Oracle Communications Element Manager vulnerabilities

• apache software foundation xerces, apache xerces-j, netapp active iq unified manager +27 more +29 more Infinite loop within Apache XercesJ xml parser CVE-2022-23437 Fix available EPSS 11.6% 6.5 MediumJanuary 24, 2022
• apache http server, apple mac os x, macos +8 more +10 more Possible NULL dereference or SSRF in forward proxy configurations in Apache HTTP Server 2.4.51 and earlier CVE-2021-44224 Fix available EPSS 82.3% 8.2 HighDecember 20, 2021
• apache http server, apple mac os x, macos +10 more +12 more Possible buffer overflow when parsing multipart content in mod_lua of Apache HTTP Server 2.4.51 and earlier CVE-2021-44790 Public exploitFix available EPSS 96.8% 9.8 CriticalDecember 20, 2021
• apache log4j, apache software foundation log4j2, debian linux +114 more +116 more Apache Log4j2 does not always protect from infinite recursion in lookup evaluation CVE-2021-45105 Public exploitFix available EPSS 100.0% 5.9 MediumDecember 18, 2021
• apache commons compress, netapp active iq unified manager, oncommand insight +31 more +33 more Apache Commons Compress 1.0 to 1.20 denial of service vulnerability CVE-2021-36090 Fix available EPSS 12.9% 7.5 HighJuly 13, 2021
• eclipse jetty, the eclipse foundation eclipse jetty, debian linux +14 more +16 more SessionListener can prevent a session from being invalidated breaking logout CVE-2021-34428 Public exploitFix available 2.9 LowJune 22, 2021
• apache cxf, tomee, oracle business intelligence +2 more +4 more Apache CXF Denial of service vulnerability in parsing JSON via JsonMapObjectReaderWriter CVE-2021-30468 Fix available 7.5 HighJune 16, 2021
• vmware spring framework, netapp hci, management services for element software +29 more +31 more Improper Privilege Management in Spring Framework CVE-2021-22118 Fix available 7.8 HighMay 27, 2021
• apache cxf, oracle business intelligence, communications diameter intelligence hub +3 more +5 more OAuth 2 authorization service vulnerable to DDos attacks CVE-2021-22696 Fix available 7.5 HighApril 2, 2021
• eclipse jetty, the eclipse foundation eclipse jetty, jenkins +19 more +21 more Jetty vulnerable to incorrect handling of invalid large TLS frame, exhausting CPU resources CVE-2021-28165 Public exploitFix available EPSS 53.9% 7.5 HighApril 1, 2021
• eclipse jetty, the eclipse foundation eclipse jetty, apache ignite +21 more +23 more Directory exposure in jetty CVE-2021-28163 Fix available 2.7 LowApril 1, 2021
• pivotal software spring security, spring security, oracle communications element manager +5 more +7 more Privilege escalation in spring security CVE-2021-22112 Fix available 8.8 HighFebruary 23, 2021
• apache activemq, artemis, debian linux +5 more +7 more ActiveMQ: LDAP-Authentication does not verify passwords on servers with anonymous bind CVE-2021-26117 Fix available EPSS 11.3% 7.5 HighJanuary 27, 2021
• fasterxml jackson-databind, debian linux, netapp cloud backup +54 more +56 more Unsafe Deserialization in jackson-databind CVE-2020-36179 Public exploitFix available EPSS 17.1% 8.1 HighJanuary 6, 2021
• fasterxml jackson-databind, debian linux, netapp cloud backup +56 more +58 more Unsafe Deserialization in jackson-databind CVE-2020-36180 Public exploitFix available 8.1 HighJanuary 6, 2021
• fasterxml jackson-databind, debian linux, netapp cloud backup +56 more +58 more Unsafe Deserialization in jackson-databind CVE-2020-36182 Fix available 8.1 HighJanuary 6, 2021
• fasterxml jackson-databind, debian linux, netapp cloud backup +42 more +44 more Unsafe Deserialization in jackson-databind CVE-2020-36183 Fix available 8.1 HighJanuary 6, 2021
• fasterxml jackson-databind, debian linux, netapp cloud backup +56 more +58 more Unsafe Deserialization in jackson-databind CVE-2020-36184 Public exploitFix available 8.1 HighJanuary 6, 2021
• fasterxml jackson-databind, debian linux, netapp cloud backup +42 more +44 more Unsafe Deserialization in jackson-databind CVE-2020-36185 Fix available 8.1 HighJanuary 6, 2021
• fasterxml jackson-databind, debian linux, netapp cloud backup +42 more +44 more Unsafe Deserialization in jackson-databind CVE-2020-36186 Fix available 8.1 HighJanuary 6, 2021
• fasterxml jackson-databind, debian linux, netapp cloud backup +42 more +44 more Unsafe Deserialization in jackson-databind CVE-2020-36187 Fix available 8.1 HighJanuary 6, 2021
• fasterxml jackson-databind, debian linux, netapp cloud backup +42 more +44 more Unsafe Deserialization in jackson-databind CVE-2020-36188 Public exploitFix available 8.1 HighJanuary 6, 2021
• fasterxml jackson-databind, debian linux, netapp service level manager +55 more +57 more Unsafe Deserialization in jackson-databind CVE-2020-36181 Fix available 8.1 HighJanuary 6, 2021
• fasterxml jackson-databind, debian linux, netapp service level manager +37 more +39 more Serialization gadget exploit in jackson-databind CVE-2020-35728 Public exploitFix available EPSS 12.5% 8.1 HighDecember 27, 2020
• eclipse jetty, the eclipse foundation eclipse jetty, apache beam +16 more +18 more Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations CVE-2020-27216 Fix available 7.0 HighOctober 23, 2020
• fasterxml jackson-databind, debian linux, oracle agile product lifecycle management +23 more +25 more Unsafe Deserialization in jackson-databind CVE-2020-24750 Public exploitFix available 8.1 HighSeptember 17, 2020
• apache activemq, oracle communications diameter signaling router, communications element manager +4 more +6 more Remote code execution in Apache ActiveMQ CVE-2020-11998 Public exploitFix available EPSS 48.9% 9.8 CriticalSeptember 10, 2020
• fasterxml jackson-databind, debian linux, netapp active iq unified manager +22 more +24 more Code Injection in jackson-databind CVE-2020-24616 Public exploitFix available 8.1 HighAugust 25, 2020
• apache http server, canonical ubuntu linux, debian linux +10 more +12 more Apache HTTP Server versions 2.4.20 to 2.4.43 When trace/debug was enabled for the HTTP/2 module... CVE-2020-11993 Fix available EPSS 56.6% 7.5 HighAugust 7, 2020
• apache http server, canonical ubuntu linux, debian linux +10 more +12 more Apache HTTP server 2.4.32 to 2.4.44 mod_proxy_uwsgi info disclosure and possible RCE CVE-2020-11984 Public exploitFix available EPSS 90.0% 9.8 CriticalAugust 7, 2020
• apache http server, canonical ubuntu linux, debian linux +22 more +24 more Apache HTTP Server versions 2.4.20 to 2.4.43. A specially crafted value for the 'Cache-Digest'... CVE-2020-9490 Fix available EPSS 88.8% 7.5 HighAugust 7, 2020
• fasterxml jackson-databind, debian linux, netapp active iq unified manager +11 more +13 more Deserialization of untrusted data in Jackson Databind CVE-2020-14195 Public exploitFix available 8.1 HighJune 16, 2020
• fasterxml jackson-databind, netapp active iq unified manager, steelstore cloud integrated storage +9 more +11 more Deserialization of untrusted data in Jackson Databind CVE-2020-14060 Fix available 8.1 HighJune 14, 2020
• fasterxml jackson-databind, debian linux, netapp active iq unified manager +12 more +14 more Deserialization of untrusted data in Jackson Databind CVE-2020-14061 Fix available 8.1 HighJune 14, 2020
• fasterxml jackson-databind, debian linux, netapp active iq unified manager +10 more +12 more Deserialization of untrusted data in Jackson Databind CVE-2020-14062 Fix available 8.1 HighJune 14, 2020
• apache activemq, oracle communications diameter signaling router, communications element manager +4 more +6 more Apache ActiveMQ webconsole admin GUI is open to XSS CVE-2020-1941 Fix available 6.1 MediumMay 14, 2020
• apache tomcat, canonical ubuntu linux, debian linux +23 more +25 more Potential remote code execution in Apache Tomcat CVE-2020-9484 Public exploitFix available EPSS 55.5% 7.0 HighMay 11, 2020
• jquery, debian linux, drupal +49 more +51 more Potential XSS vulnerability in jQuery CVE-2020-11023 In KEVPublic exploitFix available EPSS 84.9% 6.9 MediumApril 29, 2020
• sqlite, canonical ubuntu linux, debian linux +18 more +20 more SQLite through 3.31.1 allows attackers to cause a denial of service (segmentation fault) via a... CVE-2020-11655 Fix available 7.5 HighApril 9, 2020
• apache http server, broadcom brocade fabric operating system, canonical ubuntu linux +11 more +13 more In Apache HTTP Server 2.4.0 to 2.4.41, redirects configured with mod_rewrite that were intended... CVE-2020-1927 Fix available EPSS 56.7% 6.1 MediumApril 1, 2020
• apache cxf, netapp oncommand workflow automation, snapmanager +7 more +9 more Apache CXF JMX Integration is vulnerable to a MITM attack CVE-2020-1954 Fix available 5.3 MediumApril 1, 2020
• apache http server, canonical ubuntu linux, debian linux +8 more +10 more In Apache HTTP Server 2.4.0 to 2.4.41, mod_proxy_ftp may use uninitialized memory when proxying... CVE-2020-1934 Fix available EPSS 52.0% 5.3 MediumApril 1, 2020
• fasterxml jackson-databind, debian linux, netapp steelstore cloud integrated storage +29 more +31 more jackson-databind mishandles the interaction between serialization gadgets and typing CVE-2020-11111 Fix available 8.8 HighMarch 31, 2020
• fasterxml jackson-databind, debian linux, netapp steelstore cloud integrated storage +29 more +31 more jackson-databind mishandles the interaction between serialization gadgets and typing CVE-2020-11112 Fix available 8.8 HighMarch 31, 2020
• fasterxml jackson-databind, debian linux, netapp steelstore cloud integrated storage +30 more +32 more jackson-databind mishandles the interaction between serialization gadgets and typing CVE-2020-11113 Public exploitFix available 8.8 HighMarch 31, 2020
• fasterxml jackson-databind, debian linux, netapp steelstore cloud integrated storage +29 more +31 more jackson-databind mishandles the interaction between serialization gadgets and typing CVE-2020-10968 Fix available 8.8 HighMarch 26, 2020
• fasterxml jackson-databind, debian linux, netapp steelstore cloud integrated storage +29 more +31 more jackson-databind mishandles the interaction between serialization gadgets and typing CVE-2020-10969 Fix available 8.8 HighMarch 26, 2020
• fasterxml jackson-databind, debian linux, netapp steelstore cloud integrated storage +29 more +31 more jackson-databind mishandles the interaction between serialization gadgets and typing CVE-2020-10672 Fix available 8.8 HighMarch 18, 2020
• fasterxml jackson-databind, debian linux, netapp steelstore cloud integrated storage +29 more +31 more jackson-databind mishandles the interaction between serialization gadgets and typing CVE-2020-10673 Public exploitFix available 8.8 HighMarch 18, 2020
• fasterxml jackson-databind, debian linux, netapp active iq unified manager +28 more +30 more jackson-databind mishandles the interaction between serialization gadgets and typing CVE-2020-9546 Fix available 9.8 CriticalMarch 2, 2020
• Show olderLoading…