Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

oracle communications session route manager 8.1.1 vulnerabilities and exploits

(subscribe to this query)

6.1
CVSSv3
CVE-2020-1941
In Apache ActiveMQ 5.0.0 to 5.15.11, the webconsole admin GUI is open to XSS, in the view that lists the contents of a queue....
Apache ActivemqOracle Flexcube Private Banking 12.1.0Oracle Flexcube Private Banking 12.0.0Oracle Enterprise Repository 11.1.1.7.0Oracle Communications Element Manager 8.2.0Oracle Communications Element Manager 8.2.1Oracle Communications Element Manager 8.1.1Oracle Communications Diameter Signaling RouterOracle Communications Session Report Manager 8.1.1Oracle Communications Session Report Manager 8.2.0Oracle Communications Session Report Manager 8.2.1Oracle Communications Session Route Manager 8.1.1Oracle Communications Session Route Manager 8.2.0Oracle Communications Session Route Manager 8.2.1
6.1
CVSSv3
CVE-2019-17573
By default, Apache CXF creates a /services page containing a listing of the available endpoint names and addresses. This webpage is vulnerable to a reflected Cross-Site Scripting (XSS) attack, which allows a malicious actor to inject javascript into the web page. Please note...
Apache CxfOracle Flexcube Private Banking 12.1.0Oracle Flexcube Private Banking 12.0.0Oracle Retail Order Broker 15.0Oracle Communications Element Manager 8.2.0Oracle Communications Element Manager 8.2.1Oracle Communications Element Manager 8.1.1Oracle Communications Session Report Manager 8.1.1Oracle Communications Session Report Manager 8.2.0Oracle Communications Session Report Manager 8.2.1Oracle Communications Session Route Manager 8.1.1Oracle Communications Session Route Manager 8.2.0Oracle Communications Session Route Manager 8.2.1Oracle Commerce Guided Search 11.3.2
7.5
CVSSv3
CVE-2019-12423
Apache CXF ships with a OpenId Connect JWK Keys service, which allows a client to obtain the public keys in JWK format, which can then be used to verify the signature of tokens issued by the service. Typically, the service obtains the public key from a local keystore...
Apache CxfOracle Flexcube Private Banking 12.1.0Oracle Flexcube Private Banking 12.0.0Oracle Retail Order Broker 15.0Oracle Communications Diameter Signaling RouterOracle Communications Session Route Manager 8.1.1Oracle Communications Session Route Manager 8.2.0Oracle Communications Session Route Manager 8.2.1Oracle Communications Session Report ManagerOracle Communications Element ManagerOracle Commerce Guided Search 11.3.2
7.2
CVSSv3
CVE-2019-10097
In Apache HTTP Server 2.4.32-2.4.39, when mod_remoteip was configured to use a trusted intermediary proxy server using the "PROXY" protocol, a specially crafted PROXY header could trigger a stack buffer overflow or NULL pointer deference. This vulnerability could only...
Apache Http Server 2.4.33Apache Http Server 2.4.37Apache Http Server 2.4.38Apache Http Server 2.4.34Apache Http Server 2.4.35Oracle Retail Xstore Point Of Service 7.1Oracle Enterprise Manager Ops Center 12.3.3Oracle Enterprise Manager Ops Center 12.4.0Oracle Instantis EnterprisetrackOracle Communications Element Manager 8.2.0Oracle Communications Element Manager 8.1.1Oracle Communications Element Manager 8.1.0Oracle Communications Element Manager 8.0.0Oracle Http Server 12.2.1.4.0Oracle Communications Session Report Manager 8.1.1Oracle Communications Session Report Manager 8.2.0Oracle Communications Session Report Manager 8.2.1Oracle Communications Session Route Manager 8.1.1Oracle Communications Session Route Manager 8.2.0Oracle Communications Session Route Manager 8.2.1
5.3
CVSSv3
CVE-2020-1934
In Apache HTTP Server 2.4.0 to 2.4.41, mod_proxy_ftp may use uninitialized memory when proxying to a malicious FTP server....
