Vulnerabilities > Oracle > Secure Global Desktop
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2021-10-20 | CVE-2021-35649 | Unspecified vulnerability in Oracle Secure Global Desktop 5.6 Vulnerability in the Oracle Secure Global Desktop product of Oracle Virtualization (component: Server). | 5.4 |
| 2021-10-20 | CVE-2021-35650 | Unspecified vulnerability in Oracle Secure Global Desktop 5.6 Vulnerability in the Oracle Secure Global Desktop product of Oracle Virtualization (component: Client). | 4.6 |
| 2021-09-16 | CVE-2021-40438 | Server-Side Request Forgery (SSRF) vulnerability in multiple products A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. | 9.0 |
| 2021-07-21 | CVE-2021-2446 | Unspecified vulnerability in Oracle Secure Global Desktop 5.6 Vulnerability in the Oracle Secure Global Desktop product of Oracle Virtualization (component: Client). | 9.6 |
| 2021-07-21 | CVE-2021-2447 | Unspecified vulnerability in Oracle Secure Global Desktop 5.6 Vulnerability in the Oracle Secure Global Desktop product of Oracle Virtualization (component: Server). | 9.9 |
| 2021-07-12 | CVE-2021-33037 | HTTP Request Smuggling vulnerability in multiple products Apache Tomcat 10.0.0-M1 to 10.0.6, 9.0.0.M1 to 9.0.46 and 8.5.0 to 8.5.66 did not correctly parse the HTTP transfer-encoding request header in some circumstances leading to the possibility to request smuggling when used with a reverse proxy. | 5.3 |
| 2021-04-22 | CVE-2021-2248 | Unspecified vulnerability in Oracle Secure Global Desktop 5.6 Vulnerability in the Oracle Secure Global Desktop product of Oracle Virtualization (component: Server). | 10.0 |
| 2021-04-22 | CVE-2021-2221 | Unspecified vulnerability in Oracle Secure Global Desktop 5.6 Vulnerability in the Oracle Secure Global Desktop product of Oracle Virtualization (component: Client). | 9.6 |
| 2021-04-22 | CVE-2021-2177 | Unspecified vulnerability in Oracle Secure Global Desktop 5.6 Vulnerability in the Oracle Secure Global Desktop product of Oracle Virtualization (component: Gateway). | 10.0 |
| 2021-03-25 | CVE-2021-3450 | Improper Certificate Validation vulnerability in multiple products The X509_V_FLAG_X509_STRICT flag enables additional security checks of the certificates present in a certificate chain. | 7.4 |