# Oracle Enterprise Manager Ops Center


- [CVE-2021-40438](https://insights.sbomify.com/CVE-2021-40438/): Apache HTTP Server-Side Request Forgery (SSRF) (critical 9.0, exploited in the wild)
- [CVE-2019-0211](https://insights.sbomify.com/CVE-2019-0211/): Apache HTTP Server Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2022-1292](https://insights.sbomify.com/CVE-2022-1292/): The c_rehash script allows command injection (critical 9.8)
- [CVE-2022-22720](https://insights.sbomify.com/CVE-2022-22720/): HTTP request smuggling vulnerability in Apache HTTP Server 2.4.52 and earlier (critical 9.8)
- [CVE-2021-26691](https://insights.sbomify.com/CVE-2021-26691/): Apache HTTP Server mod_session response handling heap overflow (critical 9.8)
- [CVE-2021-3177](https://insights.sbomify.com/CVE-2021-3177/): Memory corruption in n/a (critical 9.8)
- [CVE-2020-11984](https://insights.sbomify.com/CVE-2020-11984/): Memory corruption in Apache HTTP Server (critical 9.8)
- [CVE-2020-11656](https://insights.sbomify.com/CVE-2020-11656/): Use after free in n/a (critical 9.8)
- [CVE-2019-5481](https://insights.sbomify.com/CVE-2019-5481/): Use after free in curl (critical 9.8)
- [CVE-2019-5482](https://insights.sbomify.com/CVE-2019-5482/): Memory corruption in curl (critical 9.8)
- [CVE-2019-13990](https://insights.sbomify.com/CVE-2019-13990/): XML external entity injection in Terracotta Quartz Scheduler (critical 9.8)
- [CVE-2018-1270](https://insights.sbomify.com/CVE-2018-1270/): Spring Framework allows applications to expose STOMP over WebSocket endpoints (critical 9.8)

---
From sbomify Insights: https://insights.sbomify.com/products/oracle/enterprise-manager-ops-center/