[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fkJ1IbKNBUN_rnGuSw6uzUUFAkw-QOVBehK3KWSl3-KA":3,"g5a-ex:oracle\u002Fgoldengate@*":172,"g5a-family:oracle\u002Fgoldengate":174},{"success":4,"data":5},true,{"product":6,"versions":64,"topVulnerabilitiesByEpss":88,"kevVulnerabilities":149,"seoMetadata":150,"meta":169},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":63},"oracle","goldengate",23,21,0,"2022-07-19",[14,18,20,22,25,27,29,31,33,35,37,39,41,43,45,47,49,51,53,55,57,59,61],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"11.2",3,false,{"version":19,"cve_count":16,"kev_count":11,"has_kev":17},"12.1.2",{"version":21,"cve_count":16,"kev_count":11,"has_kev":17},"12.1.2.1.0",{"version":23,"cve_count":24,"kev_count":11,"has_kev":17},"12.2.0.1",1,{"version":26,"cve_count":16,"kev_count":11,"has_kev":17},"12.2.0.2.0",{"version":28,"cve_count":11,"kev_count":11,"has_kev":17},"12.3.0",{"version":30,"cve_count":16,"kev_count":11,"has_kev":17},"12.3.0.1.0",{"version":32,"cve_count":24,"kev_count":11,"has_kev":17},"12.3.0.1.2",{"version":34,"cve_count":11,"kev_count":11,"has_kev":17},"12.3.0.1.6",{"version":36,"cve_count":11,"kev_count":11,"has_kev":17},"12.3.2.1",{"version":38,"cve_count":24,"kev_count":11,"has_kev":17},"12.3.2.1.1",{"version":40,"cve_count":11,"kev_count":11,"has_kev":17},"18.1.0.0.0",{"version":42,"cve_count":11,"kev_count":11,"has_kev":17},"18.1.0.0.1",{"version":44,"cve_count":11,"kev_count":11,"has_kev":17},"19.1.0.0.0",{"version":46,"cve_count":24,"kev_count":11,"has_kev":17},"19.1.0.0.0.210420",{"version":48,"cve_count":11,"kev_count":11,"has_kev":17},"19.1.0.0.1",{"version":50,"cve_count":11,"kev_count":11,"has_kev":17},"19.1.0.0.2",{"version":52,"cve_count":11,"kev_count":11,"has_kev":17},"19.1.0.0.220719",{"version":54,"cve_count":11,"kev_count":11,"has_kev":17},"19.1.0.0.3",{"version":56,"cve_count":11,"kev_count":11,"has_kev":17},"19.1.0.0.4",{"version":58,"cve_count":11,"kev_count":11,"has_kev":17},"21.1.0",{"version":60,"cve_count":11,"kev_count":11,"has_kev":17},"21.4.0.0.0",{"version":62,"cve_count":11,"kev_count":11,"has_kev":17},"21.7.0.0.0","Goldengate by Oracle is a technology product with 23 tracked versions and 21 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":16,"kev_count":11,"has_kev":17},{"version":21,"cve_count":16,"kev_count":11,"has_kev":17},{"version":23,"cve_count":24,"kev_count":11,"has_kev":17},{"version":26,"cve_count":16,"kev_count":11,"has_kev":17},{"version":28,"cve_count":11,"kev_count":11,"has_kev":17},{"version":30,"cve_count":16,"kev_count":11,"has_kev":17},{"version":32,"cve_count":24,"kev_count":11,"has_kev":17},{"version":34,"cve_count":11,"kev_count":11,"has_kev":17},{"version":36,"cve_count":11,"kev_count":11,"has_kev":17},{"version":38,"cve_count":24,"kev_count":11,"has_kev":17},{"version":40,"cve_count":11,"kev_count":11,"has_kev":17},{"version":42,"cve_count":11,"kev_count":11,"has_kev":17},{"version":44,"cve_count":11,"kev_count":11,"has_kev":17},{"version":46,"cve_count":24,"kev_count":11,"has_kev":17},{"version":48,"cve_count":11,"kev_count":11,"has_kev":17},{"version":50,"cve_count":11,"kev_count":11,"has_kev":17},{"version":52,"cve_count":11,"kev_count":11,"has_kev":17},{"version":54,"cve_count":11,"kev_count":11,"has_kev":17},{"version":56,"cve_count":11,"kev_count":11,"has_kev":17},{"version":58,"cve_count":11,"kev_count":11,"has_kev":17},{"version":60,"cve_count":11,"kev_count":11,"has_kev":17},{"version":62,"cve_count":11,"kev_count":11,"has_kev":17},[89,97,104,110,116,121,128,132,138,145],{"cveId":90,"description":91,"publishedDate":92,"cvssScore":93,"cvssVersion":94,"severity":95,"isKev":17,"epssScore":96},"CVE-2017-5645","In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that, when deserialized, can execute arbitrary code.","2017-04-17",9.8,"v3.1","Critical",0.89792,{"cveId":98,"description":99,"publishedDate":100,"cvssScore":101,"cvssVersion":94,"severity":102,"isKev":17,"epssScore":103},"CVE-2021-4104","JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration. The attacker can provide TopicBindingName and TopicConnectionFactoryBindingName configurations causing JMSAppender to perform JNDI requests that result in remote code execution in a similar fashion to CVE-2021-44228. Note this issue only affects Log4j 1.2 when specifically configured to use JMSAppender, which is not the default. Apache Log4j 1.2 reached end of life in August 2015. Users should upgrade to Log4j 2 as it addresses numerous other issues from the previous versions.","2021-12-14",7.5,"High",0.80599,{"cveId":105,"description":106,"publishedDate":107,"cvssScore":108,"cvssVersion":94,"severity":102,"isKev":17,"epssScore":109},"CVE-2021-23017","A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.","2021-06-01",7.7,0.53461,{"cveId":111,"description":112,"publishedDate":113,"cvssScore":114,"cvssVersion":94,"severity":102,"isKev":17,"epssScore":115},"CVE-2018-1311","The Apache Xerces-C 3.0.0 to 3.2.3 XML parser contains a use-after-free error triggered during the scanning of external DTDs. This flaw has not been addressed in the maintained version of the library and has no current mitigation other than to disable DTD processing. This can be accomplished via the DOM using a standard parser feature, or via SAX using the XERCES_DISABLE_DTD environment variable.","2019-12-18",8.1,0.09503,{"cveId":117,"description":118,"publishedDate":119,"cvssScore":101,"cvssVersion":94,"severity":102,"isKev":17,"epssScore":120},"CVE-2021-3749","axios is vulnerable to Inefficient Regular Expression Complexity","2021-08-31",0.08515,{"cveId":122,"description":123,"publishedDate":124,"cvssScore":125,"cvssVersion":126,"severity":95,"isKev":17,"epssScore":127},"CVE-2016-0451","Unspecified vulnerability in the Oracle GoldenGate component in Oracle GoldenGate 11.2 and 12.1.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2016-0452.","2016-01-21",10,"v2",0.06833,{"cveId":129,"description":130,"publishedDate":124,"cvssScore":125,"cvssVersion":126,"severity":95,"isKev":17,"epssScore":131},"CVE-2016-0452","Unspecified vulnerability in the Oracle GoldenGate component in Oracle GoldenGate 11.2 and 12.1.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2016-0451.",0.05941,{"cveId":133,"description":134,"publishedDate":135,"cvssScore":125,"cvssVersion":136,"severity":95,"isKev":17,"epssScore":137},"CVE-2018-2913","Vulnerability in the Oracle GoldenGate component of Oracle GoldenGate (subcomponent: Monitoring Manager). Supported versions that are affected are 12.1.2.1.0, 12.2.0.2.0 and 12.3.0.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle GoldenGate. While the vulnerability is in Oracle GoldenGate, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle GoldenGate. Note: For Linux and Windows platforms, the CVSS score is 9.0 with Access Complexity as High. For all other platforms, the cvss score is 10.0. CVSS 3.0 Base Score 10.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:H\u002FI:H\u002FA:H).","2018-10-17","v3.0",0.04179,{"cveId":139,"description":140,"publishedDate":141,"cvssScore":142,"cvssVersion":94,"severity":143,"isKev":17,"epssScore":144},"CVE-2019-3740","RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to an Information Exposure Through Timing Discrepancy vulnerabilities during DSA key generation. A malicious remote attacker could potentially exploit those vulnerabilities to recover DSA keys.","2019-09-18",6.5,"Medium",0.03889,{"cveId":146,"description":147,"publishedDate":135,"cvssScore":101,"cvssVersion":136,"severity":102,"isKev":17,"epssScore":148},"CVE-2018-2912","Vulnerability in the Oracle GoldenGate component of Oracle GoldenGate (subcomponent: Manager). Supported versions that are affected are 12.1.2.1.0, 12.2.0.2.0 and 12.3.0.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle GoldenGate. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle GoldenGate. CVSS 3.0 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H).",0.03857,[],{"title":151,"metaDescription":152,"keywords":153,"structuredData":154},"Goldengate by Oracle - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Goldengate by Oracle covering 23 versions with 21 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Goldengate vulnerabilities, Goldengate security, Goldengate CVE, Oracle Goldengate, Goldengate threat intelligence, Oracle security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":155,"@type":156,"name":157,"description":152,"url":158,"manufacturer":159,"applicationCategory":163,"softwareVersion":164,"mainEntity":165},"https:\u002F\u002Fschema.org","SoftwareApplication","Goldengate","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Foracle\u002Fgoldengate",{"@type":160,"name":161,"url":162},"Organization","Oracle","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Foracle","Security Software","23 versions tracked",{"@type":166,"name":167,"description":168,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Goldengate Security Vulnerabilities","Security vulnerabilities affecting Goldengate by Oracle",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":170,"apiVersion":171},"2026-10-17T18:34:36.408Z","3.0",{"rows":173,"total":11,"capped":17,"failed":11},[],[175,178,180,183,185],{"product":176,"cves":177},"goldengate_application_adapters",33,{"product":179,"cves":125},"goldengate_stream_analytics",{"product":181,"cves":182},"goldengate_for_big_data",6,{"product":184,"cves":24},"goldengate_big_data_and_application_adapters",{"product":186,"cves":24},"goldengate_management_pack"]