Oracle Communications Diameter Intelligence Hub vulnerabilities

• x-stream xstream, debian linux, fedoraproject fedora +8 more +10 more Denial of Service by injecting highly recursive collections or maps in XStream CVE-2021-43859 Fix available 7.5 HighFebruary 1, 2022
• apache software foundation santuario, apache cxf, santuario xml security for java +16 more +18 more Bypass of the secureValidation property CVE-2021-40690 Fix available 7.5 HighSeptember 19, 2021
• oracle advanced networking option, agile engineering data management, agile product lifecycle management +108 more +110 more Vulnerability in the Advanced Networking Option component of Oracle Database Server. Supported... CVE-2021-2351 8.3 HighJuly 20, 2021
• apache ant, oracle agile engineering data management, agile product lifecycle management +33 more +35 more Apache Ant ZIP, and ZIP based, archive denial of service vulerability CVE-2021-36374 Fix available 5.5 MediumJuly 14, 2021
• apache commons compress, netapp active iq unified manager, oncommand insight +31 more +33 more Apache Commons Compress 1.0 to 1.20 denial of service vulnerability CVE-2021-36090 Fix available EPSS 12.9% 7.5 HighJuly 13, 2021
• apache commons compress, netapp active iq unified manager, oncommand insight +24 more +26 more Apache Commons Compress 1.1 to 1.20 denial of service vulnerability CVE-2021-35517 Fix available EPSS 10.6% 7.5 HighJuly 13, 2021
• apache commons compress, netapp active iq unified manager, oncommand insight +21 more +23 more Apache Commons Compress 1.6 to 1.20 denial of service vulnerability CVE-2021-35516 Fix available EPSS 12.4% 7.5 HighJuly 13, 2021
• apache commons compress, netapp active iq unified manager, oncommand insight +23 more +25 more Apache Commons Compress 1.6 to 1.20 denial of service vulnerability CVE-2021-35515 Fix available EPSS 11.6% 7.5 HighJuly 13, 2021
• vmware spring framework, netapp hci, management services for element software +29 more +31 more Improper Privilege Management in Spring Framework CVE-2021-22118 Fix available 7.8 HighMay 27, 2021
• apache commons io, debian linux, netapp active iq unified manager +57 more +59 more Possible limited path traversal vulnerabily in Apache Commons IO CVE-2021-29425 Public exploitFix available EPSS 10.5% 4.8 MediumApril 13, 2021
• apache cxf, oracle business intelligence, communications diameter intelligence hub +3 more +5 more OAuth 2 authorization service vulnerable to DDos attacks CVE-2021-22696 Fix available 7.5 HighApril 2, 2021
• apache struts, oracle business intelligence, communications diameter intelligence hub +5 more +7 more Remote code execution in Apache Struts CVE-2020-17530 In KEVPublic exploitFix available EPSS 96.3% 9.8 CriticalDecember 11, 2020
• openssl, debian linux, fedoraproject fedora +41 more +43 more EDIPARTYNAME NULL pointer dereference CVE-2020-1971 Public exploitFix available 5.9 MediumDecember 8, 2020
• apache camel, oracle communications diameter intelligence hub, communications diameter signaling router +2 more +4 more Improper Input Validation in Apache Camel CVE-2020-11971 Fix available EPSS 14.0% 7.5 HighMay 14, 2020