# Oracle Instantis Enterprisetrack


- [CVE-2021-42013](https://insights.sbomify.com/CVE-2021-42013/): Apache HTTP Server Path Traversal (critical 9.8, exploited in the wild)
- [CVE-2020-1938](https://insights.sbomify.com/CVE-2020-1938/): Apache Tomcat Improper Privilege Management (critical 9.8, exploited in the wild)
- [CVE-2021-40438](https://insights.sbomify.com/CVE-2021-40438/): Apache HTTP Server-Side Request Forgery (SSRF) (critical 9.0, exploited in the wild)
- [CVE-2017-12617](https://insights.sbomify.com/CVE-2017-12617/): Apache Tomcat Remote Code Execution (high 8.1, exploited in the wild)
- [CVE-2019-0211](https://insights.sbomify.com/CVE-2019-0211/): Apache HTTP Server Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2021-41773](https://insights.sbomify.com/CVE-2021-41773/): Apache HTTP Server Path Traversal (high 7.5, exploited in the wild)
- [CVE-2021-44790](https://insights.sbomify.com/CVE-2021-44790/): Possible buffer overflow when parsing multipart content in mod_lua of Apache HTTP Server 2.4.51 and earlier (critical 9.8)
- [CVE-2021-39275](https://insights.sbomify.com/CVE-2021-39275/): ap_escape_quotes buffer overflow (critical 9.8)
- [CVE-2021-26691](https://insights.sbomify.com/CVE-2021-26691/): Apache HTTP Server mod_session response handling heap overflow (critical 9.8)
- [CVE-2020-11984](https://insights.sbomify.com/CVE-2020-11984/): Memory corruption in Apache HTTP Server (critical 9.8)
- [CVE-2019-0219](https://insights.sbomify.com/CVE-2019-0219/): Privilege Escalation in cordova-plugin-inappbrowser (critical 9.8)
- [CVE-2018-8013](https://insights.sbomify.com/CVE-2018-8013/): Deserialization of Untrusted Data in Apache Batik (critical 9.8)

---
From sbomify Insights: https://insights.sbomify.com/products/oracle/instantis-enterprisetrack/