Oracle Communications Performance Intelligence Center vulnerabilities

• apache log4j, apache software foundation log4j2, debian linux +114 more +116 more Apache Log4j2 does not always protect from infinite recursion in lookup evaluation CVE-2021-45105 Public exploitFix available EPSS 100.0% 5.9 MediumDecember 18, 2021
• sudo, beyondtrust privilege management for mac, privilege management for unix\/linux +21 more +23 more Sudo before 1.9.5p2 has a Heap-based Buffer Overflow, allowing privilege escalation to root via ... CVE-2021-3156 In KEVPublic exploitFix available EPSS 100.0% 7.8 HighJanuary 26, 2021
• perl, fedoraproject fedora, netapp oncommand workflow automation +16 more +18 more CVE-2020-12723 does not affect BellSoft software CVE-2020-12723 Fix available 7.5 HighJune 1, 2020
• perl, fedoraproject fedora, netapp oncommand workflow automation +17 more +19 more CVE-2020-10878 does not affect BellSoft software CVE-2020-10878 Fix available 8.6 HighJune 1, 2020
• perl, fedoraproject fedora, opensuse leap +15 more +17 more CVE-2020-10543 does not affect BellSoft software CVE-2020-10543 Fix available EPSS 11.3% 8.2 HighJune 1, 2020
• netkit telnet project telnet, arista eos, debian linux +3 more +5 more utility.c in telnetd in netkit telnet through 0.17 allows remote attackers to execute arbitrary... CVE-2020-10188 Fix available EPSS 74.3% 9.8 CriticalMarch 6, 2020
• apache commons beanutils, nifi, debian linux +57 more +59 more Insecure Deserialization in Apache Commons Beanutils CVE-2019-10086 Fix available EPSS 29.1% 7.3 HighAugust 20, 2019
• openssl, canonical ubuntu linux, debian linux +79 more +81 more 0-byte record padding oracle CVE-2019-1559 Fix available EPSS 17.1% 5.9 MediumFebruary 26, 2019
• pivotal spring framework, debian linux, oracle agile product lifecycle management +30 more +32 more Spring Framework Cross Site Tracing (XST) CVE-2018-11039 Fix available 5.9 MediumJune 25, 2018
• pivotal spring framework, pivotal software spring security, netapp oncommand insight +39 more +41 more Spring Framework when used in combination with any versions of Spring Security contains an authorization bypass CVE-2018-1258 Fix available 8.8 HighMay 11, 2018
• pivotal spring framework, oracle agile product lifecycle management, application testing suite +27 more +29 more Denial of Service in org.springframework:spring-core CVE-2018-1257 Fix available 6.5 MediumMay 11, 2018
• spring by pivotal framework, vmware spring framework, oracle application testing suite +17 more +19 more Spring Framework has Improperly Implemented Security Check for Standard CVE-2018-1275 Fix available EPSS 57.7% 9.8 CriticalApril 11, 2018
• spring by pivotal framework, vmware spring framework, oracle application testing suite +23 more +25 more Possible privilege escalation in org.springframework:spring-core CVE-2018-1272 Fix available 7.5 HighApril 6, 2018
• spring by pivotal framework, vmware spring framework, oracle application testing suite +26 more +28 more Path Traversal in org.springframework:spring-core CVE-2018-1271 Fix available EPSS 30.3% 5.9 MediumApril 6, 2018
• spring by pivotal framework, vmware spring framework, debian linux +26 more +28 more Spring Framework allows applications to expose STOMP over WebSocket endpoints CVE-2018-1270 Public exploitFix available EPSS 77.6% 9.8 CriticalApril 6, 2018