| Package | Affected versions | Patched versions |
|---|---|---|
| oncommand unified manager | ≥ 9.4 | |
| node.js | = 10.13.0≥ 10.0.0, < 10.12.0≥ 11.0.0, < 11.3.0 | 10.12.011.3.0 |
| openssl | = 1.1.1≥ 1.1.0, ≤ 1.1.0i | |
| api gateway | = 11.1.2.4.0 | |
| application server | = 0.9.8= 1.0.0= 1.0.1 | |
| enterprise manager base platform | = 12.1.0.5.0= 13.2.0.0.0= 13.3.0.0.0 | |
| enterprise manager ops center | = 12.3.3 | |
| mysql | ≥ 5.7.0, ≤ 5.7.24≥ 8.0.0, ≤ 8.0.13≤ 5.6.42 | |
| peoplesoft enterprise peopletools | = 8.55= 8.56= 8.57 | |
| primavera p6 enterprise project portfolio management | = 15.1= 15.2= 16.1= 16.2= 18.8= 8.4≥ 17.7, ≤ 17.12 | |
| secure global desktop | = 5.4 | |
| tuxedo | = 12.1.1.0.0 | |
| vm virtualbox | ≥ 5.0.0, < 5.2.24< 6.0.0 | 5.2.246.0.0 |
The OpenSSL ECDSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.1.1a (Affected 1.1.1).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free