 to 2.4.44 mod_proxy_uwsgi info disclosure and possible RCE","2020-08-07",9.8,0.90039,{"cveId":95,"description":96,"publishedDate":91,"cvssScore":97,"cvssVersion":73,"severity":98,"isKev":18,"epssScore":99},"CVE-2020-9490","Apache HTTP Server versions 2.4.20 to 2.4.43. A specially crafted value for the 'Cache-Digest' header in a HTTP\u002F2 request would result in a crash when the server actually tries to HTTP\u002F2 PUSH a resource afterwards. Configuring the HTTP\u002F2 feature via \"H2Push off\" will mitigate this vulnerability for unpatched servers.",7.5,"High",0.88844,{"cveId":101,"description":102,"publishedDate":103,"cvssScore":86,"cvssVersion":73,"severity":81,"isKev":18,"epssScore":104},"CVE-2019-11358","jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.","2019-04-20",0.8682,{"cveId":106,"description":107,"publishedDate":108,"cvssScore":109,"cvssVersion":110,"severity":81,"isKev":18,"epssScore":111},"CVE-2014-0226","Race condition in the mod_status module in the Apache HTTP Server before 2.4.10 allows remote attackers to cause a denial of service (heap-based buffer overflow), or possibly obtain sensitive credential information or execute arbitrary code, via a crafted request that triggers improper scoreboard handling within the status_handler function in modules\u002Fgenerators\u002Fmod_status.c and the lua_ap_scoreboard_worker function in modules\u002Flua\u002Flua_request.c.","2014-07-20",6.8,"v2",0.85744,{"cveId":113,"description":114,"publishedDate":12,"cvssScore":115,"cvssVersion":73,"severity":98,"isKev":18,"epssScore":116},"CVE-2022-1292","The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool. Fixed in OpenSSL 3.0.3 (Affected 3.0.0,3.0.1,3.0.2). Fixed in OpenSSL 1.1.1o (Affected 1.1.1-1.1.1n). Fixed in OpenSSL 1.0.2ze (Affected 1.0.2-1.0.2zd).",7.3,0.82612,{"cveId":118,"description":119,"publishedDate":120,"cvssScore":86,"cvssVersion":73,"severity":81,"isKev":18,"epssScore":121},"CVE-2019-10092","In Apache HTTP Server 2.4.0-2.4.39, a limited cross-site scripting issue was reported affecting the mod_proxy error page. An attacker could cause the link on the error page to be malformed and instead point to a page of their choice. This would only be exploitable where a server was set up with proxying enabled but was misconfigured in such a way that the Proxy Error page was displayed.","2019-09-26",0.81466,{"cveId":123,"description":124,"publishedDate":125,"cvssScore":92,"cvssVersion":73,"severity":74,"isKev":18,"epssScore":126},"CVE-2018-1270","Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, allow applications to expose STOMP over WebSocket endpoints with a simple, in-memory STOMP broker through the spring-messaging module. A malicious user (or attacker) can craft a message to the broker that can lead to a remote code execution attack.","2018-04-06",0.77476,[128,132],{"cveId":69,"description":70,"publishedDate":71,"cvssScore":72,"severity":74,"isKev":4,"epssScore":75,"cisaVulnName":129,"cisaDateAdded":130,"cisaShortDescription":70,"cisaRequiredAction":131},"Apache HTTP Server-Side Request Forgery (SSRF)","2021-12-01","Apply updates per vendor instructions.",{"cveId":133,"description":134,"publishedDate":135,"cvssScore":136,"severity":98,"isKev":4,"epssScore":137,"cisaVulnName":138,"cisaDateAdded":139,"cisaShortDescription":140,"cisaRequiredAction":131},"CVE-2019-0211","In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privileged child processes or threads (including scripts executed by an in-process scripting interpreter) could execute arbitrary code with the privileges of the parent process (usually root) by manipulating the scoreboard. Non-Unix systems are not affected.","2019-04-08",7.8,0.65005,"Apache HTTP Server Privilege Escalation Vulnerability","2021-11-03","Apache HTTP Server, with MPM event, worker or prefork, code executing in less-privileged child processes or threads (including scripts executed by an in-process scripting interpreter) could execute code with the privileges of the parent process (usually root) by manipulating the scoreboard.",{"title":142,"metaDescription":143,"keywords":144,"structuredData":145},"Enterprise Manager Ops Center by Oracle - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Enterprise Manager Ops Center by Oracle covering 14 versions with 107 tracked vulnerabilities including 1 critical and 1 high-severity issues and 2 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Enterprise Manager Ops Center vulnerabilities, Enterprise Manager Ops Center security, Enterprise Manager Ops Center CVE, Oracle Enterprise Manager Ops Center, Enterprise Manager Ops Center threat intelligence, Oracle security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Enterprise Manager Ops Center KEV, Enterprise Manager Ops Center exploited vulnerabilities",{"@context":146,"@type":147,"name":148,"description":143,"url":149,"manufacturer":150,"applicationCategory":154,"softwareVersion":155,"mainEntity":156},"https:\u002F\u002Fschema.org","SoftwareApplication","Enterprise Manager Ops Center","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Foracle\u002Fenterprise_manager_ops_center",{"@type":151,"name":152,"url":153},"Organization","Oracle","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Foracle","Security Software","14 versions tracked",{"@type":157,"name":158,"description":159,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Enterprise Manager Ops Center Security Vulnerabilities","Security vulnerabilities affecting Enterprise Manager Ops Center by Oracle",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":161,"apiVersion":162},"2026-10-17T13:25:17.893Z","3.0",[],{"rows":165,"total":11,"capped":18,"failed":17},[166,170],{"cveId":69,"name":129,"severity":74,"cvss":72,"added":130,"epss":75,"published":167,"ranges":168,"checked":4,"hits":169,"covers":18},"2021-09-16T15:15:07.633",[49],[],{"cveId":133,"name":138,"severity":98,"cvss":136,"added":139,"epss":137,"published":171,"ranges":172,"checked":4,"hits":173,"covers":18},"2019-04-08T22:29:00.387",[43,46],[]]