Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

oracle communications eagle application processor vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv2
CVE-2021-21783
A code execution vulnerability exists in the WS-Addressing plugin functionality of Genivia gSOAP 2.8.107. A specially crafted SOAP request can lead to remote code execution. An attacker can send an HTTP request to trigger this vulnerability.
Genivia Gsoap 2.8.107Oracle Communications Lsms 13.1Oracle Communications Diameter Signaling RouterOracle Tekelec Virtual Operating EnvironmentOracle Communications Lsms 13.2Oracle Communications Lsms 13.3Oracle Communications Lsms 13.4Oracle Communications Eagle Lnp Application Processor 46.7Oracle Communications Eagle Lnp Application Processor 46.8Oracle Communications Eagle Lnp Application Processor 46.9Oracle Communications Eagle Application Processor
5
CVSSv2
CVE-2020-12723
regcomp.c in Perl prior to 5.30.3 allows a buffer overflow via a crafted regular expression because of recursive S_study_chunk calls.
Perl PerlNetapp Snap Creator Framework -Netapp Oncommand Workflow Automation -Fedoraproject Fedora 31Opensuse Leap 15.1Oracle Communications Eagle Lnp Application Processor 10.1Oracle Communications Eagle Lnp Application Processor 10.2Oracle Sd-wan Edge 9.0Oracle Sd-wan Edge 8.2Oracle Enterprise Manager Base Platform 13.4.0.0Oracle Communications Billing And Revenue Management 12.0.0.3.0Oracle Communications Offline Mediation Controller 12.0.0.3.0Oracle Communications Billing And Revenue Management 12.0.0.2.0Oracle Communications Diameter Signaling RouterOracle Tekelec Platform DistributionOracle Communications LsmsOracle Configuration Manager 12.1.2.0.8Oracle Sd-wan Edge 9.1Oracle Communications Eagle Application ProcessorOracle Communications Performance Intelligence Center
6.4
CVSSv2
CVE-2020-10543
Perl prior to 5.30.3 on 32-bit platforms allows a heap-based buffer overflow because nested regular expression quantifiers have an integer overflow.
Perl PerlFedoraproject Fedora 31Opensuse Leap 15.1Oracle Communications Eagle Lnp Application Processor 10.1Oracle Communications Eagle Lnp Application Processor 10.2Oracle Sd-wan Edge 9.0Oracle Sd-wan Edge 8.2Oracle Enterprise Manager Base Platform 13.4.0.0Oracle Communications Billing And Revenue Management 12.0.0.3.0Oracle Communications Offline Mediation Controller 12.0.0.3.0Oracle Communications Billing And Revenue Management 12.0.0.2.0Oracle Communications Diameter Signaling RouterOracle Communications Pricing Design Center 12.0.0.3.0Oracle Tekelec Platform DistributionOracle Communications Eagle Lnp Application Processor 46.7Oracle Communications Eagle Lnp Application Processor 46.8Oracle Communications Eagle Lnp Application Processor 46.9Oracle Communications LsmsOracle Configuration Manager 12.1.2.0.8Oracle Sd-wan Edge 9.1Oracle Communications Eagle Application ProcessorOracle Communications Performance Intelligence Center
7.5
CVSSv2
CVE-2020-10878
Perl prior to 5.30.3 has an integer overflow related to mishandling of a "PL_regkind[OP(n)] == NOTHING" situation. A crafted regular expression could lead to malformed bytecode with a possibility of instruction injection.
Perl PerlFedoraproject Fedora 31Opensuse Leap 15.1Netapp Snap Creator Framework -Netapp Oncommand Workflow Automation -Oracle Communications Eagle Lnp Application Processor 10.1Oracle Communications Eagle Lnp Application Processor 10.2Oracle Sd-wan Aware 8.2Oracle Enterprise Manager Base Platform 13.4.0.0Oracle Communications Billing And Revenue Management 12.0.0.3.0Oracle Communications Offline Mediation Controller 12.0.0.3.0Oracle Communications Billing And Revenue Management 12.0.0.2.0Oracle Communications Diameter Signaling RouterOracle Communications Pricing Design Center 12.0.0.3.0Oracle Tekelec Platform DistributionOracle Communications Eagle Lnp Application Processor 46.7Oracle Communications Eagle Lnp Application Processor 46.8Oracle Communications Eagle Lnp Application Processor 46.9Oracle Communications LsmsOracle Configuration Manager 12.1.2.0.8Oracle Communications Eagle Application ProcessorOracle Sd-wan Aware 9.1
4.3
CVSSv2
CVE-2020-11022
In jQuery versions greater than or equal to 1.2 and prior to 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuer...
Jquery JqueryDrupal DrupalDebian Debian Linux 9.0Fedoraproject Fedora 31Fedoraproject Fedora 32Fedoraproject Fedora 33Oracle Weblogic Server 12.1.3.0.0Oracle Jdeveloper 11.1.1.9.0Oracle Retail Back Office 14.1Oracle Retail Back Office 14.0Oracle Peoplesoft Enterprise Peopletools 8.56Oracle Weblogic Server 10.3.6.0.0Oracle Communications Webrtc Session Controller 7.2Oracle Weblogic Server 12.2.1.3.0Oracle Agile Product Lifecycle Management For Process 6.2.0.0Oracle Peoplesoft Enterprise Peopletools 8.57Oracle Application Testing Suite 13.3.0.1Oracle Retail Returns Management 14.0Oracle Retail Returns Management 14.1Oracle Jdeveloper 12.2.1.3.0Oracle Policy Automation Connector For Siebel 10.4.6Oracle Financial Services Market Risk Measurement And Management 8.0.6
4.3
CVSSv2
CVE-2020-11023
In jQuery versions greater than or equal to 1.0.3 and prior to 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted c...
Jquery JqueryDebian Debian Linux 9.0Fedoraproject Fedora 31Fedoraproject Fedora 32Fedoraproject Fedora 33Drupal DrupalOracle Weblogic Server 12.1.3.0.0Oracle Hyperion Financial Reporting 11.1.2.4Oracle Weblogic Server 12.2.1.3.0Oracle Webcenter Sites 12.2.1.3.0Oracle Application Testing Suite 13.3.0.1Oracle Communications Operations Monitor 3.4Oracle Weblogic Server 12.2.1.4.0Oracle Webcenter Sites 12.2.1.4.0Oracle Weblogic Server 14.1.1.0.0Oracle Communications Interactive Session RecorderOracle Communications Element Manager 8.2.0Oracle Communications Element Manager 8.2.1Oracle Communications Element Manager 8.1.1Oracle Application ExpressOracle Rest Data Services 12.2.0.1Oracle Rest Data Services 12.1.0.2
4.3
CVSSv2
CVE-2019-10219
A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.
Redhat Hibernate ValidatorRedhat Hibernate Validator 6.1.0Redhat Single Sign-on -Redhat Jboss Enterprise Application Platform -Redhat Jboss Data Grid -Redhat Openshift Application Runtimes -Redhat Fuse 1.0Redhat Jboss Enterprise Application Platform 7.2Redhat Jboss Enterprise Application Platform 7.3Netapp Active Iq Unified Manager -Netapp Element -Netapp Snapcenter Plug-in -Netapp Management Services For Element Software And Netapp Hci -Oracle Flexcube Investor Servicing 12.3.0Oracle Flexcube Investor Servicing 12.1.0Oracle Solaris 11Oracle Flexcube Private Banking 12.1.0Oracle Insurance Policy Administration J2ee 10.2.0Oracle Flexcube Private Banking 12.0.0Oracle Flexcube Investor Servicing 12.0.4Oracle Weblogic Server 12.1.3.0.0Oracle Retail Integration Bus 13.0
4.3
CVSSv2
CVE-2019-11358
jQuery prior to 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.
Jquery JqueryDebian Debian Linux 8.0Debian Debian Linux 9.0Debian Debian Linux 10.0Drupal DrupalBackdropcms BackdropFedoraproject Fedora 28Fedoraproject Fedora 29Fedoraproject Fedora 30Opensuse Leap 15.1Opensuse Backports Sle 15.0Netapp Snapcenter -Netapp Oncommand System ManagerRedhat Cloudforms 4.7Redhat Virtualization Manager 4.3Oracle Service Bus 12.1.3.0.0Oracle Primavera Unifier 16.2Oracle Jd Edwards Enterpriseone Tools 9.2Oracle Weblogic Server 12.1.3.0.0Oracle Service Bus 11.1.1.9.0Oracle Jdeveloper 11.1.1.9.0Oracle Primavera Unifier 16.1
6.4
CVSSv2
CVE-2018-2904
Vulnerability in the Oracle Communications EAGLE LNP Application Processor component of Oracle Communications Applications (subcomponent: GUI). The supported version that is affected is 10.x. Easily exploitable vulnerability allows unauthenticated attacker with network access via...
Oracle Communications Eagle Local Number Portability Application Processor 10.1Oracle Communications Eagle Local Number Portability Application Processor 10.0
5
CVSSv2
CVE-2017-3730
In OpenSSL 1.1.0 prior to 1.1.0d, if a malicious server supplies bad parameters for a DHE or ECDHE key exchange then this can result in the client attempting to dereference a NULL pointer leading to a client crash. This could be exploited in a Denial of Service attack.
Openssl Openssl 1.1.0cOpenssl Openssl 1.1.0Openssl Openssl 1.1.0bOpenssl Openssl 1.1.0aOracle Agile Engineering Data Management 6.2.0Oracle Jd Edwards World Security A9.2Oracle Communications Eagle Lnp Application Processor 10.1Oracle Communications Application Session Controller 3.7.1Oracle Jd Edwards World Security A9.4Oracle Jd Edwards Enterpriseone Tools 9.2Oracle Communications Operations Monitor 3.4Oracle Communications Operations Monitor 4.0Oracle Agile Engineering Data Management 6.1.3Oracle Jd Edwards World Security A9.1Oracle Jd Edwards World Security A9.3Oracle Communications Eagle Lnp Application Processor 10.0Oracle Communications Eagle Lnp Application Processor 10.2Oracle Communications Application Session Controller 3.8.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322administrator privilegesCVE-2024-1579hardcodedCVE-2023-20198CVE-2024-33587CVE-2024-33449CVE-2024-4308HTML injection
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook