Skip to contentOracle Communications Offline Mediation Controller vulnerabilities
- apache chainsaw, log4j, apache software foundation log4j 1.x +24 more +26 moreA deserialization flaw in the Chainsaw component of Log4j 1 can lead to malicious code execution.CVE-2022-23307Fix availableEPSS 54.4%8.8 High
- apache log4j, apache software foundation log4j 1.x, broadcom brocade sannav +26 more +28 moreSQL injection in JDBC Appender in Apache Log4j V1CVE-2022-23305Public exploitFix availableEPSS 66.5%9.8 Critical
- apache log4j, apache software foundation log4j 1.x, broadcom brocade sannav +24 more +26 moreDeserialization of untrusted data in JMSSink in Apache Log4j 1.xCVE-2022-23302Fix availableEPSS 63.8%8.8 High
- apache log4j, apache software foundation log4j2, cisco cloudcenter +20 more +22 moreApache Log4j2 vulnerable to RCE via JDBC Appender when attacker controls configurationCVE-2021-44832Public exploitFix availableEPSS 97.9%6.6 Medium
- apache log4j, apache software foundation log4j 1.x, fedoraproject fedora +44 more +46 moreDeserialization of untrusted data in JMSAppender in Apache Log4j 1.2CVE-2021-4104Public exploitFix availableEPSS 80.6%7.5 High
- apache commons io, debian linux, netapp active iq unified manager +57 more +59 morePossible limited path traversal vulnerabily in Apache Commons IOCVE-2021-29425Public exploitFix availableEPSS 10.5%4.8 Medium
- openbsd openssh, fedoraproject fedora, netapp cloud backup +9 more +11 moressh-agent in OpenSSH before 8.5 has a double free that may be relevant in a few less-common...CVE-2021-28041Fix available7.1 High
- apache batik, debian linux, fedoraproject fedora +19 more +21 moreServer-side request forgery (SSRF) in Apache BatikCVE-2020-11987Fix availableEPSS 13.6%8.2 High
- python, debian linux, djangoproject django +12 more +14 moreWeb Cache PoisoningCVE-2021-23336Fix availableEPSS 41.1%5.9 Medium
- python, debian linux, fedoraproject fedora +10 more +12 morePython 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may...CVE-2021-3177Fix availableEPSS 24.0%9.8 Critical
- fasterxml jackson-databind, debian linux, netapp cloud backup +54 more +56 moreUnsafe Deserialization in jackson-databindCVE-2020-36179Public exploitFix availableEPSS 17.1%8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +56 more +58 moreUnsafe Deserialization in jackson-databindCVE-2020-36180Public exploitFix available8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +56 more +58 moreUnsafe Deserialization in jackson-databindCVE-2020-36182Fix available8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +42 more +44 moreUnsafe Deserialization in jackson-databindCVE-2020-36183Fix available8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +56 more +58 moreUnsafe Deserialization in jackson-databindCVE-2020-36184Public exploitFix available8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +42 more +44 moreUnsafe Deserialization in jackson-databindCVE-2020-36185Fix available8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +42 more +44 moreUnsafe Deserialization in jackson-databindCVE-2020-36186Fix available8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +42 more +44 moreUnsafe Deserialization in jackson-databindCVE-2020-36187Fix available8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +42 more +44 moreUnsafe Deserialization in jackson-databindCVE-2020-36188Public exploitFix available8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +37 more +39 moreUnsafe Deserialization in jackson-databindCVE-2020-36189Fix available8.1 High
- fasterxml jackson-databind, debian linux, netapp service level manager +55 more +57 moreUnsafe Deserialization in jackson-databindCVE-2020-36181Fix available8.1 High
- fasterxml jackson-databind, debian linux, netapp service level manager +22 more +24 moreSerialization gadgets exploit in jackson-databindCVE-2020-35490Fix available8.1 High
- fasterxml jackson-databind, debian linux, netapp service level manager +23 more +25 moreSerialization gadgets exploit in jackson-databindCVE-2020-35491Fix available8.1 High
- eclipse jetty, the eclipse foundation eclipse jetty, apache kafka +15 more +17 moreBuffer not correctly recycled in Gzip Request inflationCVE-2020-27218Fix available4.8 Medium
- lxml, debian linux, fedoraproject fedora +5 more +7 morelxml vulnerable to Cross-site ScriptingCVE-2020-27783Fix available6.1 Medium
- mit kerberos 5, fedoraproject fedora, netapp active iq unified manager +11 more +13 moreMIT Kerberos 5 (aka krb5) before 1.17.2 and 1.18.x before 1.18.3 allows unbounded recursion via...CVE-2020-28196Fix available7.5 High
- eclipse jetty, the eclipse foundation eclipse jetty, apache beam +16 more +18 moreEclipse Jetty XmlParser allows arbitrary DOCTYPE declarationsCVE-2020-27216Fix available7.0 High
- mozilla nss, fedoraproject fedora, mozilla network security services +4 more +6 moreA flaw was found in the way NSS handled CCS (ChangeCipherSpec) messages in TLS 1.3. This flaw...CVE-2020-25648Fix available7.5 High
- apache iotdb, fasterxml jackson-databind, fedoraproject fedora +36 more +38 moreXML External Entity (XXE) Injection in Jackson DatabindCVE-2020-25649Fix availableEPSS 17.7%7.5 High
- fasterxml jackson-databind, debian linux, oracle agile product lifecycle management +23 more +25 moreUnsafe Deserialization in jackson-databindCVE-2020-24750Public exploitFix available8.1 High
- fasterxml jackson-databind, debian linux, netapp active iq unified manager +22 more +24 moreCode Injection in jackson-databindCVE-2020-24616Public exploitFix available8.1 High
- apache batik, oracle api gateway, business intelligence +15 more +17 moreServer-side request forgery (SSRF) in Apache BatikCVE-2019-17566Fix availableEPSS 10.9%7.5 High
- perl, fedoraproject fedora, netapp oncommand workflow automation +16 more +18 moreCVE-2020-12723 does not affect BellSoft softwareCVE-2020-12723Fix available7.5 High
- perl, fedoraproject fedora, netapp oncommand workflow automation +17 more +19 moreCVE-2020-10878 does not affect BellSoft softwareCVE-2020-10878Fix available8.6 High
- perl, fedoraproject fedora, opensuse leap +15 more +17 moreCVE-2020-10543 does not affect BellSoft softwareCVE-2020-10543Fix availableEPSS 11.3%8.2 High
- apache log4j, debian linux, oracle communications application session controller +43 more +45 moreImproper validation of certificate with host mismatch in Apache Log4j SMTP appenderCVE-2020-9488Public exploitFix available3.7 Low
- hibernate hibernate-validator, netapp active iq unified manager, element +185 more +187 moreThe SafeHtml annotation in Hibernate-Validator does not properly guard against XSS attacksCVE-2019-10219Public exploitFix available6.5 Medium