Skip to contentOracle Communications Policy Management vulnerabilities
- vmware spring cloud function, vmware tanzu spring cloud, oracle banking branch +26 more +28 moreSpring Cloud Function Code Injection with a specially crafted SpEL as a routing expressionCVE-2022-22963In KEVPublic exploitFix availableEPSS 99.9%9.8 Critical
- vmware spring framework, cisco cx cloud agent, oracle commerce platform +35 more +37 moreRemote Code Execution in Spring FrameworkCVE-2022-22965In KEVPublic exploitFix availableEPSS 99.6%9.8 Critical
- x-stream xstream, debian linux, fedoraproject fedora +8 more +10 moreDenial of Service by injecting highly recursive collections or maps in XStreamCVE-2021-43859Fix available7.5 High
- linuxfoundation dojo, debian linux, oracle communications policy management +2 more +4 morePrototype PollutionCVE-2021-23450Fix availableEPSS 30.4%7.5 High
- mozilla nss, nss esr, netapp cloud backup +7 more +9 moreNSS (Network Security Services) versions prior to 3.73 or 3.68.1 ESR are vulnerable to a heap...CVE-2021-43527Fix availableEPSS 17.6%9.8 Critical
- apache tomcat, tomee, debian linux +19 more +21 moreIncorrect Transfer-Encoding handling with HTTP/1.0CVE-2021-33037Fix availableEPSS 74.7%5.3 Medium
- apache commons io, debian linux, netapp active iq unified manager +57 more +59 morePossible limited path traversal vulnerabily in Apache Commons IOCVE-2021-29425Public exploitFix availableEPSS 10.5%4.8 Medium
- openssl, checkpoint multi-domain management firmware, quantum security gateway firmware +103 more +105 moreNULL pointer deref in signature_algorithms processingCVE-2021-3449Public exploitFix availableEPSS 63.5%5.9 Medium
- x-stream xstream, apache activemq, jmeter +13 more +15 moreXStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-21351Fix availableEPSS 82.1%5.4 Medium
- x-stream xstream, apache activemq, jmeter +13 more +15 moreXStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-21350Fix availableEPSS 15.2%5.3 Medium
- x-stream xstream, apache activemq, jmeter +14 more +16 moreA Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local hostCVE-2021-21349Public exploitFix availableEPSS 46.8%6.1 Medium
- x-stream xstream, apache activemq, jmeter +13 more +15 moreXStream is vulnerable to an attack using Regular Expression for a Denial of Service (ReDos)CVE-2021-21348Fix availableEPSS 13.8%5.3 Medium
- x-stream xstream, apache activemq, jmeter +13 more +15 moreXStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-21347Fix availableEPSS 14.3%6.1 Medium
- x-stream xstream, apache activemq, jmeter +13 more +15 moreXStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-21346Fix availableEPSS 76.4%6.1 Medium
- x-stream xstream, apache activemq, jmeter +13 more +15 moreXStream is vulnerable to a Remote Command Execution attackCVE-2021-21345Public exploitFix availableEPSS 72.3%5.8 Medium
- x-stream xstream, apache activemq, jmeter +13 more +15 moreXStream is vulnerable to an Arbitrary Code Execution attackCVE-2021-21344Fix availableEPSS 76.0%5.3 Medium
- x-stream xstream, apache activemq, jmeter +12 more +14 moreXStream is vulnerable to an Arbitrary File Deletion on the local host when unmarshalling as long as the executing process has sufficient rightsCVE-2021-21343Fix availableEPSS 46.7%5.3 Medium
- x-stream xstream, apache activemq, jmeter +12 more +14 moreA Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local hostCVE-2021-21342Fix availableEPSS 50.0%5.3 Medium
- fasterxml jackson-databind, debian linux, netapp cloud backup +54 more +56 moreUnsafe Deserialization in jackson-databindCVE-2020-36179Public exploitFix availableEPSS 17.1%8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +56 more +58 moreUnsafe Deserialization in jackson-databindCVE-2020-36180Public exploitFix available8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +56 more +58 moreUnsafe Deserialization in jackson-databindCVE-2020-36182Fix available8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +42 more +44 moreUnsafe Deserialization in jackson-databindCVE-2020-36183Fix available8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +56 more +58 moreUnsafe Deserialization in jackson-databindCVE-2020-36184Public exploitFix available8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +42 more +44 moreUnsafe Deserialization in jackson-databindCVE-2020-36185Fix available8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +42 more +44 moreUnsafe Deserialization in jackson-databindCVE-2020-36186Fix available8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +42 more +44 moreUnsafe Deserialization in jackson-databindCVE-2020-36187Fix available8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +42 more +44 moreUnsafe Deserialization in jackson-databindCVE-2020-36188Public exploitFix available8.1 High
- fasterxml jackson-databind, debian linux, netapp service level manager +55 more +57 moreUnsafe Deserialization in jackson-databindCVE-2020-36181Fix available8.1 High
- fasterxml jackson-databind, debian linux, netapp service level manager +37 more +39 moreSerialization gadget exploit in jackson-databindCVE-2020-35728Public exploitFix availableEPSS 12.5%8.1 High
- apache struts, oracle business intelligence, communications diameter intelligence hub +5 more +7 moreRemote code execution in Apache StrutsCVE-2020-17530In KEVPublic exploitFix availableEPSS 96.3%9.8 Critical
- x-stream xstream, apache activemq, debian linux +12 more +14 moreRemote Code Execution in XStreamCVE-2020-26217Public exploitFix availableEPSS 85.0%8.0 High
- fasterxml jackson-databind, debian linux, oracle agile product lifecycle management +23 more +25 moreUnsafe Deserialization in jackson-databindCVE-2020-24750Public exploitFix available8.1 High
- apache struts, oracle communications policy management, financial services data integration hub +2 more +4 moreImproper Preservation of Permissions in Apache StrutsCVE-2019-0233Fix availableEPSS 66.1%7.5 High
- apache struts, oracle communications policy management, financial services data integration hub +2 more +4 moreImproperly Controlled Modification of Dynamically-Determined Object Attributes in Apache StrutsCVE-2019-0230Public exploitFix availableEPSS 96.9%9.8 Critical
- fasterxml jackson-databind, debian linux, netapp active iq unified manager +22 more +24 moreCode Injection in jackson-databindCVE-2020-24616Public exploitFix available8.1 High
- dojo, debian linux, oracle communications application session controller +7 more +9 morePrototype pollution in dojoCVE-2020-5258Fix available7.7 High
- spring framework, vmware spring framework, oracle application testing suite +25 more +27 moreCSRF Attack via CORS Preflight Requests with Spring MVC or Spring WebFluxCVE-2020-5397Fix available5.3 Medium
- spring framework, vmware spring framework, netapp data availability services +31 more +33 moreRFD Attack via "Content-Disposition" Header Sourced from Request Input by Spring MVC or Spring WebFlux ApplicationCVE-2020-5398Public exploitFix availableEPSS 88.3%8.0 High
- apache struts, netapp active iq unified manager, oncommand insight +5 more +7 moreApache Struts vulnerable to remote command execution (RCE) due to improper input validationCVE-2018-11776In KEVPublic exploitFix availableEPSS 100.0%8.1 High
- spring by pivotal framework, vmware spring framework, oracle application testing suite +26 more +28 morePath Traversal in org.springframework:spring-coreCVE-2018-1271Fix availableEPSS 30.3%5.9 Medium
- oracle communications policy managementVulnerability in the Oracle Communications Policy Management component of Oracle Communications...CVE-2017-101596.1 Medium
- fasterxml jackson-databind, debian linux, netapp oncommand balance +18 more +20 morejackson-databind is vulnerable to a deserialization flawCVE-2017-7525Public exploitFix availableEPSS 37.7%9.8 Critical
- oracle mysql, oracle corporation mysql server, oracle communications policy management +2 moreVulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Memcached)....CVE-2017-3633Fix available6.5 Medium
- oracle mysql, canonical ubuntu linux, debian linux +12 more +14 moreUnspecified vulnerability in Oracle MySQL Server 5.5.41 and earlier, and 5.6.22 and earlier,...CVE-2015-2568Fix available5.0 Medium
- oracle mysql, communications policy management, suse linux enterprise desktop +2 more +4 moreUnspecified vulnerability in Oracle MySQL Server 5.6.23 and earlier allows remote authenticated...CVE-2015-0500Fix available4.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +12 more +14 moreUnspecified vulnerability in Oracle MySQL Server 5.5.41 and earlier, and 5.6.22 and earlier,...CVE-2015-0433Fix available4.0 Medium
- oracle mysql, novell suse linux enterprise desktop, suse linux enterprise server +2 more +4 moreUnspecified vulnerability in Oracle MySQL Server 5.6.22 and earlier allows remote authenticated...CVE-2015-0423Fix available4.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +5 more +7 moreUnspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier, and 5.6.21 and earlier,...CVE-2015-0411Fix available7.5 High
- oracle mysql, communications policy management +1 moreUnspecified vulnerability in Oracle MySQL Server 5.6.21 and earlier allows remote authenticated...CVE-2015-0409Fix available4.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +14 more +16 moreUnspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier and 5.6.21 and earlier allows...CVE-2015-0382Fix availableEPSS 10.1%4.3 Medium
- Show olderLoading…