Oracle Communications Application Session Controller vulnerabilities

• oracle advanced networking option, agile engineering data management, agile product lifecycle management +108 more +110 more Vulnerability in the Advanced Networking Option component of Oracle Database Server. Supported... CVE-2021-2351 8.3 HighJuly 20, 2021
• apache commons io, debian linux, netapp active iq unified manager +57 more +59 more Possible limited path traversal vulnerabily in Apache Commons IO CVE-2021-29425 Public exploitFix available EPSS 10.5% 4.8 MediumApril 13, 2021
• apache batik, debian linux, fedoraproject fedora +19 more +21 more Server-side request forgery (SSRF) in Apache Batik CVE-2020-11987 Fix available EPSS 13.6% 8.2 HighFebruary 24, 2021
• apache karaf, bouncycastle bc-java, oracle banking corporate lending process management +17 more +19 more Logic error in Legion of the Bouncy Castle BC Java CVE-2020-28052 Public exploitFix available 8.1 HighDecember 18, 2020
• eclipse jetty, the eclipse foundation eclipse jetty, apache beam +16 more +18 more Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations CVE-2020-27216 Fix available 7.0 HighOctober 23, 2020
• apache batik, oracle api gateway, business intelligence +15 more +17 more Server-side request forgery (SSRF) in Apache Batik CVE-2019-17566 Fix available EPSS 10.9% 7.5 HighJune 22, 2020
• jquery, debian linux, drupal +67 more +69 more jQuery has a potential XSS vulnerability CVE-2020-11022 Public exploitFix available EPSS 99.2% 6.9 MediumApril 29, 2020
• dom4j project dom4j, canonical ubuntu linux, netapp oncommand api services +35 more +37 more dom4j allows External Entities by default which might enable XXE attacks CVE-2020-10683 Fix available 9.8 CriticalApril 29, 2020
• apache log4j, debian linux, oracle communications application session controller +43 more +45 more Improper validation of certificate with host mismatch in Apache Log4j SMTP appender CVE-2020-9488 Public exploitFix available 3.7 LowApril 27, 2020
• dojo, debian linux, oracle communications application session controller +7 more +9 more Prototype pollution in dojo CVE-2020-5258 Fix available 7.7 HighMarch 10, 2020
• hibernate hibernate-validator, netapp active iq unified manager, element +185 more +187 more The SafeHtml annotation in Hibernate-Validator does not properly guard against XSS attacks CVE-2019-10219 Public exploitFix available 6.5 MediumNovember 8, 2019
• backdropcms backdrop, drupal, jquery +102 more +104 more XSS in jQuery as used in Drupal, Backdrop CMS, and other products CVE-2019-11358 Public exploitFix available EPSS 86.8% 6.1 MediumApril 17, 2019
• apache tomcat, canonical ubuntu linux, debian linux +12 more +14 more Apache Tomcat Open Redirect vulnerability CVE-2018-11784 Public exploitFix available EPSS 97.7% 4.3 MediumOctober 4, 2018
• bouncycastle bc-java, netapp oncommand workflow automation, opensuse leap +21 more +23 more Deserialization of Untrusted Data in Bouncy castle CVE-2018-1000613 Fix available 9.8 CriticalJuly 9, 2018
• bouncycastle bc-java, fips java api, debian linux +17 more +19 more Bouncy Castle has a flaw in the Low-level interface to RSA key pair generator CVE-2018-1000180 Fix available 7.5 HighJune 5, 2018
• openssl, oracle agile engineering data management, communications application session controller +4 more +6 more Bad (EC)DHE parameters cause a client crash CVE-2017-3730 Public exploitFix available EPSS 55.3% 7.5 HighMay 4, 2017
• apache tomcat, canonical ubuntu linux, debian linux +16 more +18 more Apache Tomcat Improper Access Control vulnerability CVE-2016-8735 In KEVFix available EPSS 90.3% 9.8 CriticalNovember 24, 2016
• canonical ubuntu linux, debian linux, fujitsu sparc enterprise m3000 firmware +58 more +60 more The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state... CVE-2015-2808 Fix available EPSS 73.9% 5.0 MediumNovember 14, 2013
• gnu glibc, apple mac os x, debian linux +14 more +16 more Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x... CVE-2015-0235 Public exploitFix available EPSS 94.6% 10.0 HighSeptember 13, 2013
• canonical ubuntu linux, fujitsu m10-1 firmware, m10-4 firmware +13 more +15 more The RC4 algorithm, as used in the TLS protocol and SSL protocol, has many single-byte biases,... CVE-2013-2566 EPSS 84.4% 5.9 MediumMarch 14, 2013