Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

oracle communications element manager 8.2.2 vulnerabilities and exploits

(subscribe to this query)
3.6
CVSSv2
CVE-2021-34428
For Eclipse Jetty versions <= 9.4.40, <= 10.0.2, <= 11.0.2, if an exception is thrown from the SessionListener#sessionDestroyed() method, then the session ID is not invalidated in the session ID manager. On deployments with clustered sessions and multiple contexts this c...
Eclipse JettyDebian Debian Linux 10.0Netapp Snap Creator Framework -Netapp Santricity Cloud Connector -Netapp Snapmanager -Netapp E-series Santricity Web Services -Netapp Active Iq Unified Manager -Netapp E-series Santricity Os ControllerNetapp Element Plug-in For Vcenter Server -Oracle Communications Services Gatekeeper 7.0Oracle Autovue For Agile Product Lifecycle Management 21.0.2Oracle Siebel Core - AutomationOracle Communications Session Route ManagerOracle Communications Element Manager 8.2.2Oracle Rest Data ServicesOracle Communications Session Report Manager
5
CVSSv2
CVE-2021-30468
A vulnerability in the JsonMapObjectReaderWriter of Apache CXF allows an malicious user to submit malformed JSON to a web service, which results in the thread getting stuck in an infinite loop, consuming CPU indefinitely. This issue affects Apache CXF versions before 3.4.4; Apach...
Apache CxfApache Tomee 8.0.6Oracle Business Intelligence 12.2.1.3.0Oracle Business Intelligence 12.2.1.4.0Oracle Business Intelligence 5.5.0.0.0Oracle Communications Messaging Server 8.1Oracle Business Intelligence 5.9.0.0.0Oracle Communications Element Manager 8.2.2
5
CVSSv2
CVE-2021-22696
CXF supports (via JwtRequestCodeFilter) passing OAuth 2 parameters via a JWT token as opposed to query parameters (see: The OAuth 2.0 Authorization Framework: JWT Secured Authorization Request (JAR)). Instead of sending a JWT token as a "request" parameter, the spec als...
Apache CxfOracle Business Intelligence 12.2.1.3.0Oracle Business Intelligence 12.2.1.4.0Oracle Business Intelligence 5.5.0.0.0Oracle Communications Session Route ManagerOracle Communications Session Report ManagerOracle Business Intelligence 5.9.0.0.0Oracle Communications Element Manager 8.2.2Oracle Communications Diameter Intelligence Hub
4
CVSSv2
CVE-2021-28163
In Eclipse Jetty 9.4.32 to 9.4.38, 10.0.0.beta2 to 10.0.1, and 11.0.0.beta2 to 11.0.1, if a user uses a webapps directory that is a symlink, the contents of the webapps directory is deployed as a static webapp, inadvertently serving the webapps themselves and anything else that m...
Eclipse Jetty 11.0.0Eclipse Jetty 10.0.0Eclipse Jetty 11.0.1Eclipse Jetty 10.0.1Eclipse JettyFedoraproject Fedora 32Fedoraproject Fedora 33Fedoraproject Fedora 34Apache Solr 8.8.1Apache IgniteNetapp Santricity Cloud Connector -Netapp Snapcenter -Netapp E-series Performance Analyzer -Netapp E-series Santricity Web Services -Netapp Virtual Storage ConsoleNetapp Storage Replication Adapter For Clustered Data OntapNetapp Vasa Provider For Clustered Data OntapNetapp Cloud Manager -Netapp Snapcenter Plug-in -Netapp Element Plug-in For Vcenter Server -Netapp E-series Santricity Os ControllerOracle Banking Digital Experience 20.1
7.8
CVSSv2
CVE-2021-28165
In Eclipse Jetty 7.2.2 to 9.4.38, 10.0.0.alpha0 to 10.0.1, and 11.0.0.alpha0 to 11.0.1, CPU usage can reach 100% upon receiving a large invalid TLS frame.
Eclipse JettyOracle Communications Services Gatekeeper 7.0Oracle Autovue For Agile Product Lifecycle Management 21.0.2Oracle Siebel Core - AutomationOracle Communications Element Manager 8.2.2Oracle Communications Cloud Native Core Policy 1.14.0Oracle Communications Session Report ManagerOracle Communications Session Route ManagerOracle Rest Data ServicesJenkins JenkinsNetapp Santricity Cloud Connector -Netapp E-series Santricity Os ControllerNetapp E-series Performance AnalyzerNetapp SnapcenterNetapp E-series Santricity StorageNetapp Santricity Web Services ProxyNetapp Storage Replication Adapter For Clustered Data OntapNetapp Vasa Provider For Clustered Data OntapNetapp E-series Santricity Web ServicesNetapp Ontap ToolsNetapp Cloud Manager
4.3
CVSSv2
CVE-2019-10219
A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.
Redhat Hibernate ValidatorRedhat Hibernate Validator 6.1.0Redhat Single Sign-on -Redhat Jboss Enterprise Application Platform -Redhat Jboss Data Grid -Redhat Openshift Application Runtimes -Redhat Fuse 1.0Redhat Jboss Enterprise Application Platform 7.2Redhat Jboss Enterprise Application Platform 7.3Netapp Active Iq Unified Manager -Netapp Element -Netapp Snapcenter Plug-in -Netapp Management Services For Element Software And Netapp Hci -Oracle Flexcube Investor Servicing 12.3.0Oracle Flexcube Investor Servicing 12.1.0Oracle Solaris 11Oracle Flexcube Private Banking 12.1.0Oracle Insurance Policy Administration J2ee 10.2.0Oracle Flexcube Private Banking 12.0.0Oracle Flexcube Investor Servicing 12.0.4Oracle Weblogic Server 12.1.3.0.0Oracle Retail Integration Bus 13.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2006-4304CVE-2024-4240arbitrary CVE-2024-31601XSSCVE-2023-20198CVE-2024-4256CVE-2024-3342encryption
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook