secure global desktop vulnerabilities and fixes

Recent CVEs affecting secure global desktop, with upgrade or downgrade steps. 18 tracked.

Also searched as: secureglobaldesktop.

secure global desktop has 18 tracked vulnerabilities, 7 critical. A fixed release or vendor patch exists for 3. Most recent: 2021-10-20. Highest priority: CVE-2016-3613 (score 62/100).

• CVE-2021-35650 MEDIUM 4.6 DOWNGRADE Vulnerability in the Oracle Secure Global Desktop product of Oracle Virtualization (component: Client)
• CVE-2021-35649 MEDIUM 5.4 DOWNGRADE Vulnerability in the Oracle Secure Global Desktop product of Oracle Virtualization (component: Server)
• CVE-2021-2447 CRITICAL 9.9 DOWNGRADE Vulnerability in the Oracle Secure Global Desktop product of Oracle Virtualization (component: Server)
• CVE-2021-2446 CRITICAL 9.6 DOWNGRADE Vulnerability in the Oracle Secure Global Desktop product of Oracle Virtualization (component: Client)
• CVE-2021-2248 CRITICAL 10.0 DOWNGRADE Vulnerability in the Oracle Secure Global Desktop product of Oracle Virtualization (component: Server)
• CVE-2021-2221 CRITICAL 9.6 DOWNGRADE Vulnerability in the Oracle Secure Global Desktop product of Oracle Virtualization (component: Client)
• CVE-2021-2177 CRITICAL 10.0 DOWNGRADE Vulnerability in the Oracle Secure Global Desktop product of Oracle Virtualization (component: Gateway)
• CVE-2018-19439 MEDIUM 6.1 DOWNGRADE XSS exists in the Administration Console in Oracle Secure Global Desktop 4.4 20080807152602 (but was fixed in
• CVE-2016-5580 CRITICAL 9.6 DOWNGRADE Unspecified vulnerability in the Secure Global Desktop component in Oracle Virtualization 4.7 and 5.2 allows r
• CVE-2016-3613 CRITICAL 9.8 DOWNGRADE Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle Virtualization 4.63, 4.71, a
• CVE-2016-0501 MEDIUM 5.0 DOWNGRADE Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle Virtualization 5.2 allows re
• CVE-2014-0226 MEDIUM 6.8 UPGRADE MITIGATE Race condition in the mod_status module in the Apache HTTP Server before 2.4.10 allows remote attackers to cau
• CVE-2014-0098 MEDIUM 5.0 UPGRADE DOWNGRADE The log_cookie function in mod_log_config.c in the mod_log_config module in the Apache HTTP Server before 2.4.
• CVE-2013-2064 MEDIUM 6.8 MITIGATE DOWNGRADE Integer overflow in X.org libxcb 1.9 and earlier allows X servers to trigger allocation of insufficient memory
• CVE-2006-5201 MEDIUM 4.0 MITIGATE MITIGATE Multiple packages on Sun Solaris, including (1) NSS; (2) Java JDK and JRE 5.0 Update 8 and earlier, SDK and JR
• CVE-2006-4959 MEDIUM 5.0 DOWNGRADE Sun Secure Global Desktop (SSGD, aka Tarantella) before 4.3 allows remote attackers to obtain sensitive inform
• CVE-2006-4958 MEDIUM 6.8 DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in Sun Secure Global Desktop (SSGD, aka Tarantella) before
• CVE-2005-0486 MEDIUM 5.0 DOWNGRADE DOWNGRADE Tarantella Secure Global Desktop Enterprise Edition 4.00 and 3.42, and Tarantella Enterprise 3 3.40 and 3.30,

FAQ

How do I fix secure global desktop vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is secure global desktop being exploited right now?

None of the tracked secure global desktop CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which secure global desktop CVE should I patch first?

CVE-2016-3613 currently ranks highest (62/100): Unspecified vulnerability in the Oracle Secure Global Desktop component in Oracle Virtualization 4.63, 4.71, a.

RSS feed for secure global desktop · ← Back to latest CVEs