Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

oracle communications eagle vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv2
CVE-2020-35198
An issue exists in Wind River VxWorks 7. The memory allocator has a possible integer overflow in calculating a memory block's size to be allocated by calloc(). As a result, the actual memory allocated is smaller than the buffer size specified by the arguments, leading to mem...
Windriver VxworksWindriver Vxworks 6.9.4.12Oracle Communications EagleOracle Communications Eagle 46.7.0
7.5
CVSSv2
CVE-2020-28895
In Wind River VxWorks, memory allocator has a possible overflow in calculating the memory block's size to be allocated by calloc(). As a result, the actual memory allocated is smaller than the buffer size specified by the arguments, leading to memory corruption.
Windriver VxworksWindriver Vxworks 6.9.4.12Oracle Communications EagleOracle Communications Eagle 46.7.0
7.5
CVSSv2
CVE-2021-21783
A code execution vulnerability exists in the WS-Addressing plugin functionality of Genivia gSOAP 2.8.107. A specially crafted SOAP request can lead to remote code execution. An attacker can send an HTTP request to trigger this vulnerability.
Genivia Gsoap 2.8.107Oracle Communications Lsms 13.1Oracle Communications Diameter Signaling RouterOracle Tekelec Virtual Operating EnvironmentOracle Communications Lsms 13.2Oracle Communications Lsms 13.3Oracle Communications Lsms 13.4Oracle Communications Eagle Lnp Application Processor 46.7Oracle Communications Eagle Lnp Application Processor 46.8Oracle Communications Eagle Lnp Application Processor 46.9Oracle Communications Eagle Application Processor
6.4
CVSSv2
CVE-2020-10543
Perl prior to 5.30.3 on 32-bit platforms allows a heap-based buffer overflow because nested regular expression quantifiers have an integer overflow.
Perl PerlFedoraproject Fedora 31Opensuse Leap 15.1Oracle Communications Eagle Lnp Application Processor 10.1Oracle Communications Eagle Lnp Application Processor 10.2Oracle Sd-wan Edge 9.0Oracle Sd-wan Edge 8.2Oracle Enterprise Manager Base Platform 13.4.0.0Oracle Communications Billing And Revenue Management 12.0.0.3.0Oracle Communications Offline Mediation Controller 12.0.0.3.0Oracle Communications Billing And Revenue Management 12.0.0.2.0Oracle Communications Diameter Signaling RouterOracle Communications Pricing Design Center 12.0.0.3.0Oracle Tekelec Platform DistributionOracle Communications Eagle Lnp Application Processor 46.7Oracle Communications Eagle Lnp Application Processor 46.8Oracle Communications Eagle Lnp Application Processor 46.9Oracle Communications LsmsOracle Configuration Manager 12.1.2.0.8Oracle Sd-wan Edge 9.1Oracle Communications Eagle Application ProcessorOracle Communications Performance Intelligence Center
6.4
CVSSv2
CVE-2018-2904
Vulnerability in the Oracle Communications EAGLE LNP Application Processor component of Oracle Communications Applications (subcomponent: GUI). The supported version that is affected is 10.x. Easily exploitable vulnerability allows unauthenticated attacker with network access via...
Oracle Communications Eagle Local Number Portability Application Processor 10.1Oracle Communications Eagle Local Number Portability Application Processor 10.0
7.5
CVSSv2
CVE-2020-10878
Perl prior to 5.30.3 has an integer overflow related to mishandling of a "PL_regkind[OP(n)] == NOTHING" situation. A crafted regular expression could lead to malformed bytecode with a possibility of instruction injection.
Perl PerlFedoraproject Fedora 31Opensuse Leap 15.1Netapp Snap Creator Framework -Netapp Oncommand Workflow Automation -Oracle Communications Eagle Lnp Application Processor 10.1Oracle Communications Eagle Lnp Application Processor 10.2Oracle Sd-wan Aware 8.2Oracle Enterprise Manager Base Platform 13.4.0.0Oracle Communications Billing And Revenue Management 12.0.0.3.0Oracle Communications Offline Mediation Controller 12.0.0.3.0Oracle Communications Billing And Revenue Management 12.0.0.2.0Oracle Communications Diameter Signaling RouterOracle Communications Pricing Design Center 12.0.0.3.0Oracle Tekelec Platform DistributionOracle Communications Eagle Lnp Application Processor 46.7Oracle Communications Eagle Lnp Application Processor 46.8Oracle Communications Eagle Lnp Application Processor 46.9Oracle Communications LsmsOracle Configuration Manager 12.1.2.0.8Oracle Communications Eagle Application ProcessorOracle Sd-wan Aware 9.1
5.5
CVSSv2
CVE-2016-5458
Unspecified vulnerability in the Oracle Communications EAGLE Application Processor component in Oracle Communications Applications 16.0 allows remote authenticated users to affect confidentiality and integrity via vectors related to APPL.
Oracle Communications Eagle Application Processor 16.0
5
CVSSv2
CVE-2020-12723
regcomp.c in Perl prior to 5.30.3 allows a buffer overflow via a crafted regular expression because of recursive S_study_chunk calls.
Perl PerlNetapp Snap Creator Framework -Netapp Oncommand Workflow Automation -Fedoraproject Fedora 31Opensuse Leap 15.1Oracle Communications Eagle Lnp Application Processor 10.1Oracle Communications Eagle Lnp Application Processor 10.2Oracle Sd-wan Edge 9.0Oracle Sd-wan Edge 8.2Oracle Enterprise Manager Base Platform 13.4.0.0Oracle Communications Billing And Revenue Management 12.0.0.3.0Oracle Communications Offline Mediation Controller 12.0.0.3.0Oracle Communications Billing And Revenue Management 12.0.0.2.0Oracle Communications Diameter Signaling RouterOracle Tekelec Platform DistributionOracle Communications LsmsOracle Configuration Manager 12.1.2.0.8Oracle Sd-wan Edge 9.1Oracle Communications Eagle Application ProcessorOracle Communications Performance Intelligence Center
4.3
CVSSv2
CVE-2020-11023
In jQuery versions greater than or equal to 1.0.3 and prior to 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted c...
Jquery JqueryDebian Debian Linux 9.0Fedoraproject Fedora 31Fedoraproject Fedora 32Fedoraproject Fedora 33Drupal DrupalOracle Weblogic Server 12.1.3.0.0Oracle Hyperion Financial Reporting 11.1.2.4Oracle Weblogic Server 12.2.1.3.0Oracle Webcenter Sites 12.2.1.3.0Oracle Application Testing Suite 13.3.0.1Oracle Communications Operations Monitor 3.4Oracle Weblogic Server 12.2.1.4.0Oracle Webcenter Sites 12.2.1.4.0Oracle Weblogic Server 14.1.1.0.0Oracle Communications Interactive Session RecorderOracle Communications Element Manager 8.2.0Oracle Communications Element Manager 8.2.1Oracle Communications Element Manager 8.1.1Oracle Application ExpressOracle Rest Data Services 12.2.0.1Oracle Rest Data Services 12.1.0.2
9
CVSSv2
CVE-2022-23307
CVE-2020-9493 identified a deserialization issue that was present in Apache Chainsaw. Prior to Chainsaw V2.0 Chainsaw was a component of Apache Log4j 1.2.x where the same issue exists.
Apache ChainsawApache Log4jQos Reload4jOracle Weblogic Server 12.2.1.3.0Oracle Business Intelligence 12.2.1.3.0Oracle Business Process Management Suite 12.2.1.3.0Oracle Jdeveloper 12.2.1.3.0Oracle Identity Management Suite 12.2.1.3.0Oracle Business Intelligence 12.2.1.4.0Oracle Weblogic Server 12.2.1.4.0Oracle Weblogic Server 14.1.1.0.0Oracle Enterprise Manager Base Platform 13.4.0.0Oracle Communications Network Integrity 7.3.6Oracle Business Process Management Suite 12.2.1.4.0Oracle Advanced Supply Chain Planning 12.2Oracle Advanced Supply Chain Planning 12.1Oracle Communications Unified Inventory Management 7.4.1Oracle Enterprise Manager Base Platform 13.5.0.0Oracle Communications Messaging Server 8.1Oracle Business Intelligence 5.9.0.0.0Oracle Healthcare Foundation 8.1.0Oracle Communications Eagle Ftp Table Base Retrieval 4.5
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook