Oracle Communications Messaging Server vulnerabilities

• apache chainsaw, log4j, apache software foundation log4j 1.x +24 more +26 more A deserialization flaw in the Chainsaw component of Log4j 1 can lead to malicious code execution. CVE-2022-23307 Fix available EPSS 54.4% 8.8 HighJanuary 18, 2022
• apache log4j, apache software foundation log4j 1.x, broadcom brocade sannav +26 more +28 more SQL injection in JDBC Appender in Apache Log4j V1 CVE-2022-23305 Public exploitFix available EPSS 66.5% 9.8 CriticalJanuary 18, 2022
• apache log4j, apache software foundation log4j 1.x, broadcom brocade sannav +24 more +26 more Deserialization of untrusted data in JMSSink in Apache Log4j 1.x CVE-2022-23302 Fix available EPSS 63.8% 8.8 HighJanuary 18, 2022
• apache log4j, apache software foundation log4j2, debian linux +114 more +116 more Apache Log4j2 does not always protect from infinite recursion in lookup evaluation CVE-2021-45105 Public exploitFix available EPSS 100.0% 5.9 MediumDecember 18, 2021
• apache log4j, apache software foundation log4j 1.x, fedoraproject fedora +44 more +46 more Deserialization of untrusted data in JMSAppender in Apache Log4j 1.2 CVE-2021-4104 Public exploitFix available EPSS 80.6% 7.5 HighDecember 14, 2021
• apache software foundation santuario, apache cxf, santuario xml security for java +16 more +18 more Bypass of the secureValidation property CVE-2021-40690 Fix available 7.5 HighSeptember 19, 2021
• jhy jsoup, netapp management services for element software and netapp hci, oracle banking trade finance +13 more +15 more Crafted input may cause the jsoup HTML and XML parser to get stuck, timeout, or throw unchecked exceptions CVE-2021-37714 Fix available 7.5 HighAugust 18, 2021
• apache commons compress, netapp active iq unified manager, oncommand insight +31 more +33 more Apache Commons Compress 1.0 to 1.20 denial of service vulnerability CVE-2021-36090 Fix available EPSS 12.9% 7.5 HighJuly 13, 2021
• apache commons compress, netapp active iq unified manager, oncommand insight +24 more +26 more Apache Commons Compress 1.1 to 1.20 denial of service vulnerability CVE-2021-35517 Fix available EPSS 10.6% 7.5 HighJuly 13, 2021
• apache commons compress, netapp active iq unified manager, oncommand insight +21 more +23 more Apache Commons Compress 1.6 to 1.20 denial of service vulnerability CVE-2021-35516 Fix available EPSS 12.4% 7.5 HighJuly 13, 2021
• apache commons compress, netapp active iq unified manager, oncommand insight +23 more +25 more Apache Commons Compress 1.6 to 1.20 denial of service vulnerability CVE-2021-35515 Fix available EPSS 11.6% 7.5 HighJuly 13, 2021
• apache cxf, tomee, oracle business intelligence +2 more +4 more Apache CXF Denial of service vulnerability in parsing JSON via JsonMapObjectReaderWriter CVE-2021-30468 Fix available 7.5 HighJune 16, 2021
• jdom, apache solr, tika +3 more +5 more XML External Entity (XXE) Injection in JDOM CVE-2021-33813 Fix available EPSS 19.4% 7.5 HighJune 16, 2021
• apache pdfbox, fedoraproject fedora, oracle banking corporate lending process management +4 more +6 more A carefully crafted PDF file can trigger an infinite loop while loading the file CVE-2021-31812 Fix available 5.5 MediumJune 12, 2021
• apache pdfbox, fedoraproject fedora, oracle banking corporate lending process management +9 more +11 more A carefully crafted PDF file can trigger an OutOfMemory-Exception while loading a tiny file CVE-2021-31811 Fix available 5.5 MediumJune 12, 2021
• apache tika, oracle communications messaging server, healthcare foundation +2 more +4 more Infinite loop in Apache Tika's MP3 parser CVE-2021-28657 Fix available 5.5 MediumMarch 31, 2021
• netty, debian linux, netapp oncommand api services +15 more +17 more Possible request smuggling in HTTP/2 due missing validation of content-length CVE-2021-21409 Fix available 5.9 MediumMarch 30, 2021
• apache pdfbox, fedoraproject fedora, oracle banking corporate lending process management +16 more +18 more A carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file CVE-2021-27906 Fix available 5.5 MediumMarch 19, 2021
• apache pdfbox, fedoraproject fedora, oracle banking trade finance process management +12 more +14 more A carefully crafted PDF file can trigger an infinite loop while loading the file CVE-2021-27807 Fix available 5.5 MediumMarch 19, 2021
• netty, debian linux, netapp active iq unified manager +10 more +12 more Local Information Disclosure Vulnerability in Netty on Unix-Like systems due temporary files CVE-2021-21290 Fix available 6.2 MediumFebruary 8, 2021
• fasterxml jackson-databind, debian linux, netapp cloud backup +37 more +39 more Unsafe Deserialization in jackson-databind CVE-2020-36189 Fix available 8.1 HighJanuary 6, 2021
• apache karaf, bouncycastle bc-java, oracle banking corporate lending process management +17 more +19 more Logic error in Legion of the Bouncy Castle BC Java CVE-2020-28052 Public exploitFix available 8.1 HighDecember 18, 2020
• apache cxf, netapp snap creator framework, vasa provider for clustered data ontap +3 more +5 more Apache CXF Reflected XSS in the services listing page via the styleSheetPath CVE-2020-13954 Fix available EPSS 40.9% 6.1 MediumNovember 12, 2020
• apache iotdb, fasterxml jackson-databind, fedoraproject fedora +36 more +38 more XML External Entity (XXE) Injection in Jackson Databind CVE-2020-25649 Fix available EPSS 17.7% 7.5 HighOctober 14, 2020
• fasterxml jackson-databind, debian linux, oracle agile product lifecycle management +23 more +25 more Unsafe Deserialization in jackson-databind CVE-2020-24750 Public exploitFix available 8.1 HighSeptember 17, 2020
• fasterxml jackson-databind, debian linux, netapp active iq unified manager +22 more +24 more Code Injection in jackson-databind CVE-2020-24616 Public exploitFix available 8.1 HighAugust 25, 2020
• sqlite, apple icloud, ipados +16 more +18 more In SQLite before 3.32.3, select.c mishandles query-flattener optimization, leading to a... CVE-2020-15358 Fix available 5.5 MediumJune 27, 2020
• sqlite, debian linux, fedoraproject fedora +12 more +14 more SQLite 3.32.2 has a use-after-free in resetAccumulator in select.c because the parse tree rewrite... CVE-2020-13871 Fix available 7.5 HighJune 6, 2020
• apache tika, the apache software foundation apache tika, oracle communications messaging server +3 more +5 more Missing Release of Memory after Effective Lifetime in Apache Tika CVE-2020-9489 Fix available 5.5 MediumApril 27, 2020
• sqlite, canonical ubuntu linux, debian linux +18 more +20 more SQLite through 3.31.1 allows attackers to cause a denial of service (segmentation fault) via a... CVE-2020-11655 Fix available 7.5 HighApril 9, 2020
• sqlite, netapp ontap select deploy administration utility, oracle communications messaging server +12 more +14 more In SQLite through 3.31.1, the ALTER TABLE implementation has a use-after-free, as demonstrated by... CVE-2020-11656 Fix available 9.8 CriticalApril 9, 2020
• netty, debian linux, fedoraproject fedora +10 more +12 more Denial of Service in Netty CVE-2020-11612 Fix available 7.5 HighApril 7, 2020
• apache tika, canonical ubuntu linux, debian linux +3 more +5 more Infinite Loop in Apache Tika CVE-2020-1951 Fix available 5.5 MediumMarch 23, 2020
• apache tika, canonical ubuntu linux, debian linux +3 more +5 more Uncontrolled Resource Consumption in Apache Tika CVE-2020-1950 Fix available 5.5 MediumMarch 23, 2020
• sqlite, canonical ubuntu linux, netapp cloud backup +11 more +13 more In SQLite 3.31.1, isAuxiliaryVtabOperator allows attackers to trigger a NULL pointer dereference... CVE-2020-9327 Fix available 7.5 HighFebruary 21, 2020
• hibernate hibernate-validator, netapp active iq unified manager, element +185 more +187 more The SafeHtml annotation in Hibernate-Validator does not properly guard against XSS attacks CVE-2019-10219 Public exploitFix available 6.5 MediumNovember 8, 2019
• apache pdfbox, james, fedoraproject fedora +11 more +13 more Vulnerability that affects org.apache.pdfbox:pdfbox CVE-2019-0228 Fix available 9.8 CriticalApril 17, 2019
• apache log4j, netapp oncommand api services, oncommand insight +76 more +78 more Deserialization of Untrusted Data in Log4j CVE-2017-5645 Public exploitFix available EPSS 89.4% 9.8 CriticalApril 17, 2017
• oracle communications messaging server Unspecified vulnerability in the Oracle Communications Messaging Server component in Oracle... CVE-2016-5455 5.3 MediumJuly 21, 2016
• google chrome, icu-project international components for unicode, canonical ubuntu linux +6 more +8 more The Regular Expressions package in International Components for Unicode (ICU) 52 before SVN... CVE-2014-7926 Fix available 7.5 HighJanuary 22, 2015
• google chrome, icu-project international components for unicode, canonical ubuntu linux +6 more +8 more The Regular Expressions package in International Components for Unicode (ICU) 52 before SVN... CVE-2014-7923 Fix available 7.5 HighJanuary 22, 2015