Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

oracle communications messaging server 8.1 vulnerabilities and exploits

(subscribe to this query)

5.5
CVSSv3
CVE-2020-1950
A carefully crafted or corrupt PSD file can cause excessive memory usage in Apache Tika's PSDParser in versions 1.0-1.23....
Apache TikaOracle Flexcube Private Banking 12.1.0Oracle Flexcube Private Banking 12.0.0Debian Debian Linux 8.0Oracle Business Process Management Suite 12.2.1.3.0Canonical Ubuntu Linux 16.04Oracle Business Process Management Suite 12.2.1.4.0Oracle Communications Messaging Server 8.1Oracle Communications Messaging Server 8.0.2
6.1
CVSSv3
CVE-2020-13954
By default, Apache CXF creates a /services page containing a listing of the available endpoint names and addresses. This webpage is vulnerable to a reflected Cross-Site Scripting (XSS) attack via the styleSheetPath, which allows a malicious actor to inject javascript into the...
Apache CxfNetapp Snap Creator Framework -Netapp Vasa Provider For Clustered Data OntapOracle Retail Order Broker Cloud Service 15.0Oracle Business Intelligence 12.2.1.3.0Oracle Business Intelligence 12.2.1.4.0Oracle Business Intelligence 5.5.0.0.0Oracle Communications Messaging Server 8.1Oracle Communications Messaging Server 8.0.2Oracle Business Intelligence 5.9.0.0.0
5.5
CVSSv3
CVE-2020-1951
A carefully crafted or corrupt PSD file can cause an infinite loop in Apache Tika's PSDParser in versions 1.0-1.23....
Apache TikaOracle Flexcube Private Banking 12.1.0Oracle Flexcube Private Banking 12.0.0Debian Debian Linux 8.0Oracle Business Process Management Suite 12.2.1.3.0Canonical Ubuntu Linux 16.04Oracle Business Process Management Suite 12.2.1.4.0Oracle Communications Messaging Server 8.1Oracle Communications Messaging Server 8.0.2
7.5
CVSSv3
CVE-2021-30468
A vulnerability in the JsonMapObjectReaderWriter of Apache CXF allows an attacker to submit malformed JSON to a web service, which results in the thread getting stuck in an infinite loop, consuming CPU indefinitely. This issue affects Apache CXF versions prior to 3.4.4; Apache...
Apache CxfApache Tomee 8.0.6Oracle Business Intelligence 12.2.1.3.0Oracle Business Intelligence 12.2.1.4.0Oracle Business Intelligence 5.5.0.0.0Oracle Communications Messaging Server 8.1Oracle Business Intelligence 5.9.0.0.0Oracle Communications Element Manager 8.2.2
8.1
CVSSv3
CVE-2020-24616
FasterXML jackson-databind 2.x before 2.9.10.6 mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPDataSource (aka Anteros-DBCP)....
Fasterxml Jackson-databindNetapp Active Iq Unified Manager -Oracle Application Testing Suite 13.3.0.1Oracle Agile Plm 9.3.6Oracle Communications Policy Management 12.5.0Oracle Communications Diameter Signaling RouterOracle Communications Services Gatekeeper 7.0Oracle Communications Evolved Communications Application Server 7.1Oracle Communications Contacts Server 8.0.0.5.0Oracle Communications Calendar Server 8.0.0.4.0Oracle Communications Unified Inventory Management 7.4.1Oracle Communications Cloud Native Core Unified Data Repository 1.4.0Oracle Communications Element ManagerOracle Autovue For Agile Product Lifecycle Management 21.0.2Oracle Communications Messaging Server 8.1Oracle Siebel Ui FrameworkOracle Banking Supply Chain Finance 14.2Oracle Banking Supply Chain Finance 14.3Oracle Banking Supply Chain Finance 14.5Oracle Identity Manager Connector 11.1.1.5.0Oracle Communications Contacts Server 8.0Oracle Communications Calendar Server 8.0Oracle Banking Liquidity Management 14.3Oracle Banking Liquidity Management 14.5Oracle Banking Liquidity Management 14.2Oracle Communications Session Report ManagerOracle Communications Pricing Design Center 12.0.0.4.0Oracle Communications Instant Messaging Server 10.0.1.5.0Oracle Communications Offline Mediation Controller 12.0.0.3Oracle Blockchain PlatformDebian Debian Linux 9.0
7.5
CVSSv3
CVE-2021-33813
An XXE issue in SAXBuilder in JDOM through 2.0.6 allows attackers to cause a denial of service via a crafted HTTP request....
Jdom JdomApache Solr 8.8.1Apache Solr 8.9Apache Tika 1.25Debian Debian Linux 9.0Fedoraproject Fedora 35Oracle Communications Messaging Server 8.1
7.5
CVSSv3
CVE-2020-11612
The ZlibDecoders in Netty 4.1.x before 4.1.46 allow for unbounded memory allocation while decoding a ZlibEncoded byte stream. An attacker could send a large ZlibEncoded byte stream to the Netty server, forcing the server to allocate all of its free memory to a single decoder....
Netty NettyDebian Debian Linux 9.0Debian Debian Linux 10.0Fedoraproject Fedora 33Netapp Oncommand Workflow Automation -Netapp Oncommand Insight -Netapp Oncommand Api Services -Oracle Webcenter Portal 12.2.1.3.0Oracle Webcenter Portal 12.2.1.4.0Oracle Nosql DatabaseOracle Communications Messaging Server 8.1Oracle Communications Design Studio 7.4.2Oracle Communications Brm - Elastic Charging Engine 12.0.0.3Oracle Communications Cloud Native Core Service Communication Proxy 1.5.2Oracle Siebel Core - Server Framework
5.5
CVSSv3
CVE-2021-28657
A carefully crafted or corrupt file may trigger an infinite loop in Tika's MP3Parser up to and including Tika 1.25. Apache Tika users should upgrade to 1.26 or later....
Apache TikaOracle Webcenter Portal 12.2.1.3.0Oracle Primavera Unifier 18.8Oracle Primavera UnifierOracle Primavera Unifier 19.12Oracle Webcenter Portal 12.2.1.4.0Oracle Healthcare Foundation 7.3.0Oracle Primavera Unifier 20.12Oracle Communications Messaging Server 8.1Oracle Healthcare Foundation 8.0.0Oracle Healthcare Foundation 8.1.0
8.1
CVSSv3
CVE-2020-24750
FasterXML jackson-databind 2.x before 2.9.10.6 mishandles the interaction between serialization gadgets and typing, related to com.pastdev.httpcomponents.configuration.JndiConfiguration....
Fasterxml Jackson-databindOracle Application Testing Suite 13.3.0.1Oracle Agile Plm 9.3.6Oracle Communications Policy Management 12.5.0Oracle Communications Diameter Signaling RouterOracle Communications Offline Mediation Controller 12.0.0.3.0Oracle Communications Services Gatekeeper 7.0Oracle Communications Contacts Server 8.0.0.5.0Oracle Communications Calendar Server 8.0.0.4.0Oracle Banking Credit Facilities Process Management 14.3.0Oracle Banking Corporate Lending Process Management 14.3.0Oracle Siebel Core - Server FrameworkOracle Communications Unified Inventory Management 7.4.1Oracle Communications Element ManagerOracle Autovue For Agile Product Lifecycle Management 21.0.2Oracle Banking Supply Chain Finance 14.2.0Oracle Banking Credit Facilities Process Management 14.2.0Oracle Banking Credit Facilities Process Management 14.5.0Oracle Banking Corporate Lending Process Management 14.2.0Oracle Banking Corporate Lending Process Management 14.5.0Oracle Banking Supply Chain Finance 14.5.0Oracle Banking Supply Chain Finance 14.3.0Oracle Communications Messaging Server 8.1Oracle Siebel Ui FrameworkOracle Identity Manager Connector 11.1.1.5.0Oracle Communications Contacts Server 8.0Oracle Communications Calendar Server 8.0Oracle Banking Liquidity Management 14.3Oracle Banking Liquidity Management 14.5Oracle Banking Liquidity Management 14.2Oracle Communications Session Route ManagerOracle Communications Session Report ManagerOracle Communications Pricing Design Center 12.0.0.4.0Oracle Communications Instant Messaging Server 10.0.1.5.0Oracle Blockchain PlatformDebian Debian Linux 9.0
5.5
CVSSv3
CVE-2020-9489
A carefully crafted or corrupt file may trigger a System.exit in Tika's OneNote Parser. Crafted or corrupted files can also cause out of memory errors and/or infinite loops in Tika's ICNSParser, MP3Parser, MP4Parser, SAS7BDATParser, OneNoteParser and ImageParser....
Apache Tika 1.24Oracle Flexcube Private Banking 12.1.0Oracle Primavera Unifier 16.2Oracle Flexcube Private Banking 12.0.0Oracle Primavera Unifier 16.1Oracle Webcenter Portal 12.2.1.3.0Oracle Primavera Unifier 18.8Oracle Primavera UnifierOracle Primavera Unifier 19.12Oracle Webcenter Portal 12.2.1.4.0Oracle Communications Messaging Server 8.1
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
XSSCVE-2023-48314CVE-2023-6376CVE-2023-46384arbitrary codeCVE-2023-42917CVE-2023-48842CVE-2023-42916firewall
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook