Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

communications interactive session recorder vulnerabilities and exploits

(subscribe to this query)
8.8
CVSSv3
CVE-2021-22112
Spring Security 5.4.x before 5.4.4, 5.3.x before 5.3.8.RELEASE, 5.2.x before 5.2.9.RELEASE, and older unsupported versions can fail to save the SecurityContext if it is changed more than once in a single request.A malicious user cannot cause the bug to happen (it must be programm...
Vmware Spring SecurityPivotal Software Spring SecurityOracle Hospitality Cruise Shipboard Property Management System 20.1.0Oracle Communications Interactive Session Recorder 6.3Oracle Communications Interactive Session Recorder 6.4Oracle Communications Unified Inventory Management 7.4.1Oracle Insurance Policy Administration 11.3.0Oracle Insurance Policy Administration 11.2.0Oracle Communications Element ManagerOracle Mysql Enterprise Monitor
8.3
CVSSv3
CVE-2021-2461
Vulnerability in the Oracle Communications Interactive Session Recorder product of Oracle Communications (component: Provision API). The supported version that is affected is 6.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to com...
Oracle Communications Interactive Session Recorder 6.4
8.1
CVSSv3
CVE-2020-36189
FasterXML jackson-databind 2.x prior to 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.DriverManagerConnectionSource.
Fasterxml Jackson-databindNetapp Cloud Backup -Netapp Service Level Manager -Debian Debian Linux 9.0Oracle Webcenter Portal 12.2.1.3.0Oracle Application Testing Suite 13.3.0.1Oracle Banking Platform 2.6.2Oracle Primavera Unifier 18.8Oracle Primavera UnifierOracle Agile Plm 9.3.6Oracle Primavera Unifier 19.12Oracle Webcenter Portal 12.2.1.4.0Oracle Communications Billing And Revenue Management 12.0.0.3.0Oracle Communications Billing And Revenue Management 7.5.0.23.0Oracle Communications Services Gatekeeper 7.0Oracle Retail Merchandising System 15.0.3Oracle Banking Platform 2.7.0Oracle Banking Platform 2.7.1Oracle Banking Platform 2.9.0Oracle Communications Evolved Communications Application Server 7.1Oracle Goldengate Application Adapters 19.1.0.0.0Oracle Retail Service Backbone 16.0.3
8.1
CVSSv3
CVE-2020-35490
FasterXML jackson-databind 2.x prior to 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.PerUserPoolDataSource.
Fasterxml Jackson-databindNetapp Service Level Manager -Debian Debian Linux 9.0Oracle Webcenter Portal 12.2.1.3.0Oracle Application Testing Suite 13.3.0.1Oracle Banking Platform 2.6.2Oracle Agile Plm 9.3.6Oracle Webcenter Portal 12.2.1.4.0Oracle Communications Services Gatekeeper 7.0Oracle Retail Merchandising System 15.0.3Oracle Banking Platform 2.7.0Oracle Banking Platform 2.7.1Oracle Banking Platform 2.9.0Oracle Communications Evolved Communications Application Server 7.1Oracle Banking Platform 2.8.0Oracle Banking Virtual Account Management 14.3.0Oracle Insurance Policy Administration J2ee 11.2.0Oracle Communications Interactive Session Recorder 6.3Oracle Communications Interactive Session Recorder 6.4Oracle Communications Diameter Signaling RouterOracle Communications Unified Inventory Management 7.4.1Oracle Retail Xstore Point Of Service 16.0.6
7.8
CVSSv3
CVE-2021-22118
In Spring Framework, versions 5.2.x before 5.2.15 and versions 5.3.x before 5.3.7, a WebFlux application is vulnerable to a privilege escalation: by (re)creating the temporary storage directory, a locally authenticated malicious user can read or modify files that have been upload...
Vmware Spring FrameworkOracle Retail Order Broker 16.0Oracle Retail Predictive Application Server 15.0.3Oracle Enterprise Data Quality 12.2.1.3.0Oracle Retail Assortment Planning 16.0Oracle Retail Financial Integration 16.0.3Oracle Communications Network Integrity 7.3.6Oracle Retail Integration Bus 16.0.3Oracle Insurance Rules Palette 11.0.2Oracle Insurance Rules Palette 11.1.0Oracle Commerce Guided Search 11.3.2Oracle Communications Element ManagerOracle Communications Interactive Session Recorder 6.4Oracle Communications Unified Inventory Management 7.4.1Oracle DocumakerOracle Enterprise Data Quality 12.2.1.4.0Oracle Healthcare Data Repository 8.1.0Oracle Insurance Policy AdministrationOracle Mysql Enterprise MonitorOracle Retail Customer Management And Segmentation FoundationOracle Communications Brm - Elastic Charging Engine 12.0.0.3Oracle Communications Session Report Manager
7.5
CVSSv3
CVE-2020-25649
A flaw was found in FasterXML Jackson Databind, where it did not have entity expansion secured properly. This flaw allows vulnerability to XML external entity (XXE) attacks. The highest threat from this vulnerability is data integrity.
Fasterxml Jackson-databindNetapp Oncommand Workflow Automation -Netapp Service Level Manager -Netapp Oncommand Api Services -Fedoraproject Fedora 32Quarkus QuarkusApache IotdbOracle Webcenter Portal 12.2.1.3.0Oracle Banking Platform 2.6.2Oracle Utilities Framework 4.3.0.5.0Oracle Utilities Framework 4.3.0.6.0Oracle Utilities Framework 4.4.0.0.0Oracle Agile Plm 9.3.6Oracle Coherence 12.2.1.4.0Oracle Webcenter Portal 12.2.1.4.0Oracle Sd-wan Edge 9.0Oracle Coherence 14.1.1.0.0Oracle Utilities Framework 4.4.0.2.0Oracle Communications Billing And Revenue Management 12.0.0.3.0Oracle Communications Billing And Revenue Management 7.5.0.23.0Oracle Communications Services Gatekeeper 7.0Oracle Banking Platform 2.7.0
6.6
CVSSv3
CVE-2021-44832
Apache Log4j2 versions 2.0-beta7 up to and including 2.17.0 (excluding security fix releases 2.3.2 and 2.12.4) are vulnerable to a remote code execution (RCE) attack when a configuration uses a JDBC Appender with a JNDI LDAP data source URI when an attacker has control of the tar...
Apache Log4j 2.0Apache Log4jOracle Weblogic Server 12.2.1.3.0Oracle Primavera Unifier 18.8Oracle Weblogic Server 12.2.1.4.0Oracle Primavera Unifier 19.12Oracle Weblogic Server 14.1.1.0.0Oracle Primavera Unifier 20.12Oracle Communications Interactive Session Recorder 6.3Oracle Communications Interactive Session Recorder 6.4Oracle Primavera GatewayOracle Retail Assortment Planning 16.0.3Oracle Primavera Unifier 21.12Oracle Primavera P6 Enterprise Project Portfolio Management 21.12.0.0Oracle Primavera P6 Enterprise Project Portfolio ManagementOracle Primavera Gateway 21.12.0Oracle Retail Fiscal Management 14.2Oracle Siebel Ui Framework 21.12Oracle Communications Diameter Signaling RouterCisco Cloudcenter 4.10.0.16Fedoraproject Fedora 34Fedoraproject Fedora 35
6.1
CVSSv3
CVE-2021-41182
jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the `altField` option of the Datepicker widget from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. Any string value passed to the `altFi...
Jqueryui Jquery UiFedoraproject Fedora 33Fedoraproject Fedora 34Fedoraproject Fedora 35Fedoraproject Fedora 36Netapp H500s Firmware -Netapp H700s Firmware -Netapp H300e Firmware -Netapp H500e Firmware -Netapp H700e Firmware -Netapp H410s Firmware -Netapp H410c Firmware -Netapp H300s Firmware -Debian Debian Linux 9.0Drupal DrupalOracle Hospitality Suite8 8.10.2Oracle Weblogic Server 12.2.1.3.0Oracle Primavera Unifier 17.7Oracle Primavera Unifier 17.8Oracle Primavera Unifier 17.9Oracle Primavera Unifier 17.10Oracle Primavera Unifier 17.11
6.1
CVSSv3
CVE-2021-41183
jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of various `*Text` options of the Datepicker widget from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. The values passed to various `*Text...
Jqueryui Jquery UiFedoraproject Fedora 33Fedoraproject Fedora 34Fedoraproject Fedora 35Fedoraproject Fedora 36Netapp H300s Firmware -Netapp H500s Firmware -Netapp H700s Firmware -Netapp H300e Firmware -Netapp H500e Firmware -Netapp H700e Firmware -Netapp H410s Firmware -Netapp H410c Firmware -Debian Debian Linux 9.0Drupal DrupalOracle Hospitality Suite8 8.10.2Oracle Weblogic Server 12.2.1.3.0Oracle Agile Plm 9.3.6Oracle Weblogic Server 12.2.1.4.0Oracle Peoplesoft Enterprise Peopletools 8.58Oracle Weblogic Server 14.1.1.0.0Oracle Banking Platform 2.9.0
6.1
CVSSv3
CVE-2021-41184
jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the `of` option of the `.position()` util from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. Any string value passed to the `of` option...
Jqueryui Jquery UiFedoraproject Fedora 33Fedoraproject Fedora 34Fedoraproject Fedora 35Fedoraproject Fedora 36Netapp H300s Firmware -Netapp H500s Firmware -Netapp H700s Firmware -Netapp H300e Firmware -Netapp H500e Firmware -Netapp H700e Firmware -Netapp H410s Firmware -Netapp H410c Firmware -Drupal DrupalTenable Tenable.scOracle Hospitality Suite8 8.10.2Oracle Weblogic Server 12.2.1.3.0Oracle Primavera Unifier 18.8Oracle Primavera UnifierOracle Hospitality Materials Control 18.1Oracle Agile Plm 9.3.6Oracle Weblogic Server 12.2.1.4.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27975CVE-2024-2961CVE-2024-20380XML injectionHTML injectionCVE-2024-29204CVE-2023-51795memory leakCVE-2024-3470
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook