Skip to contentOracle Communications Instant Messaging Server vulnerabilities
- apache chainsaw, log4j, apache software foundation log4j 1.x +24 more +26 moreA deserialization flaw in the Chainsaw component of Log4j 1 can lead to malicious code execution.CVE-2022-23307Fix availableEPSS 54.4%8.8 High
- apache log4j, apache software foundation log4j 1.x, broadcom brocade sannav +26 more +28 moreSQL injection in JDBC Appender in Apache Log4j V1CVE-2022-23305Public exploitFix availableEPSS 66.5%9.8 Critical
- apache log4j, apache software foundation log4j 1.x, broadcom brocade sannav +24 more +26 moreDeserialization of untrusted data in JMSSink in Apache Log4j 1.xCVE-2022-23302Fix availableEPSS 63.8%8.8 High
- netty, debian linux, netapp oncommand workflow automation +15 more +17 moreHTTP fails to validate against control chars in header names which may lead to HTTP request smugglingCVE-2021-43797Fix available6.5 Medium
- debian linux, netapp oncommand insight, netty +16 more +18 moreBzip2Decoder doesn't allow setting size restrictions for decompressed dataCVE-2021-37136Fix available7.5 High
- apache tomcat, tomee, debian linux +19 more +21 moreIncorrect Transfer-Encoding handling with HTTP/1.0CVE-2021-33037Fix availableEPSS 74.7%5.3 Medium
- apache tomcat, debian linux, oracle agile product lifecycle management +9 more +11 moreIncomplete fix for CVE-2020-9484CVE-2021-25329Fix available7.0 High
- apache tomcat, debian linux, oracle agile product lifecycle management +9 more +11 moreApache Tomcat h2c request mix-upCVE-2021-25122Fix availableEPSS 18.1%7.5 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +54 more +56 moreUnsafe Deserialization in jackson-databindCVE-2020-36179Public exploitFix availableEPSS 17.1%8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +56 more +58 moreUnsafe Deserialization in jackson-databindCVE-2020-36180Public exploitFix available8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +56 more +58 moreUnsafe Deserialization in jackson-databindCVE-2020-36182Fix available8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +42 more +44 moreUnsafe Deserialization in jackson-databindCVE-2020-36183Fix available8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +56 more +58 moreUnsafe Deserialization in jackson-databindCVE-2020-36184Public exploitFix available8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +42 more +44 moreUnsafe Deserialization in jackson-databindCVE-2020-36185Fix available8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +42 more +44 moreUnsafe Deserialization in jackson-databindCVE-2020-36186Fix available8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +42 more +44 moreUnsafe Deserialization in jackson-databindCVE-2020-36187Fix available8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +42 more +44 moreUnsafe Deserialization in jackson-databindCVE-2020-36188Public exploitFix available8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +37 more +39 moreUnsafe Deserialization in jackson-databindCVE-2020-36189Fix available8.1 High
- fasterxml jackson-databind, debian linux, netapp service level manager +55 more +57 moreUnsafe Deserialization in jackson-databindCVE-2020-36181Fix available8.1 High
- fasterxml jackson-databind, debian linux, netapp service level manager +22 more +24 moreSerialization gadgets exploit in jackson-databindCVE-2020-35490Fix available8.1 High
- fasterxml jackson-databind, debian linux, netapp service level manager +23 more +25 moreSerialization gadgets exploit in jackson-databindCVE-2020-35491Fix available8.1 High
- apache tomcat, debian linux, netapp element plug-in +9 more +11 moreApache Tomcat: Request header mix-up between HTTP/2 streamsCVE-2020-17527Public exploitFix availableEPSS 24.6%7.5 High
- apache iotdb, fasterxml jackson-databind, fedoraproject fedora +36 more +38 moreXML External Entity (XXE) Injection in Jackson DatabindCVE-2020-25649Fix availableEPSS 17.7%7.5 High
- fasterxml jackson-databind, debian linux, oracle agile product lifecycle management +23 more +25 moreUnsafe Deserialization in jackson-databindCVE-2020-24750Public exploitFix available8.1 High
- fasterxml jackson-databind, debian linux, netapp active iq unified manager +22 more +24 moreCode Injection in jackson-databindCVE-2020-24616Public exploitFix available8.1 High
- apache tomcat, canonical ubuntu linux, debian linux +15 more +17 moreInfinite Loop in Apache TomcatCVE-2020-13935Public exploitFix availableEPSS 86.6%7.5 High
- apache tomcat, canonical ubuntu linux, debian linux +11 more +13 moreImproper Restriction of Operations within the Bounds of a Memory Buffer in Apache TomcatCVE-2020-13934Fix availableEPSS 64.1%7.5 High
- fasterxml jackson-databind, debian linux, netapp active iq unified manager +11 more +13 moreDeserialization of untrusted data in Jackson DatabindCVE-2020-14195Public exploitFix available8.1 High
- fasterxml jackson-databind, debian linux, netapp active iq unified manager +12 more +14 moreDeserialization of untrusted data in Jackson DatabindCVE-2020-14061Fix available8.1 High
- apache tomcat, canonical ubuntu linux, debian linux +23 more +25 morePotential remote code execution in Apache TomcatCVE-2020-9484Public exploitFix availableEPSS 55.5%7.0 High
- fasterxml jackson-databind, debian linux, netapp active iq unified manager +15 more +17 morejackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-11620Fix available8.1 High
- fasterxml jackson-databind, debian linux, netapp active iq unified manager +18 more +20 morejackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-11619Fix available8.1 High
- fasterxml jackson-databind, debian linux, netapp steelstore cloud integrated storage +29 more +31 morejackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-11111Fix available8.8 High
- fasterxml jackson-databind, debian linux, netapp steelstore cloud integrated storage +29 more +31 morejackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-11112Fix available8.8 High
- fasterxml jackson-databind, debian linux, netapp steelstore cloud integrated storage +30 more +32 morejackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-11113Public exploitFix available8.8 High
- fasterxml jackson-databind, debian linux, netapp steelstore cloud integrated storage +29 more +31 morejackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-10968Fix available8.8 High
- fasterxml jackson-databind, debian linux, netapp steelstore cloud integrated storage +29 more +31 morejackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-10969Fix available8.8 High
- fasterxml jackson-databind, debian linux, netapp steelstore cloud integrated storage +29 more +31 morejackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-10672Fix available8.8 High
- fasterxml jackson-databind, debian linux, netapp steelstore cloud integrated storage +29 more +31 morejackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-10673Public exploitFix available8.8 High
- fasterxml jackson-databind, debian linux, netapp active iq unified manager +28 more +30 morejackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-9546Fix available9.8 Critical
- fasterxml jackson-databind, debian linux, netapp active iq unified manager +13 more +15 morejackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-9547Public exploitFix availableEPSS 18.4%9.8 Critical
- fasterxml jackson-databind, debian linux, netapp active iq unified manager +22 more +24 morejackson-databind mishandles the interaction between serialization gadgets and typingCVE-2020-9548Public exploitFix availableEPSS 18.9%9.8 Critical
- apache tomcat, geode, blackberry good control +18 more +20 moreImproper Privilege Management in TomcatCVE-2020-1938In KEVPublic exploitFix availableEPSS 99.3%9.8 Critical
- apache tomcat, canonical ubuntu linux, debian linux +17 more +19 morePotential HTTP request smuggling in Apache TomcatCVE-2020-1935Fix available4.8 Medium
- apache tomcat, tomee, debian linux +13 more +15 morePotential HTTP request smuggling in Apache TomcatCVE-2019-17569Fix available4.8 Medium
- fasterxml jackson-databind, debian linux, netapp active iq unified manager +27 more +29 moreDeserialization of Untrusted Data in jackson-databindCVE-2019-20330Fix available9.8 Critical
- hibernate hibernate-validator, netapp active iq unified manager, element +185 more +187 moreThe SafeHtml annotation in Hibernate-Validator does not properly guard against XSS attacksCVE-2019-10219Public exploitFix available6.5 Medium
- fasterxml jackson-databind, apache drill, debian linux +15 more +17 moreDeserialization of untrusted data in FasterXML jackson-databindCVE-2019-14439Public exploitFix availableEPSS 10.8%7.5 High
- fasterxml jackson-databind, apple xcode, debian linux +21 more +23 moreDeserialization of untrusted data in FasterXML jackson-databindCVE-2019-14379Fix available9.8 Critical
- fasterxml jackson-databind, oracle clusterware, communications instant messaging server +4 more +6 moreDeserialization of Untrusted Data in jackson-databindCVE-2018-11307Fix available9.8 Critical
- Show olderLoading…