communications messaging server vulnerabilities and exploits

(subscribe to this query)

5

CVSSv2

Unspecified vulnerability in the Oracle Communications Messaging Server component in Oracle Communications Applications 6.3, 7.0, and 8.0 allows remote malicious users to affect confidentiality via vectors related to Multiplexor.

Oracle Communications Messaging Server 6.3 Oracle Communications Messaging Server 7.0 Oracle Communications Messaging Server 8.0

4.3

CVSSv2

A carefully crafted or corrupt PSD file can cause excessive memory usage in Apache Tika's PSDParser in versions 1.0-1.23.

Apache Tika Oracle Flexcube Private Banking 12.1.0 Oracle Flexcube Private Banking 12.0.0 Debian Debian Linux 8.0 Oracle Business Process Management Suite 12.2.1.3.0 Canonical Ubuntu Linux 16.04 Oracle Business Process Management Suite 12.2.1.4.0 Oracle Communications Messaging Server 8.1 Oracle Communications Messaging Server 8.0.2

4.3

CVSSv2

A carefully crafted or corrupt PSD file can cause an infinite loop in Apache Tika's PSDParser in versions 1.0-1.23.

Apache Tika Oracle Flexcube Private Banking 12.1.0 Oracle Flexcube Private Banking 12.0.0 Debian Debian Linux 8.0 Oracle Business Process Management Suite 12.2.1.3.0 Canonical Ubuntu Linux 16.04 Oracle Business Process Management Suite 12.2.1.4.0 Oracle Communications Messaging Server 8.1 Oracle Communications Messaging Server 8.0.2

4.3

CVSSv2

By default, Apache CXF creates a /services page containing a listing of the available endpoint names and addresses. This webpage is vulnerable to a reflected Cross-Site Scripting (XSS) attack via the styleSheetPath, which allows a malicious actor to inject javascript into the web...

Apache Cxf Netapp Snap Creator Framework -Netapp Vasa Provider For Clustered Data Ontap Oracle Retail Order Broker Cloud Service 15.0 Oracle Business Intelligence 12.2.1.3.0 Oracle Business Intelligence 12.2.1.4.0 Oracle Business Intelligence 5.5.0.0.0 Oracle Communications Messaging Server 8.1 Oracle Communications Messaging Server 8.0.2 Oracle Business Intelligence 5.9.0.0.0

6.8

CVSSv2

FasterXML jackson-databind 2.x prior to 2.9.10.6 mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPDataSource (aka Anteros-DBCP).

Fasterxml Jackson-databind Netapp Active Iq Unified Manager -Oracle Application Testing Suite 13.3.0.1 Oracle Agile Plm 9.3.6 Oracle Communications Policy Management 12.5.0 Oracle Communications Diameter Signaling Router Oracle Communications Services Gatekeeper 7.0 Oracle Communications Evolved Communications Application Server 7.1 Oracle Communications Contacts Server 8.0.0.5.0 Oracle Communications Calendar Server 8.0.0.4.0 Oracle Communications Unified Inventory Management 7.4.1 Oracle Communications Cloud Native Core Unified Data Repository 1.4.0 Oracle Communications Element Manager Oracle Autovue For Agile Product Lifecycle Management 21.0.2 Oracle Communications Messaging Server 8.1 Oracle Siebel Ui Framework Oracle Banking Supply Chain Finance 14.2 Oracle Banking Supply Chain Finance 14.3 Oracle Banking Supply Chain Finance 14.5 Oracle Identity Manager Connector 11.1.1.5.0 Oracle Communications Contacts Server 8.0 Oracle Communications Calendar Server 8.0

1 Github repository

5

CVSSv2

A vulnerability in the JsonMapObjectReaderWriter of Apache CXF allows an malicious user to submit malformed JSON to a web service, which results in the thread getting stuck in an infinite loop, consuming CPU indefinitely. This issue affects Apache CXF versions before 3.4.4; Apach...

Apache Cxf Apache Tomee 8.0.6 Oracle Business Intelligence 12.2.1.3.0 Oracle Business Intelligence 12.2.1.4.0 Oracle Business Intelligence 5.5.0.0.0 Oracle Communications Messaging Server 8.1 Oracle Business Intelligence 5.9.0.0.0 Oracle Communications Element Manager 8.2.2

5

CVSSv2

An XXE issue in SAXBuilder in JDOM up to and including 2.0.6 allows malicious users to cause a denial of service via a crafted HTTP request.

Jdom Jdom Apache Solr 8.8.1 Apache Solr 8.9 Apache Tika 1.25 Debian Debian Linux 9.0 Fedoraproject Fedora 35 Oracle Communications Messaging Server 8.1

1 Github repository

6.8

CVSSv2

FasterXML jackson-databind 2.x prior to 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to org.jsecurity.realm.jndi.JndiRealmFactory (aka org.jsecurity).

Fasterxml Jackson-databind Netapp Active Iq Unified Manager Netapp Steelstore Cloud Integrated Storage -Debian Debian Linux 8.0 Oracle Agile Plm 9.3.6 Oracle Banking Digital Experience 18.1 Oracle Banking Digital Experience 18.2 Oracle Banking Digital Experience 18.3 Oracle Banking Digital Experience 19.1 Oracle Banking Digital Experience 19.2 Oracle Banking Digital Experience 20.1 Oracle Communications Calendar Server 8.0.0.4.0 Oracle Communications Contacts Server 8.0.0.5.0 Oracle Communications Diameter Signaling Router Oracle Communications Element Manager Oracle Communications Evolved Communications Application Server 7.1 Oracle Communications Instant Messaging Server 10.0.1.4.0 Oracle Communications Session Report Manager Oracle Communications Session Route Manager

6.8

CVSSv2

FasterXML jackson-databind 2.x prior to 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to oracle.jms.AQjmsQueueConnectionFactory, oracle.jms.AQjmsXATopicConnectionFactory, oracle.jms.AQjmsTopicConnectionFactory, oracle.jms.AQjmsXAQueueConnec...

Fasterxml Jackson-databind Netapp Steelstore Cloud Integrated Storage -Netapp Active Iq Unified Manager Debian Debian Linux 8.0 Oracle Agile Plm 9.3.6 Oracle Banking Digital Experience 18.2 Oracle Banking Digital Experience 18.3 Oracle Banking Digital Experience 19.1 Oracle Banking Digital Experience 18.1 Oracle Communications Instant Messaging Server 10.0.1.4.0 Oracle Communications Diameter Signaling Router Oracle Banking Digital Experience 19.2 Oracle Banking Digital Experience 20.1 Oracle Communications Evolved Communications Application Server 7.1 Oracle Communications Contacts Server 8.0.0.5.0 Oracle Communications Calendar Server 8.0.0.4.0 Oracle Communications Session Route Manager Oracle Communications Session Report Manager Oracle Communications Element Manager Oracle Autovue For Agile Product Lifecycle Management 21.0.2

6.8

CVSSv2

FasterXML jackson-databind 2.x prior to 2.9.10.6 mishandles the interaction between serialization gadgets and typing, related to com.pastdev.httpcomponents.configuration.JndiConfiguration.

Fasterxml Jackson-databind Oracle Application Testing Suite 13.3.0.1 Oracle Agile Plm 9.3.6 Oracle Communications Policy Management 12.5.0 Oracle Communications Diameter Signaling Router Oracle Communications Offline Mediation Controller 12.0.0.3.0 Oracle Communications Services Gatekeeper 7.0 Oracle Communications Contacts Server 8.0.0.5.0 Oracle Communications Calendar Server 8.0.0.4.0 Oracle Banking Credit Facilities Process Management 14.3.0 Oracle Banking Corporate Lending Process Management 14.3.0 Oracle Siebel Core - Server Framework Oracle Communications Unified Inventory Management 7.4.1 Oracle Communications Element Manager Oracle Autovue For Agile Product Lifecycle Management 21.0.2 Oracle Banking Supply Chain Finance 14.2.0 Oracle Banking Credit Facilities Process Management 14.2.0 Oracle Banking Credit Facilities Process Management 14.5.0 Oracle Banking Corporate Lending Process Management 14.2.0 Oracle Banking Corporate Lending Process Management 14.5.0 Oracle Banking Supply Chain Finance 14.5.0 Oracle Banking Supply Chain Finance 14.3.0

1 Github repository

Get Started

1 2 3 4 5 6 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook