[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fRT2DOcJgQfuE9N1e6hkvLem3xoRbC5tTKqgw3Ak8xsk":3,"g5a-family:oracle\u002Fsecure_global_desktop":147,"g5a-ex:oracle\u002Fsecure_global_desktop@*":148},{"success":4,"data":5},true,{"product":6,"versions":43,"topVulnerabilitiesByEpss":55,"kevVulnerabilities":120,"seoMetadata":125,"meta":144},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":42},"oracle","secure_global_desktop",11,33,1,"2021-10-20",[14,18,21,23,26,29,31,33,35,38,40],{"version":15,"cve_count":11,"kev_count":16,"has_kev":17},"4.4",0,false,{"version":19,"cve_count":20,"kev_count":16,"has_kev":17},"4.63",3,{"version":22,"cve_count":11,"kev_count":16,"has_kev":17},"4.7",{"version":24,"cve_count":25,"kev_count":16,"has_kev":17},"4.71",4,{"version":27,"cve_count":28,"kev_count":16,"has_kev":17},"5.0",2,{"version":30,"cve_count":28,"kev_count":16,"has_kev":17},"5.1",{"version":32,"cve_count":25,"kev_count":16,"has_kev":17},"5.2",{"version":34,"cve_count":25,"kev_count":16,"has_kev":17},"5.3",{"version":36,"cve_count":37,"kev_count":16,"has_kev":17},"5.4",12,{"version":39,"cve_count":25,"kev_count":16,"has_kev":17},"5.5",{"version":41,"cve_count":9,"kev_count":11,"has_kev":4},"5.6","Secure Global Desktop by Oracle is a technology product with 11 tracked versions and 33 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[44,45,46,47,48,49,50,51,52,53,54],{"version":15,"cve_count":11,"kev_count":16,"has_kev":17},{"version":19,"cve_count":20,"kev_count":16,"has_kev":17},{"version":22,"cve_count":11,"kev_count":16,"has_kev":17},{"version":24,"cve_count":25,"kev_count":16,"has_kev":17},{"version":27,"cve_count":28,"kev_count":16,"has_kev":17},{"version":30,"cve_count":28,"kev_count":16,"has_kev":17},{"version":32,"cve_count":25,"kev_count":16,"has_kev":17},{"version":34,"cve_count":25,"kev_count":16,"has_kev":17},{"version":36,"cve_count":37,"kev_count":16,"has_kev":17},{"version":39,"cve_count":25,"kev_count":16,"has_kev":17},{"version":41,"cve_count":9,"kev_count":11,"has_kev":4},[56,64,72,79,86,92,98,104,109,115],{"cveId":57,"description":58,"publishedDate":59,"cvssScore":60,"cvssVersion":61,"severity":62,"isKev":4,"epssScore":63},"CVE-2021-40438","A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier.","2021-09-16",9,"v3.1","Critical",0.99999,{"cveId":65,"description":66,"publishedDate":67,"cvssScore":68,"cvssVersion":69,"severity":70,"isKev":17,"epssScore":71},"CVE-2018-11784","When the default servlet in Apache Tomcat versions 9.0.0.M1 to 9.0.11, 8.5.0 to 8.5.33 and 7.0.23 to 7.0.90 returned a redirect to a directory (e.g. redirecting to '\u002Ffoo\u002F' when the user requested '\u002Ffoo') a specially crafted URL could be used to cause the redirect to be generated to any URI of the attackers choice.","2018-10-04",4.3,"v3.0","Medium",0.9768,{"cveId":73,"description":74,"publishedDate":75,"cvssScore":76,"cvssVersion":61,"severity":77,"isKev":17,"epssScore":78},"CVE-2019-0227","A Server Side Request Forgery (SSRF) vulnerability affected the Apache Axis 1.4 distribution that was last released in 2006. Security and bug commits commits continue in the projects Axis 1.x Subversion repository, legacy users are encouraged to build from source. The successor to Axis 1.x is Axis2, the latest version is 1.7.9 and is not vulnerable to this issue.","2019-05-01",7.5,"High",0.9194,{"cveId":80,"description":81,"publishedDate":82,"cvssScore":83,"cvssVersion":84,"severity":70,"isKev":17,"epssScore":85},"CVE-2014-0226","Race condition in the mod_status module in the Apache HTTP Server before 2.4.10 allows remote attackers to cause a denial of service (heap-based buffer overflow), or possibly obtain sensitive credential information or execute arbitrary code, via a crafted request that triggers improper scoreboard handling within the status_handler function in modules\u002Fgenerators\u002Fmod_status.c and the lua_ap_scoreboard_worker function in modules\u002Flua\u002Flua_request.c.","2014-07-20",6.8,"v2",0.85744,{"cveId":87,"description":88,"publishedDate":89,"cvssScore":90,"cvssVersion":61,"severity":70,"isKev":17,"epssScore":91},"CVE-2019-10092","In Apache HTTP Server 2.4.0-2.4.39, a limited cross-site scripting issue was reported affecting the mod_proxy error page. An attacker could cause the link on the error page to be malformed and instead point to a page of their choice. This would only be exploitable where a server was set up with proxying enabled but was misconfigured in such a way that the Proxy Error page was displayed.","2019-09-26",6.1,0.81466,{"cveId":93,"description":94,"publishedDate":95,"cvssScore":96,"cvssVersion":61,"severity":70,"isKev":17,"epssScore":97},"CVE-2021-33037","Apache Tomcat 10.0.0-M1 to 10.0.6, 9.0.0.M1 to 9.0.46 and 8.5.0 to 8.5.66 did not correctly parse the HTTP transfer-encoding request header in some circumstances leading to the possibility to request smuggling when used with a reverse proxy. Specifically: - Tomcat incorrectly ignored the transfer encoding header if the client declared it would only accept an HTTP\u002F1.0 response; - Tomcat honoured the identify encoding; and - Tomcat did not ensure that, if present, the chunked encoding was the final encoding.","2021-07-12",5.3,0.74667,{"cveId":99,"description":100,"publishedDate":101,"cvssScore":102,"cvssVersion":61,"severity":70,"isKev":17,"epssScore":103},"CVE-2021-3449","An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it was present in the initial ClientHello), but includes a signature_algorithms_cert extension then a NULL pointer dereference will result, leading to a crash and a denial of service attack. A server is only vulnerable if it has TLSv1.2 and renegotiation enabled (which is the default configuration). OpenSSL TLS clients are not impacted by this issue. All OpenSSL 1.1.1 versions are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1-1.1.1j).","2021-03-25",5.9,0.63542,{"cveId":105,"description":106,"publishedDate":107,"cvssScore":76,"cvssVersion":61,"severity":77,"isKev":17,"epssScore":108},"CVE-2017-7668","The HTTP strict parsing changes added in Apache httpd 2.2.32 and 2.4.24 introduced a bug in token list parsing, which allows ap_find_token() to search past the end of its input string. By maliciously crafting a sequence of request headers, an attacker may be able to cause a segmentation fault, or to force ap_find_token() to return an incorrect value.","2017-06-20",0.57472,{"cveId":110,"description":111,"publishedDate":112,"cvssScore":113,"cvssVersion":69,"severity":62,"isKev":17,"epssScore":114},"CVE-2017-9788","In Apache httpd before 2.2.34 and 2.4.x before 2.4.27, the value placeholder in [Proxy-]Authorization headers of type 'Digest' was not initialized or reset before or between successive key=value assignments by mod_auth_digest. Providing an initial key with no '=' assignment could reflect the stale value of uninitialized pool memory used by the prior request, leading to leakage of potentially confidential information, and a segfault in other cases resulting in denial of service.","2017-07-13",9.1,0.5677,{"cveId":116,"description":117,"publishedDate":118,"cvssScore":102,"cvssVersion":69,"severity":70,"isKev":17,"epssScore":119},"CVE-2018-11763","In Apache HTTP Server 2.4.17 to 2.4.34, by sending continuous, large SETTINGS frames a client can occupy a connection, server thread and CPU time without any connection timeout coming to effect. This affects only HTTP\u002F2 connections. A possible mitigation is to not enable the h2 protocol.","2018-09-25",0.50847,[121],{"cveId":57,"description":58,"publishedDate":59,"cvssScore":60,"severity":62,"isKev":4,"epssScore":63,"cisaVulnName":122,"cisaDateAdded":123,"cisaShortDescription":58,"cisaRequiredAction":124},"Apache HTTP Server-Side Request Forgery (SSRF)","2021-12-01","Apply updates per vendor instructions.",{"title":126,"metaDescription":127,"keywords":128,"structuredData":129},"Secure Global Desktop by Oracle - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Secure Global Desktop by Oracle covering 11 versions with 33 tracked vulnerabilities including 1 critical and 0 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Secure Global Desktop vulnerabilities, Secure Global Desktop security, Secure Global Desktop CVE, Oracle Secure Global Desktop, Secure Global Desktop threat intelligence, Oracle security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Secure Global Desktop KEV, Secure Global Desktop exploited vulnerabilities",{"@context":130,"@type":131,"name":132,"description":127,"url":133,"manufacturer":134,"applicationCategory":138,"softwareVersion":139,"mainEntity":140},"https:\u002F\u002Fschema.org","SoftwareApplication","Secure Global Desktop","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Foracle\u002Fsecure_global_desktop",{"@type":135,"name":136,"url":137},"Organization","Oracle","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Foracle","Security Software","11 versions tracked",{"@type":141,"name":142,"description":143,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Secure Global Desktop Security Vulnerabilities","Security vulnerabilities affecting Secure Global Desktop by Oracle",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":145,"apiVersion":146},"2026-10-17T13:43:42.173Z","3.0",[],{"rows":149,"total":11,"capped":17,"failed":11},[150],{"cveId":57,"name":122,"severity":62,"cvss":60,"added":123,"epss":63,"published":59,"ranges":151,"hits":152,"checked":17,"covers":17},[],[]]