Apache Http ServerFedoraproject Fedora 31Fedoraproject Fedora 32Debian Debian Linux 9.0Debian Debian Linux 10.0Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 20.04Canonical Ubuntu Linux 16.04Opensuse Leap 15.1Oracle Instantis EnterprisetrackOracle Communications Element Manager 8.2.0Oracle Communications Element Manager 8.2.1Oracle Communications Element Manager 8.1.1Oracle Enterprise Manager Ops Center 12.4.0.0Oracle Communications Session Report Manager 8.1.1Oracle Communications Session Report Manager 8.2.0Oracle Communications Session Report Manager 8.2.1Oracle Communications Session Route Manager 8.1.1Oracle Communications Session Route Manager 8.2.0Oracle Communications Session Route Manager 8.2.1Oracle Zfs Storage Appliance Kit 8.8
6.1
CVSSv3
CVE-2020-1927
In Apache HTTP Server 2.4.0 to 2.4.41, redirects configured with mod_rewrite that were intended to be self-referential might be fooled by encoded newlines and redirect instead to an an unexpected URL within the request URL....
Apache Http ServerFedoraproject Fedora 31Fedoraproject Fedora 32Debian Debian Linux 9.0Debian Debian Linux 10.0Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 20.04Canonical Ubuntu Linux 16.04Opensuse Leap 15.1Netapp Oncommand Unified Manager Core Package -Broadcom Brocade Fabric Operating System -Oracle Sd-wan Aware 8.2Oracle Instantis EnterprisetrackOracle Communications Element Manager 8.2.0Oracle Communications Element Manager 8.2.1Oracle Communications Element Manager 8.1.1Oracle Enterprise Manager Ops Center 12.4.0.0Oracle Communications Session Report Manager 8.1.1Oracle Communications Session Report Manager 8.2.0Oracle Communications Session Report Manager 8.2.1Oracle Communications Session Route Manager 8.1.1Oracle Communications Session Route Manager 8.2.0Oracle Communications Session Route Manager 8.2.1Oracle Zfs Storage Appliance Kit 8.8
4.2
CVSSv3
CVE-2019-0197
A vulnerability was found in Apache HTTP Server 2.4.34 to 2.4.38. When HTTP/2 was enabled for a http: host or H2Upgrade was enabled for h2 on a https: host, an Upgrade request from http/1.1 to http/2 that was not the first request on a connection could lead to a misconfiguration...
Apache Http ServerCanonical Ubuntu Linux 18.04Canonical Ubuntu Linux 19.04Canonical Ubuntu Linux 16.04Fedoraproject Fedora 30Opensuse Leap 42.3Opensuse Leap 15.0Redhat Jboss Core Services 1.0Oracle Retail Xstore Point Of Service 7.1Oracle Retail Xstore Point Of Service 7.0Oracle Http Server 12.2.1.3.0Oracle Enterprise Manager Ops Center 12.3.3Oracle Instantis Enterprisetrack 17.1Oracle Instantis Enterprisetrack 17.2Oracle Instantis Enterprisetrack 17.3Oracle Enterprise Manager Ops Center 12.4.0Oracle Communications Session Report Manager 8.1.1Oracle Communications Session Report Manager 8.2.0Oracle Communications Session Route Manager 8.1.1Oracle Communications Session Route Manager 8.2.0Oracle Communications Session Route Manager 8.0.0Oracle Communications Session Route Manager 8.1.0Oracle Communications Session Report Manager 8.0.0Oracle Communications Session Report Manager 8.1.0
5.3
CVSSv3
CVE-2019-10246
In Eclipse Jetty version 9.2.27, 9.3.26, and 9.4.16, the server running on Windows is vulnerable to exposure of the fully qualified Base Resource directory name on Windows to a remote client when it is configured for showing a Listing of directory contents. This information...
Eclipse Jetty 9.2.27Eclipse Jetty 9.3.26Eclipse Jetty 9.4.16Netapp Snap Creator Framework -Netapp Snapcenter -Netapp Oncommand System ManagerNetapp Snapmanager -Netapp Storage Services Connector -Netapp Virtual Storage ConsoleNetapp Virtual Storage Console 9.6Netapp Storage Replication Adapter For Clustered Data OntapNetapp Storage Replication Adapter For Clustered Data Ontap 9.6Netapp Vasa Provider For Clustered Data OntapNetapp Vasa Provider For Clustered Data Ontap -Netapp Element -Oracle Retail Xstore Point Of Service 15.0Oracle Flexcube Private Banking 12.1.0Oracle Retail Xstore Point Of Service 7.1Oracle Flexcube Private Banking 12.0.0Oracle Flexcube Core Banking 5.2.0Oracle Hospitality Guest Access 4.2.0Oracle Hospitality Guest Access 4.2.1Oracle Retail Xstore Point Of Service 16.0Oracle Endeca Information Discovery Integrator 3.2.0Oracle Enterprise Manager Base Platform 13.3Oracle Enterprise Manager Base Platform 13.2Oracle Data Integrator 12.2.1.3.0Oracle Unified Directory 12.2.1.3.0Oracle Unified Directory 12.2.1.4.0Oracle Communications Element Manager 8.2.0Oracle Communications Element Manager 8.1.1Oracle Retail Xstore Point Of Service 17.0Oracle Communications Element Manager 8.1.0Oracle Communications Element Manager 8.0.0Oracle Rest Data Services 12.2.0.1Oracle Rest Data Services 12.1.0.2Oracle Rest Data Services 11.2.0.4Oracle Rest Data Services 18cOracle Flexcube Core BankingOracle Communications Services Gatekeeper 7.0Oracle Data Integrator 12.2.1.4.0Oracle Communications Session Report Manager 8.1.1Oracle Communications Session Report Manager 8.2.0Oracle Communications Session Route Manager 8.1.1Oracle Communications Session Route Manager 8.2.0Oracle Communications Analytics 12.1.1Oracle Communications Session Route Manager 8.0.0Oracle Communications Session Route Manager 8.1.0Oracle Communications Session Report Manager 8.0.0Oracle Communications Session Report Manager 8.1.0Oracle Autovue 21.0.2Oracle Communications Services Gatekeeper 6.0Oracle Communications Services Gatekeeper 6.1
6.1
CVSSv3
CVE-2020-11023
In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted...
Jquery JqueryDebian Debian Linux 9.0Fedoraproject Fedora 31Fedoraproject Fedora 32Fedoraproject Fedora 33Drupal DrupalOracle Weblogic Server 12.1.3.0.0Oracle Hyperion Financial Reporting 11.1.2.4Oracle Weblogic Server 12.2.1.3.0Oracle Webcenter Sites 12.2.1.3.0Oracle Application Testing Suite 13.3.0.1Oracle Communications Operations Monitor 3.4Oracle Weblogic Server 12.2.1.4.0Oracle Webcenter Sites 12.2.1.4.0Oracle Weblogic Server 14.1.1.0.0Oracle Communications Interactive Session RecorderOracle Communications Element Manager 8.2.0Oracle Communications Element Manager 8.2.1Oracle Communications Element Manager 8.1.1Oracle Application ExpressOracle Rest Data Services 12.2.0.1Oracle Rest Data Services 12.1.0.2Oracle Rest Data Services 11.2.0.4Oracle Rest Data Services 18cOracle Rest Data Services 19cOracle Communications Services Gatekeeper 7.0Oracle Storagetek Tape Analytics Sw Tool 2.3.1Oracle Communications Session Report Manager 8.1.1Oracle Communications Session Report Manager 8.2.0Oracle Communications Session Report Manager 8.2.1Oracle Communications Session Route Manager 8.1.1Oracle Communications Session Route Manager 8.2.0Oracle Communications Session Route Manager 8.2.1Oracle Primavera GatewayOracle Siebel MobileOracle Peoplesoft Enterprise Human Capital Management Resources 9.2Oracle Financial Services Regulatory Reporting For De Nederlandsche Bank 8.0.4Oracle Jd Edwards Enterpriseone ToolsOracle Banking Enterprise CollectionsOracle Jd Edwards Enterpriseone OrchestratorOracle Banking PlatformOracle Communications Operations MonitorOracle Communications Analytics 12.1.1Oracle Healthcare Translational Research 3.3.1Oracle Healthcare Translational Research 3.3.2Oracle Healthcare Translational Research 3.4.0Oracle Healthcare Translational Research 3.2.1Oracle Oss Support ToolsOracle Financial Services Revenue Management And Billing Analytics 2.7Oracle Financial Services Revenue Management And Billing Analytics 2.8Oracle Health Sciences Inform 6.3.0Oracle Business Intelligence 5.9.0.0.0Oracle Communications Eagle Application ProcessorOracle Storagetek Acsls 8.5.1Netapp H300s Firmware -Netapp H500s Firmware -Netapp H700s Firmware -Netapp H300e Firmware -Netapp H500e Firmware -Netapp H700e Firmware -Netapp H410s Firmware -Netapp H410c Firmware -Netapp Snap Creator Framework -Netapp Snapcenter Server -Netapp Oncommand Insight -Netapp Oncommand System ManagerNetapp Max Data -Tenable Log Correlation Engine
7.5
CVSSv3
CVE-2019-0227
A Server Side Request Forgery (SSRF) vulnerability affected the Apache Axis 1.4 distribution that was last released in 2006. Security and bug commits commits continue in the projects Axis 1.x Subversion repository, legacy users are encouraged to build from source. The successor...
