Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

oracle communications session route manager vulnerabilities and exploits

(subscribe to this query)

6.1
CVSSv3
CVE-2020-13947
An instance of a cross-site scripting vulnerability was identified to be present in the web based administration console on the message.jsp page of Apache ActiveMQ versions 5.15.12 through 5.16.0....
Apache ActivemqOracle Communications Session Report ManagerOracle Communications Session Route Manager
6.1
CVSSv3
CVE-2020-1941
In Apache ActiveMQ 5.0.0 to 5.15.11, the webconsole admin GUI is open to XSS, in the view that lists the contents of a queue....
Apache ActivemqOracle Communications Diameter Signaling RouterOracle Communications Element Manager 8.1.1Oracle Communications Element Manager 8.2.0Oracle Communications Element Manager 8.2.1Oracle Communications Session Report Manager 8.1.1Oracle Communications Session Report Manager 8.2.0Oracle Communications Session Report Manager 8.2.1Oracle Communications Session Route Manager 8.1.1Oracle Communications Session Route Manager 8.2.0Oracle Communications Session Route Manager 8.2.1Oracle Enterprise Repository 11.1.1.7.0Oracle Flexcube Private Banking 12.0.0Oracle Flexcube Private Banking 12.1.0
7.5
CVSSv3
CVE-2019-12423
Apache CXF ships with a OpenId Connect JWK Keys service, which allows a client to obtain the public keys in JWK format, which can then be used to verify the signature of tokens issued by the service. Typically, the service obtains the public key from a local keystore...
Apache CxfOracle Commerce Guided Search 11.3.2Oracle Communications Diameter Signaling RouterOracle Communications Element ManagerOracle Communications Session Report ManagerOracle Communications Session Route Manager 8.1.1Oracle Communications Session Route Manager 8.2.0Oracle Communications Session Route Manager 8.2.1Oracle Flexcube Private Banking 12.0.0Oracle Flexcube Private Banking 12.1.0Oracle Retail Order Broker 15.0
6.1
CVSSv3
CVE-2019-17573
By default, Apache CXF creates a /services page containing a listing of the available endpoint names and addresses. This webpage is vulnerable to a reflected Cross-Site Scripting (XSS) attack, which allows a malicious actor to inject javascript into the web page. Please note...
Apache CxfOracle Commerce Guided Search 11.3.2Oracle Communications Element Manager 8.1.1Oracle Communications Element Manager 8.2.0Oracle Communications Element Manager 8.2.1Oracle Communications Session Report Manager 8.1.1Oracle Communications Session Report Manager 8.2.0Oracle Communications Session Report Manager 8.2.1Oracle Communications Session Route Manager 8.1.1Oracle Communications Session Route Manager 8.2.0Oracle Communications Session Route Manager 8.2.1Oracle Flexcube Private Banking 12.0.0Oracle Flexcube Private Banking 12.1.0Oracle Retail Order Broker 15.0
7.2
CVSSv3
CVE-2019-10097
In Apache HTTP Server 2.4.32-2.4.39, when mod_remoteip was configured to use a trusted intermediary proxy server using the "PROXY" protocol, a specially crafted PROXY header could trigger a stack buffer overflow or NULL pointer deference. This vulnerability could only...
Apache Http Server 2.4.33Apache Http Server 2.4.34Apache Http Server 2.4.35Apache Http Server 2.4.37Apache Http Server 2.4.38Oracle Communications Element Manager 8.0.0Oracle Communications Element Manager 8.1.0Oracle Communications Element Manager 8.1.1Oracle Communications Element Manager 8.2.0Oracle Communications Session Report Manager 8.1.1Oracle Communications Session Report Manager 8.2.0Oracle Communications Session Report Manager 8.2.1Oracle Communications Session Route Manager 8.1.1Oracle Communications Session Route Manager 8.2.0Oracle Communications Session Route Manager 8.2.1Oracle Enterprise Manager Ops Center 12.3.3Oracle Enterprise Manager Ops Center 12.4.0Oracle Http Server 12.2.1.4.0Oracle Instantis EnterprisetrackOracle Retail Xstore Point Of Service 7.1
5.3
CVSSv3
CVE-2020-1934
In Apache HTTP Server 2.4.0 to 2.4.41, mod_proxy_ftp may use uninitialized memory when proxying to a malicious FTP server....
Apache Http ServerFedoraproject Fedora 31Fedoraproject Fedora 32Debian Debian Linux 9.0Debian Debian Linux 10.0Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 20.04Canonical Ubuntu Linux 16.04Opensuse Leap 15.1Oracle Instantis EnterprisetrackOracle Communications Element Manager 8.2.0Oracle Communications Element Manager 8.2.1Oracle Communications Element Manager 8.1.1Oracle Enterprise Manager Ops Center 12.4.0.0Oracle Communications Session Report Manager 8.1.1Oracle Communications Session Report Manager 8.2.0Oracle Communications Session Report Manager 8.2.1Oracle Communications Session Route Manager 8.1.1Oracle Communications Session Route Manager 8.2.0Oracle Communications Session Route Manager 8.2.1Oracle Zfs Storage Appliance Kit 8.8
6.1
CVSSv3
CVE-2020-1927
In Apache HTTP Server 2.4.0 to 2.4.41, redirects configured with mod_rewrite that were intended to be self-referential might be fooled by encoded newlines and redirect instead to an an unexpected URL within the request URL....
Apache Http ServerFedoraproject Fedora 31Fedoraproject Fedora 32Debian Debian Linux 9.0Debian Debian Linux 10.0Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 20.04Canonical Ubuntu Linux 16.04Opensuse Leap 15.1Netapp Oncommand Unified Manager Core Package -Broadcom Brocade Fabric Operating System -Oracle Sd-wan Aware 8.2Oracle Instantis EnterprisetrackOracle Communications Element Manager 8.2.0Oracle Communications Element Manager 8.2.1Oracle Communications Element Manager 8.1.1Oracle Enterprise Manager Ops Center 12.4.0.0Oracle Communications Session Report Manager 8.1.1Oracle Communications Session Report Manager 8.2.0Oracle Communications Session Report Manager 8.2.1Oracle Communications Session Route Manager 8.1.1Oracle Communications Session Route Manager 8.2.0Oracle Communications Session Route Manager 8.2.1Oracle Zfs Storage Appliance Kit 8.8
7.5
CVSSv3
CVE-2021-26117
The optional ActiveMQ LDAP login module can be configured to use anonymous access to the LDAP server. In this case, for Apache ActiveMQ Artemis prior to version 2.16.0 and Apache ActiveMQ prior to versions 5.16.1 and 5.15.14, the anonymous context is used to verify a valid users...
Apache ActivemqApache Activemq ArtemisNetapp Oncommand Workflow Automation -Debian Debian Linux 9.0Oracle Communications Element ManagerOracle Communications Session Report ManagerOracle Communications Session Route ManagerOracle Flexcube Private Banking 12.0.0Oracle Flexcube Private Banking 12.1.0
9.8
CVSSv3
CVE-2020-11998
A regression has been introduced in the commit preventing JMX re-bind. By passing an empty environment map to RMIConnectorServer, instead of the map that contains the authentication credentials, it leaves ActiveMQ open to the following attack:...
Apache Activemq 5.15.12Oracle Communications Diameter Signaling RouterOracle Communications Element ManagerOracle Communications Session Report ManagerOracle Communications Session Route ManagerOracle Enterprise Repository 11.1.1.7.0Oracle Flexcube Private Banking 12.0.0Oracle Flexcube Private Banking 12.1.0
5.3
CVSSv3
CVE-2020-1954
Apache CXF has the ability to integrate with JMX by registering an InstrumentationManager extension with the CXF bus. If the ‘createMBServerConnectorFactory‘ property of the default InstrumentationManagerImpl is not disabled, then it is vulnerable to a...
Apache CxfOracle Communications Diameter Signaling RouterOracle Communications Element ManagerOracle Communications Session Report ManagerOracle Enterprise Manager Base Platform 13.2.1.0Oracle Peoplesoft Enterprise Peopletools 8.56Netapp Oncommand Workflow Automation -Netapp Snapmanager -Oracle Communications Diameter Signaling Router Idih\\ Oracle Communications Session Route Manager
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-2817CVE-2022-37400CVE-2022-37042unspecifiedCVE-2021-30873firmwareCVE-2022-37447firewallCVE-2020-23622
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook