Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

oracle communications brm - elastic charging engine vulnerabilities and exploits

(subscribe to this query)
4.4
CVSSv3
CVE-2023-21824
Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications Applications (component: Customer, Config, Pricing Manager). Supported versions that are affected are 12.0.0.3.0-12.0.0.7.0. Easily exploitable vulnerability allows high priv...
Oracle Communications Billing And Revenue Management Elastic Charging EngineOracle Communications Cloud Native Core Policy 22.3.0Oracle Communications Cloud Native Core Binding Support Function 22.3.0
7.5
CVSSv3
CVE-2021-43859
XStream is an open source java library to serialize objects to XML and back again. Versions before 1.4.19 may allow a remote malicious user to allocate 100% CPU time on the target system depending on CPU type or parallel execution of such a payload resulting in a denial of servic...
Xstream Project XstreamFedoraproject Fedora 34Fedoraproject Fedora 35Debian Debian Linux 9.0Oracle Flexcube Private Banking 12.1.0Oracle Commerce Guided Search 11.3.2Oracle Retail Xstore Point Of Service 16.0.6Oracle Retail Xstore Point Of Service 17.0.4Oracle Retail Xstore Point Of Service 18.0.3Oracle Retail Xstore Point Of Service 19.0.2Oracle Retail Xstore Point Of Service 20.0.1Oracle Communications Cloud Native Core Automated Test Suite 1.9.0Oracle Communications Policy Management 12.6.0.0.0Oracle Communications Diameter Intelligence HubOracle Communications Brm - Elastic Charging Engine 12.0.0.5.0Oracle Communications Brm - Elastic Charging Engine
5.9
CVSSv3
CVE-2021-38153
Some components in Apache Kafka use `Arrays.equals` to validate a password or key, which is vulnerable to timing attacks that make brute force attacks for such credentials more likely to be successful. Users should upgrade to 2.8.1 or higher, or 3.0.0 or higher where this vulnera...
Apache KafkaApache Kafka 2.8.0Quarkus QuarkusOracle Primavera Unifier 18.8Oracle Primavera Unifier 19.12Oracle Primavera Unifier 20.12Oracle Primavera Unifier 21.12Oracle Financial Services Enterprise Case Management 8.0.8.1Oracle Financial Services Enterprise Case Management 8.1.1.0Oracle Financial Services Enterprise Case Management 8.1.1.1Oracle Financial Services Behavior Detection Platform 8.1.2.0Oracle Financial Services Behavior Detection Platform 8.1.1.1Oracle Financial Services Behavior Detection Platform 8.1.1.0Oracle Financial Services Enterprise Case Management 8.0.7.1Oracle Financial Services Enterprise Case Management 8.0.8.0Oracle Financial Services Behavior Detection PlatformOracle Communications Cloud Native Core Policy 1.15.0Oracle Financial Services Enterprise Case Management 8.0.7.2Oracle Financial Services Analytical Applications InfrastructureOracle Communications Brm - Elastic Charging Engine 12.0.0.5.0Oracle Communications Brm - Elastic Charging Engine
7.5
CVSSv3
CVE-2021-37137
The Snappy frame decoder function doesn't restrict the chunk length which may lead to excessive memory usage. Beside this it also may buffer reserved skippable chunks until the whole chunk was received which may lead to excessive memory usage as well. This vulnerability can ...
Netty NettyOracle Webcenter Portal 12.2.1.3.0Oracle Peoplesoft Enterprise Peopletools 8.57Oracle Banking Digital Experience 18.2Oracle Banking Digital Experience 18.3Oracle Banking Digital Experience 19.1Oracle Banking Digital Experience 18.1Oracle Peoplesoft Enterprise Peopletools 8.58Oracle Webcenter Portal 12.2.1.4.0Oracle Banking Digital Experience 19.2Oracle Banking Digital Experience 20.1Oracle Commerce Guided Search 11.3.2Oracle Peoplesoft Enterprise Peopletools 8.59Oracle Banking Digital Experience 21.1Oracle Banking ApisOracle Banking Apis 19.1Oracle Banking Apis 19.2Oracle Banking Apis 20.1Oracle Banking Apis 21.1Oracle Communications Cloud Native Core Binding Support Function 1.10.0Oracle Communications Diameter Signaling RouterOracle Communications Brm - Elastic Charging Engine 12.0.0.5.0
7.5
CVSSv3
CVE-2020-11612
The ZlibDecoders in Netty 4.1.x prior to 4.1.46 allow for unbounded memory allocation while decoding a ZlibEncoded byte stream. An attacker could send a large ZlibEncoded byte stream to the Netty server, forcing the server to allocate all of its free memory to a single decoder.
Netty NettyDebian Debian Linux 9.0Debian Debian Linux 10.0Fedoraproject Fedora 33Netapp Oncommand Workflow Automation -Netapp Oncommand Insight -Netapp Oncommand Api Services -Oracle Webcenter Portal 12.2.1.3.0Oracle Webcenter Portal 12.2.1.4.0Oracle Nosql DatabaseOracle Communications Messaging Server 8.1Oracle Communications Design Studio 7.4.2Oracle Communications Brm - Elastic Charging Engine 12.0.0.3Oracle Communications Cloud Native Core Service Communication Proxy 1.5.2Oracle Siebel Core - Server Framework
5.5
CVSSv3
CVE-2020-17521
Apache Groovy provides extension methods to aid with creating temporary directories. Prior to this fix, Groovy's implementation of those extension methods was using a now superseded Java JDK method call that is potentially not secure on some operating systems in some context...
Apache Groovy 4.0.0Apache GroovyNetapp Snapcenter -Oracle Primavera Unifier 16.2Oracle Primavera Unifier 16.1Oracle Ilearning 6.2Oracle Business Process Management Suite 12.2.1.3.0Oracle Primavera Unifier 18.8Oracle Primavera UnifierOracle Agile Plm 9.3.3Oracle Agile Plm 9.3.6Oracle Primavera Unifier 19.12Oracle Retail Bulk Data Integration 15.0.3.0Oracle Retail Bulk Data Integration 16.0.3.0Oracle Communications Services Gatekeeper 7.0Oracle Retail Merchandising System 16.0.3Oracle Communications Evolved Communications Application Server 7.1Oracle Agile Engineering Data Management 6.2.1.0Oracle Primavera Unifier 20.12Oracle Business Process Management Suite 12.2.1.4.0Oracle Communications Services Gatekeeper 6.0Oracle Communications Services Gatekeeper 6.1
7.5
CVSSv3
CVE-2021-37136
The Bzip2 decompression decoder function doesn't allow setting size restrictions on the decompressed output data (which affects the allocation size used during decompression). All users of Bzip2Decoder are affected. The malicious input can trigger an OOME and so a DoS attack
Netty NettyQuarkus QuarkusOracle Peoplesoft Enterprise Peopletools 8.48Oracle Webcenter Portal 12.2.1.3.0Oracle Peoplesoft Enterprise Peopletools 8.57Oracle Banking Digital Experience 18.2Oracle Banking Digital Experience 18.3Oracle Banking Digital Experience 19.1Oracle Banking Digital Experience 18.1Oracle Peoplesoft Enterprise Peopletools 8.58Oracle Coherence 12.2.1.4.0Oracle Webcenter Portal 12.2.1.4.0Oracle Coherence 14.1.1.0.0Oracle Banking Digital Experience 19.2Oracle Banking Digital Experience 20.1Oracle Commerce Guided Search 11.3.2Oracle Peoplesoft Enterprise Peopletools 8.59Oracle Communications Cloud Native Core Security Edge Protection Proxy 1.7.0Oracle Banking Digital Experience 21.1Oracle Banking ApisOracle Banking Apis 19.1Oracle Banking Apis 19.2
8.8
CVSSv3
CVE-2021-29505
XStream is software for serializing Java objects to XML and back again. A vulnerability in XStream versions before 1.4.17 may allow a remote attacker has sufficient rights to execute commands of the host only by manipulating the processed input stream. No user who followed the re...
Xstream Project XstreamDebian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0Fedoraproject Fedora 33Fedoraproject Fedora 34Fedoraproject Fedora 35Netapp Snapmanager -Oracle Webcenter Portal 12.2.1.3.0Oracle Webcenter Sites 12.2.1.3.0Oracle Communications Unified Inventory Management 7.3.4Oracle Communications Unified Inventory Management 7.3.5Oracle Communications Unified Inventory Management 7.4.0Oracle Webcenter Sites 12.2.1.4.0Oracle Webcenter Portal 12.2.1.4.0Oracle Enterprise Manager Ops Center 12.4.0.0Oracle Banking Credit Facilities Process Management 14.3.0Oracle Banking Corporate Lending Process Management 14.3.0Oracle Business Activity Monitoring 12.2.1.3.0Oracle Business Activity Monitoring 11.1.1.9.0Oracle Business Activity Monitoring 12.2.1.4.0Oracle Communications Unified Inventory Management 7.4.1
5.3
CVSSv3
CVE-2020-5397
Spring Framework, versions 5.2.x before 5.2.3 are vulnerable to CSRF attacks through CORS preflight requests that target Spring MVC (spring-webmvc module) or Spring WebFlux (spring-webflux module) endpoints. Only non-authenticated endpoints are vulnerable because preflight reques...
Vmware Spring FrameworkOracle Flexcube Private Banking 12.1.0Oracle Insurance Policy Administration J2ee 10.2.0Oracle Flexcube Private Banking 12.0.0Oracle Insurance Rules Palette 10.2.0Oracle Retail Service Backbone 15.0Oracle Retail Back Office 14.1Oracle Weblogic Server 12.2.1.3.0Oracle Application Testing Suite 13.3.0.1Oracle Retail Order Broker 15.0Oracle Retail Order Broker 16.0Oracle Retail Returns Management 14.1Oracle Retail Central Office 14.1Oracle Retail Assortment Planning 15.0Oracle Retail Point-of-service 14.1Oracle Retail Assortment Planning 16.0Oracle Retail Financial Integration 15.0Oracle Retail Financial Integration 16.0Oracle Communications Policy Management 12.5.0Oracle Weblogic Server 12.2.1.4.0Oracle Rapid Planning 12.1Oracle Rapid Planning 12.2
5.5
CVSSv3
CVE-2021-21290
Netty is an open-source, asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. In Netty before version 4.1.59.Final there is a vulnerability on Unix-like systems involving an insecure temp fi...
Netty NettyDebian Debian Linux 9.0Debian Debian Linux 10.0Quarkus QuarkusOracle Banking Trade Finance Process Management 14.3.0Oracle Banking Credit Facilities Process Management 14.3.0Oracle Banking Corporate Lending Process Management 14.3.0Oracle Nosql DatabaseOracle Banking Trade Finance Process Management 14.5.0Oracle Banking Credit Facilities Process Management 14.2.0Oracle Banking Credit Facilities Process Management 14.5.0Oracle Banking Corporate Lending Process Management 14.2.0Oracle Banking Corporate Lending Process Management 14.5.0Oracle Banking Trade Finance Process Management 14.2.0Oracle Communications Messaging Server 8.1Oracle Communications Design Studio 7.4.2Oracle Communications Brm - Elastic Charging Engine 12.0.0.3Netapp Snapcenter -Netapp Active Iq Unified Manager -Netapp Cloud Secure Agent -
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-21111CVE-2024-32884IDORCVE-2023-1000CVE-2024-33260CVE-2024-3682reflected XSSrace conditionCVE-2024-3400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook