Skip to contentOracle Communications Brm - Elastic Charging Engine vulnerabilities
- x-stream xstream, debian linux, fedoraproject fedora +8 more +10 moreDenial of Service by injecting highly recursive collections or maps in XStreamCVE-2021-43859Fix available7.5 High
- apache log4j, apache software foundation log4j2, cisco cloudcenter +20 more +22 moreApache Log4j2 vulnerable to RCE via JDBC Appender when attacker controls configurationCVE-2021-44832Public exploitFix availableEPSS 97.9%6.6 Medium
- apache kafka, oracle communications brm - elastic charging engine, communications cloud native core policy +5 more +7 moreTiming Attack Vulnerability for Apache Kafka Connect and ClientsCVE-2021-38153Fix available5.9 Medium
- debian linux, netapp oncommand insight, netty +9 more +11 moreSnappyFrameDecoder doesn't restrict chunk length any may buffer skippable chunks in an unnecessary wayCVE-2021-37137Fix available7.5 High
- debian linux, netapp oncommand insight, netty +16 more +18 moreBzip2Decoder doesn't allow setting size restrictions for decompressed dataCVE-2021-37136Fix available7.5 High
- vmware spring framework, netapp hci, management services for element software +29 more +31 moreImproper Privilege Management in Spring FrameworkCVE-2021-22118Fix available7.8 High
- x-stream xstream, debian linux, fedoraproject fedora +14 more +16 moreXStream is vulnerable to a Remote Command Execution attackCVE-2021-29505Public exploitFix availableEPSS 77.2%7.5 High
- netty, debian linux, netapp oncommand api services +15 more +17 morePossible request smuggling in HTTP/2 due missing validation of content-lengthCVE-2021-21409Fix available5.9 Medium
- x-stream xstream, apache activemq, jmeter +12 more +14 moreA Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local hostCVE-2021-21342Fix availableEPSS 50.0%5.3 Medium
- netty, debian linux, netapp active iq unified manager +10 more +12 moreLocal Information Disclosure Vulnerability in Netty on Unix-Like systems due temporary filesCVE-2021-21290Fix available6.2 Medium
- apache groovy, atlas, netapp snapcenter +18 more +20 moreInformation Disclosure in Apache GroovyCVE-2020-17521Fix available5.5 Medium
- netty, debian linux, fedoraproject fedora +10 more +12 moreDenial of Service in NettyCVE-2020-11612Fix available7.5 High
- spring framework, vmware spring framework, oracle application testing suite +25 more +27 moreCSRF Attack via CORS Preflight Requests with Spring MVC or Spring WebFluxCVE-2020-5397Fix available5.3 Medium
- pivotal spring framework, debian linux, oracle agile product lifecycle management +37 more +39 moreDoS Attack via Range RequestsCVE-2018-15756Fix available7.5 High