tuxedo vulnerabilities and fixes

Recent CVEs affecting tuxedo, with upgrade or downgrade steps. 12 tracked.

tuxedo has 12 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 0. Most recent: 2018-07-18. Highest priority: CVE-2017-10269 (score 61/100).

• CVE-2018-3007 HIGH 8.6 DOWNGRADE Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware (subcomponent: Core)
• CVE-2017-10278 HIGH 7.0 DOWNGRADE Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware (subcomponent: Security)
• CVE-2017-10272 CRITICAL 9.9 DOWNGRADE Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware (subcomponent: Core)
• CVE-2017-10269 CRITICAL 10.0 DOWNGRADE Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware (subcomponent: Core)
• CVE-2017-10267 HIGH 7.5 DOWNGRADE Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware (subcomponent: Core)
• CVE-2017-10266 MEDIUM 5.3 DOWNGRADE Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware (subcomponent: Core)
• CVE-2015-3197 MEDIUM 5.9 DOWNGRADE DOWNGRADE ssl/s2_srvr.c in OpenSSL 1.0.1 before 1.0.1r and 1.0.2 before 1.0.2f does not prevent use of disabled ciphers,
• CVE-2007-5576 MEDIUM 6.8 DOWNGRADE DOWNGRADE BEA Tuxedo 8.0 before RP392 and 8.1 before RP293, and WebLogic Enterprise 5.1 before RP174, echo the password
• CVE-2003-0623 MEDIUM 4.3 DOWNGRADE DOWNGRADE Cross-site scripting (XSS) vulnerability in the Administration Console for BEA Tuxedo 8.1 and earlier allows r
• CVE-2003-0622 MEDIUM 5.0 DOWNGRADE DOWNGRADE The Administration Console for BEA Tuxedo 8.1 and earlier allows remote attackers to cause a denial of service
• CVE-2003-0621 MEDIUM 5.0 DOWNGRADE DOWNGRADE The Administration Console for BEA Tuxedo 8.1 and earlier allows remote attackers to determine the existence o
• CVE-2001-1477 MEDIUM 4.6 DOWNGRADE The Domain gateway in BEA Tuxedo 7.1 does not perform authorization checks for imported services and qspaces o

FAQ

How do I fix tuxedo vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is tuxedo being exploited right now?

None of the tracked tuxedo CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which tuxedo CVE should I patch first?

CVE-2017-10269 currently ranks highest (61/100): Vulnerability in the Oracle Tuxedo component of Oracle Fusion Middleware (subcomponent: Core).

RSS feed for tuxedo · ← Back to latest CVEs