Skip to contentOracle Communications Unified vulnerabilities
- fasterxml jackson-databind, debian linux, netapp cloud backup +42 more +44 moreUnsafe Deserialization in jackson-databindCVE-2020-36186Fix available8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +42 more +44 moreUnsafe Deserialization in jackson-databindCVE-2020-36187Fix available8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +42 more +44 moreUnsafe Deserialization in jackson-databindCVE-2020-36188Public exploitFix available8.1 High
- fasterxml jackson-databind, debian linux, netapp cloud backup +37 more +39 moreUnsafe Deserialization in jackson-databindCVE-2020-36189Fix available8.1 High
- fasterxml jackson-databind, debian linux, netapp service level manager +55 more +57 moreUnsafe Deserialization in jackson-databindCVE-2020-36181Fix available8.1 High
- fasterxml jackson-databind, debian linux, netapp service level manager +37 more +39 moreSerialization gadget exploit in jackson-databindCVE-2020-35728Public exploitFix availableEPSS 12.5%8.1 High
- fasterxml jackson-databind, debian linux, netapp service level manager +22 more +24 moreSerialization gadgets exploit in jackson-databindCVE-2020-35490Fix available8.1 High
- fasterxml jackson-databind, debian linux, netapp service level manager +23 more +25 moreSerialization gadgets exploit in jackson-databindCVE-2020-35491Fix available8.1 High
- openssl, debian linux, fedoraproject fedora +41 more +43 moreEDIPARTYNAME NULL pointer dereferenceCVE-2020-1971Public exploitFix available5.9 Medium
- apache iotdb, fasterxml jackson-databind, fedoraproject fedora +36 more +38 moreXML External Entity (XXE) Injection in Jackson DatabindCVE-2020-25649Fix availableEPSS 17.7%7.5 High
- apache ant, fedoraproject fedora, gradle +34 more +36 moreCode injection in Apache AntCVE-2020-11979Fix available7.5 High
- spring by vmware framework, vmware spring framework, netapp oncommand insight +36 more +38 moreRFD Protection Bypass via jsessionidCVE-2020-5421Public exploitFix availableEPSS 11.6%8.7 High
- fasterxml jackson-databind, debian linux, oracle agile product lifecycle management +23 more +25 moreUnsafe Deserialization in jackson-databindCVE-2020-24750Public exploitFix available8.1 High
- fasterxml jackson-databind, debian linux, netapp active iq unified manager +22 more +24 moreCode Injection in jackson-databindCVE-2020-24616Public exploitFix available8.1 High
- dom4j project dom4j, canonical ubuntu linux, netapp oncommand api services +35 more +37 moredom4j allows External Entities by default which might enable XXE attacksCVE-2020-10683Fix available9.8 Critical
- apache log4j, debian linux, oracle communications application session controller +43 more +45 moreImproper validation of certificate with host mismatch in Apache Log4j SMTP appenderCVE-2020-9488Public exploitFix available3.7 Low
- hibernate hibernate-validator, netapp active iq unified manager, element +185 more +187 moreThe SafeHtml annotation in Hibernate-Validator does not properly guard against XSS attacksCVE-2019-10219Public exploitFix available6.5 Medium
- eclipse mojarra, oracle mojarra javaserver faces, application testing suite +20 more +22 moreCross-site Scripting in Eclipse MojarraCVE-2019-17091Fix available6.1 Medium
- dell bsafe crypto-j, rsa bsafe crypto-j, bsafe cert-j +16 more +18 moreRSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to an Information Exposure Through...CVE-2019-37406.5 Medium
- dell bsafe crypto-j, rsa bsafe crypto-j, bsafe cert-j +14 more +16 moreRSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to an Improper Verification of...CVE-2019-37386.5 Medium
- apache commons beanutils, nifi, debian linux +57 more +59 moreInsecure Deserialization in Apache Commons BeanutilsCVE-2019-10086Fix availableEPSS 29.1%7.3 High
- x-stream xstream, oracle banking platform, business activity monitoring +7 more +9 moreDeserialization of Untrusted Data and Code Injection in xstreamCVE-2019-10173Fix availableEPSS 95.0%7.3 High
- backdropcms backdrop, drupal, jquery +102 more +104 moreXSS in jQuery as used in Drupal, Backdrop CMS, and other productsCVE-2019-11358Public exploitFix availableEPSS 86.8%6.1 Medium
- openssl, canonical ubuntu linux, debian linux +79 more +81 more0-byte record padding oracleCVE-2019-1559Fix availableEPSS 17.1%5.9 Medium
- pivotal spring framework, debian linux, oracle agile product lifecycle management +37 more +39 moreDoS Attack via Range RequestsCVE-2018-15756Fix available7.5 High
- pivotal spring framework, debian linux, oracle agile product lifecycle management +25 more +27 moreModerate severity vulnerability that affects org.springframework:spring-coreCVE-2018-11040Fix available7.5 High
- pivotal spring framework, debian linux, oracle agile product lifecycle management +30 more +32 moreSpring Framework Cross Site Tracing (XST)CVE-2018-11039Fix available5.9 Medium
- pivotal spring framework, oracle agile product lifecycle management, application testing suite +27 more +29 moreDenial of Service in org.springframework:spring-coreCVE-2018-1257Fix available6.5 Medium
- oracle communications unified inventory managementVulnerability in the Oracle Communications Unified Inventory Management component of Oracle...CVE-2018-25715.4 Medium
- oracle communications unified inventory managementVulnerability in the Oracle Communications Unified Inventory Management component of Oracle...CVE-2018-25706.3 Medium
- oracle communications unifiedUnspecified vulnerability in Oracle Communications Unified 7.0 allows local users to affect...CVE-2011-35743.3 Low
- oracle communications unifiedUnspecified vulnerability in Oracle Communications Unified 7.0 allows remote authenticated users...CVE-2011-35734.0 Medium
- oracle communications unifiedUnspecified vulnerability in Oracle Communications Unified 7.0 allows local users to affect...CVE-2011-35702.1 Low
- oracle communications unifiedUnspecified vulnerability in Oracle Communications Unified 7.0 allows local users to affect...CVE-2011-35654.6 Medium