Oracle Communications Interactive Session Recorder vulnerabilities

• apache log4j, apache software foundation log4j2, cisco cloudcenter +20 more +22 more Apache Log4j2 vulnerable to RCE via JDBC Appender when attacker controls configuration CVE-2021-44832 Public exploitFix available EPSS 97.9% 6.6 MediumDecember 28, 2021
• apache log4j, apache software foundation log4j2, debian linux +114 more +116 more Apache Log4j2 does not always protect from infinite recursion in lookup evaluation CVE-2021-45105 Public exploitFix available EPSS 100.0% 5.9 MediumDecember 18, 2021
• jquery jquery-ui, jqueryui jquery ui, drupal +25 more +27 more XSS in the `of` option of the `.position()` util CVE-2021-41184 Public exploitFix available EPSS 40.8% 6.5 MediumOctober 26, 2021
• jquery jquery-ui, jqueryui jquery ui, debian linux +26 more +28 more XSS in `*Text` options of the Datepicker widget CVE-2021-41183 Fix available 6.5 MediumOctober 26, 2021
• jquery jquery-ui, jqueryui jquery ui, debian linux +27 more +29 more XSS in the `altField` option of the Datepicker widget CVE-2021-41182 Public exploitFix available EPSS 39.4% 6.5 MediumOctober 26, 2021
• oracle communications interactive session recorder Vulnerability in the Oracle Communications Interactive Session Recorder product of Oracle... CVE-2021-2461 8.3 HighOctober 20, 2021
• vmware spring framework, netapp hci, management services for element software +29 more +31 more Improper Privilege Management in Spring Framework CVE-2021-22118 Fix available 7.8 HighMay 27, 2021
• apache commons io, debian linux, netapp active iq unified manager +57 more +59 more Possible limited path traversal vulnerabily in Apache Commons IO CVE-2021-29425 Public exploitFix available EPSS 10.5% 4.8 MediumApril 13, 2021
• pivotal software spring security, spring security, oracle communications element manager +5 more +7 more Privilege escalation in spring security CVE-2021-22112 Fix available 8.8 HighFebruary 23, 2021
• fasterxml jackson-databind, debian linux, netapp cloud backup +37 more +39 more Unsafe Deserialization in jackson-databind CVE-2020-36189 Fix available 8.1 HighJanuary 6, 2021
• fasterxml jackson-databind, debian linux, netapp service level manager +22 more +24 more Serialization gadgets exploit in jackson-databind CVE-2020-35490 Fix available 8.1 HighDecember 17, 2020
• apache iotdb, fasterxml jackson-databind, fedoraproject fedora +36 more +38 more XML External Entity (XXE) Injection in Jackson Databind CVE-2020-25649 Fix available EPSS 17.7% 7.5 HighOctober 14, 2020
• oracle communications interactive session recorder Vulnerability in the Oracle Communications Interactive Session Recorder product of Oracle... CVE-2020-14574 4.7 MediumJuly 15, 2020
• jquery, debian linux, drupal +49 more +51 more Potential XSS vulnerability in jQuery CVE-2020-11023 In KEVPublic exploitFix available EPSS 84.9% 6.9 MediumApril 29, 2020
• hibernate hibernate-validator, netapp active iq unified manager, element +185 more +187 more The SafeHtml annotation in Hibernate-Validator does not properly guard against XSS attacks CVE-2019-10219 Public exploitFix available 6.5 MediumNovember 8, 2019
• backdropcms backdrop, drupal, jquery +102 more +104 more XSS in jQuery as used in Drupal, Backdrop CMS, and other products CVE-2019-11358 Public exploitFix available EPSS 86.8% 6.1 MediumApril 17, 2019
• jquery, oracle agile product lifecycle management for process, banking platform +44 more +46 more Cross-Site Scripting (XSS) in jquery CVE-2015-9251 Public exploitFix available EPSS 29.7% 6.1 MediumJanuary 18, 2018
• apache log4j, netapp oncommand api services, oncommand insight +76 more +78 more Deserialization of Untrusted Data in Log4j CVE-2017-5645 Public exploitFix available EPSS 89.4% 9.8 CriticalApril 17, 2017
• apache tomcat, canonical ubuntu linux, debian linux +16 more +18 more Apache Tomcat Improper Access Control vulnerability CVE-2016-8735 In KEVFix available EPSS 90.3% 9.8 CriticalNovember 24, 2016