Apache Axis 1.4Oracle Agile Product Lifecycle Management Framework 9.3.3Oracle Flexcube Private Banking 12.1.0Oracle Primavera Unifier 16.2Oracle Peoplesoft Enterprise Human Capital Management Human Resources 9.2Oracle Retail Xstore Point Of Service 7.1Oracle Enterprise Manager Base Platform 12.1.0.5Oracle Flexcube Private Banking 12.0.0Oracle Primavera Unifier 16.1Oracle Peoplesoft Enterprise Peopletools 8.56Oracle Hospitality Guest Access 4.2.0Oracle Hospitality Guest Access 4.2.1Oracle Tuxedo 12.1.3Oracle Internet Directory 12.2.1.3.0Oracle Webcenter Portal 12.2.1.3.0Oracle Communications Order And Service Management 7.3.0.0.0Oracle Flexcube Core Banking 11.7.0Oracle Peoplesoft Enterprise Peopletools 8.57Oracle Application Testing Suite 13.2.0.1Oracle Application Testing Suite 13.3.0.1Oracle Secure Global Desktop 5.4Oracle Retail Order Broker 15.0Oracle Retail Order Broker 16.0Oracle Primavera Unifier 18.8Oracle Enterprise Manager For Fusion Middleware 12.1.0.5Oracle Policy Automation Connector For Siebel 10.4.6Oracle Primavera UnifierOracle Financial Services Analytical Applications InfrastructureOracle Endeca Information Discovery Studio 3.2.0Oracle Instantis Enterprisetrack 17.1Oracle Instantis Enterprisetrack 17.2Oracle Instantis Enterprisetrack 17.3Oracle Tuxedo 12.1.1.0.0Oracle Enterprise Manager Base Platform 13.3.0.0Oracle KnowledgeOracle Peoplesoft Enterprise Peopletools 8.58Oracle Primavera Unifier 19.12Oracle Secure Global Desktop 5.5Oracle Rapid Planning 12.1Oracle Rapid Planning 12.2Oracle Communications Element Manager 8.2.0Oracle Communications Element Manager 8.1.1Oracle Communications Element Manager 8.1.0Oracle Communications Element Manager 8.0.0Oracle Agile Engineering Data Management 6.2.1.0Oracle Communications Session Report Manager 8.1.1Oracle Communications Session Report Manager 8.2.0Oracle Communications Session Route Manager 8.1.1Oracle Communications Session Route Manager 8.2.0Oracle Primavera Gateway 16.2.11Oracle Primavera Gateway 17.12.6Oracle Communications Session Route Manager 8.0.0Oracle Communications Session Route Manager 8.1.0Oracle Communications Session Report Manager 8.0.0Oracle Communications Session Report Manager 8.1.0Oracle Communications Asap Cartridges 7.2Oracle Communications Asap Cartridges 7.3Oracle Financial Services Compliance Regulatory ReportingOracle Communications Order And Service Management 7.4Oracle Communications Network Integrity 7.3.5Oracle Communications Network Integrity 7.3.6Oracle Real-time Decision Server 3.2.1.0Oracle Retail Order Broker 18.0Oracle Big Data Discovery 1.6Oracle Communications Design Studio 7.4.1.1.0Oracle Communications Design Studio 7.3.4.3.0Oracle Communications Design Studio 7.3.5.5.0Oracle Financial Services Funds Transfer PricingOracle Communications Design Studio 7.4.0.4.0Oracle Peoplesoft Enterprise Human Capital Management Human Resources 7.3.5Oracle Peoplesoft Enterprise Human Capital Management Human Resources 7.3.6Oracle Flexcube Core Banking 11.8.0Oracle Flexcube Core Banking 11.10.0Oracle Siebel Ui FrameworkOracle Flexcube Core Banking 11.9.0Oracle Internet Directory 12.2.1.4.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-23397CVE-2023-43472CVE-2023-49103CVE-2023-33022CVE-2023-42563path traversalIDORrace conditionCVE-2023-48316
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook