Oracle Communications Evolved Communications Application Server vulnerabilities

• apache log4j, apache software foundation log4j2, debian linux +114 more +116 more Apache Log4j2 does not always protect from infinite recursion in lookup evaluation CVE-2021-45105 Public exploitFix available EPSS 100.0% 5.9 MediumDecember 18, 2021
• fasterxml jackson-databind, debian linux, netapp cloud backup +54 more +56 more Unsafe Deserialization in jackson-databind CVE-2020-36179 Public exploitFix available EPSS 17.1% 8.1 HighJanuary 6, 2021
• fasterxml jackson-databind, debian linux, netapp cloud backup +56 more +58 more Unsafe Deserialization in jackson-databind CVE-2020-36180 Public exploitFix available 8.1 HighJanuary 6, 2021
• fasterxml jackson-databind, debian linux, netapp cloud backup +56 more +58 more Unsafe Deserialization in jackson-databind CVE-2020-36182 Fix available 8.1 HighJanuary 6, 2021
• fasterxml jackson-databind, debian linux, netapp cloud backup +42 more +44 more Unsafe Deserialization in jackson-databind CVE-2020-36183 Fix available 8.1 HighJanuary 6, 2021
• fasterxml jackson-databind, debian linux, netapp cloud backup +56 more +58 more Unsafe Deserialization in jackson-databind CVE-2020-36184 Public exploitFix available 8.1 HighJanuary 6, 2021
• fasterxml jackson-databind, debian linux, netapp cloud backup +42 more +44 more Unsafe Deserialization in jackson-databind CVE-2020-36185 Fix available 8.1 HighJanuary 6, 2021
• fasterxml jackson-databind, debian linux, netapp cloud backup +42 more +44 more Unsafe Deserialization in jackson-databind CVE-2020-36186 Fix available 8.1 HighJanuary 6, 2021
• fasterxml jackson-databind, debian linux, netapp cloud backup +42 more +44 more Unsafe Deserialization in jackson-databind CVE-2020-36187 Fix available 8.1 HighJanuary 6, 2021
• fasterxml jackson-databind, debian linux, netapp cloud backup +42 more +44 more Unsafe Deserialization in jackson-databind CVE-2020-36188 Public exploitFix available 8.1 HighJanuary 6, 2021
• fasterxml jackson-databind, debian linux, netapp cloud backup +37 more +39 more Unsafe Deserialization in jackson-databind CVE-2020-36189 Fix available 8.1 HighJanuary 6, 2021
• fasterxml jackson-databind, debian linux, netapp service level manager +55 more +57 more Unsafe Deserialization in jackson-databind CVE-2020-36181 Fix available 8.1 HighJanuary 6, 2021
• fasterxml jackson-databind, debian linux, netapp service level manager +37 more +39 more Serialization gadget exploit in jackson-databind CVE-2020-35728 Public exploitFix available EPSS 12.4% 8.1 HighDecember 27, 2020
• fasterxml jackson-databind, debian linux, netapp service level manager +22 more +24 more Serialization gadgets exploit in jackson-databind CVE-2020-35490 Fix available 8.1 HighDecember 17, 2020
• fasterxml jackson-databind, debian linux, netapp service level manager +23 more +25 more Serialization gadgets exploit in jackson-databind CVE-2020-35491 Fix available 8.1 HighDecember 17, 2020
• apache groovy, atlas, netapp snapcenter +18 more +20 more Information Disclosure in Apache Groovy CVE-2020-17521 Fix available 5.5 MediumDecember 7, 2020
• apache iotdb, fasterxml jackson-databind, fedoraproject fedora +36 more +38 more XML External Entity (XXE) Injection in Jackson Databind CVE-2020-25649 Fix available EPSS 17.7% 7.5 HighOctober 14, 2020
• fasterxml jackson-databind, debian linux, netapp active iq unified manager +22 more +24 more Code Injection in jackson-databind CVE-2020-24616 Public exploitFix available 8.1 HighAugust 25, 2020
• fasterxml jackson-databind, debian linux, netapp active iq unified manager +11 more +13 more Deserialization of untrusted data in Jackson Databind CVE-2020-14195 Public exploitFix available 8.1 HighJune 16, 2020
• fasterxml jackson-databind, netapp active iq unified manager, steelstore cloud integrated storage +9 more +11 more Deserialization of untrusted data in Jackson Databind CVE-2020-14060 Fix available 8.1 HighJune 14, 2020
• fasterxml jackson-databind, debian linux, netapp active iq unified manager +12 more +14 more Deserialization of untrusted data in Jackson Databind CVE-2020-14061 Fix available 8.1 HighJune 14, 2020
• fasterxml jackson-databind, debian linux, netapp active iq unified manager +10 more +12 more Deserialization of untrusted data in Jackson Databind CVE-2020-14062 Fix available 8.1 HighJune 14, 2020
• fasterxml jackson-databind, debian linux, netapp active iq unified manager +15 more +17 more jackson-databind mishandles the interaction between serialization gadgets and typing CVE-2020-11620 Fix available 8.1 HighApril 7, 2020
• fasterxml jackson-databind, debian linux, netapp active iq unified manager +18 more +20 more jackson-databind mishandles the interaction between serialization gadgets and typing CVE-2020-11619 Fix available 8.1 HighApril 7, 2020
• fasterxml jackson-databind, debian linux, netapp steelstore cloud integrated storage +29 more +31 more jackson-databind mishandles the interaction between serialization gadgets and typing CVE-2020-11111 Fix available 8.8 HighMarch 31, 2020
• fasterxml jackson-databind, debian linux, netapp steelstore cloud integrated storage +29 more +31 more jackson-databind mishandles the interaction between serialization gadgets and typing CVE-2020-11112 Fix available 8.8 HighMarch 31, 2020
• fasterxml jackson-databind, debian linux, netapp steelstore cloud integrated storage +30 more +32 more jackson-databind mishandles the interaction between serialization gadgets and typing CVE-2020-11113 Public exploitFix available 8.8 HighMarch 31, 2020
• fasterxml jackson-databind, debian linux, netapp steelstore cloud integrated storage +29 more +31 more jackson-databind mishandles the interaction between serialization gadgets and typing CVE-2020-10968 Fix available 8.8 HighMarch 26, 2020
• fasterxml jackson-databind, debian linux, netapp steelstore cloud integrated storage +29 more +31 more jackson-databind mishandles the interaction between serialization gadgets and typing CVE-2020-10969 Fix available 8.8 HighMarch 26, 2020
• fasterxml jackson-databind, debian linux, netapp steelstore cloud integrated storage +29 more +31 more jackson-databind mishandles the interaction between serialization gadgets and typing CVE-2020-10672 Fix available 8.8 HighMarch 18, 2020
• fasterxml jackson-databind, debian linux, netapp steelstore cloud integrated storage +29 more +31 more jackson-databind mishandles the interaction between serialization gadgets and typing CVE-2020-10673 Public exploitFix available 8.8 HighMarch 18, 2020
• fasterxml jackson-databind, debian linux, netapp active iq unified manager +28 more +30 more jackson-databind mishandles the interaction between serialization gadgets and typing CVE-2020-9546 Fix available 9.8 CriticalMarch 2, 2020
• fasterxml jackson-databind, debian linux, netapp active iq unified manager +13 more +15 more jackson-databind mishandles the interaction between serialization gadgets and typing CVE-2020-9547 Public exploitFix available EPSS 18.4% 9.8 CriticalMarch 2, 2020
• fasterxml jackson-databind, debian linux, netapp active iq unified manager +22 more +24 more jackson-databind mishandles the interaction between serialization gadgets and typing CVE-2020-9548 Public exploitFix available EPSS 18.9% 9.8 CriticalMarch 2, 2020
• fasterxml jackson-databind, debian linux, netapp active iq unified manager +27 more +29 more Deserialization of Untrusted Data in jackson-databind CVE-2019-20330 Fix available 9.8 CriticalJanuary 3, 2020
• fasterxml jackson-databind, debian linux, netapp oncommand workflow automation +19 more +21 more jackson-databind polymorphic typing issue CVE-2019-17531 Fix available 9.8 CriticalOctober 12, 2019
• fasterxml jackson-databind, debian linux, fedoraproject fedora +23 more +25 more jackson-databind polymorphic typing issue CVE-2019-16943 Fix available 9.8 CriticalOctober 1, 2019
• fasterxml jackson-databind, debian linux, fedoraproject fedora +25 more +27 more Polymorphic Typing in FasterXML jackson-databind CVE-2019-16942 Fix available 9.8 CriticalOctober 1, 2019
• apache commons beanutils, nifi, debian linux +57 more +59 more Insecure Deserialization in Apache Commons Beanutils CVE-2019-10086 Fix available EPSS 29.1% 7.3 HighAugust 20, 2019