Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

oracle communications session report manager 8.1.1 vulnerabilities and exploits

(subscribe to this query)
4.3
CVSSv2
CVE-2020-1941
In Apache ActiveMQ 5.0.0 to 5.15.11, the webconsole admin GUI is open to XSS, in the view that lists the contents of a queue.
Apache ActivemqOracle Flexcube Private Banking 12.1.0Oracle Flexcube Private Banking 12.0.0Oracle Enterprise Repository 11.1.1.7.0Oracle Communications Element Manager 8.2.0Oracle Communications Element Manager 8.2.1Oracle Communications Element Manager 8.1.1Oracle Communications Diameter Signaling RouterOracle Communications Session Report Manager 8.1.1Oracle Communications Session Report Manager 8.2.0Oracle Communications Session Report Manager 8.2.1Oracle Communications Session Route Manager 8.1.1Oracle Communications Session Route Manager 8.2.0Oracle Communications Session Route Manager 8.2.1
4.3
CVSSv2
CVE-2019-17573
By default, Apache CXF creates a /services page containing a listing of the available endpoint names and addresses. This webpage is vulnerable to a reflected Cross-Site Scripting (XSS) attack, which allows a malicious actor to inject javascript into the web page. Please note that...
Apache CxfOracle Flexcube Private Banking 12.1.0Oracle Flexcube Private Banking 12.0.0Oracle Retail Order Broker 15.0Oracle Communications Element Manager 8.2.0Oracle Communications Element Manager 8.2.1Oracle Communications Element Manager 8.1.1Oracle Communications Session Report Manager 8.1.1Oracle Communications Session Report Manager 8.2.0Oracle Communications Session Report Manager 8.2.1Oracle Communications Session Route Manager 8.1.1Oracle Communications Session Route Manager 8.2.0Oracle Communications Session Route Manager 8.2.1Oracle Commerce Guided Search 11.3.2
6
CVSSv2
CVE-2019-10097
In Apache HTTP Server 2.4.32-2.4.39, when mod_remoteip was configured to use a trusted intermediary proxy server using the "PROXY" protocol, a specially crafted PROXY header could trigger a stack buffer overflow or NULL pointer deference. This vulnerability could only b...
Apache Http Server 2.4.33Apache Http Server 2.4.37Apache Http Server 2.4.38Apache Http Server 2.4.34Apache Http Server 2.4.35Oracle Retail Xstore Point Of Service 7.1Oracle Enterprise Manager Ops Center 12.3.3Oracle Enterprise Manager Ops Center 12.4.0Oracle Instantis EnterprisetrackOracle Communications Element Manager 8.2.0Oracle Communications Element Manager 8.1.1Oracle Communications Element Manager 8.1.0Oracle Communications Element Manager 8.0.0Oracle Http Server 12.2.1.4.0Oracle Communications Session Report Manager 8.1.1Oracle Communications Session Report Manager 8.2.0Oracle Communications Session Report Manager 8.2.1Oracle Communications Session Route Manager 8.1.1Oracle Communications Session Route Manager 8.2.0Oracle Communications Session Route Manager 8.2.1
5
CVSSv2
CVE-2020-1934
In Apache HTTP Server 2.4.0 to 2.4.41, mod_proxy_ftp may use uninitialized memory when proxying to a malicious FTP server.
Apache Http ServerFedoraproject Fedora 31Fedoraproject Fedora 32Debian Debian Linux 9.0Debian Debian Linux 10.0Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 20.04Canonical Ubuntu Linux 16.04Opensuse Leap 15.1Oracle Instantis EnterprisetrackOracle Communications Element Manager 8.2.0Oracle Communications Element Manager 8.2.1Oracle Communications Element Manager 8.1.1Oracle Enterprise Manager Ops Center 12.4.0.0Oracle Communications Session Report Manager 8.1.1Oracle Communications Session Report Manager 8.2.0Oracle Communications Session Report Manager 8.2.1Oracle Communications Session Route Manager 8.1.1Oracle Communications Session Route Manager 8.2.0Oracle Communications Session Route Manager 8.2.1Oracle Zfs Storage Appliance Kit 8.8
4.9
CVSSv2
CVE-2019-0197
A vulnerability was found in Apache HTTP Server 2.4.34 to 2.4.38. When HTTP/2 was enabled for a http: host or H2Upgrade was enabled for h2 on a https: host, an Upgrade request from http/1.1 to http/2 that was not the first request on a connection could lead to a misconfiguration ...
Apache Http ServerCanonical Ubuntu Linux 18.04Canonical Ubuntu Linux 19.04Canonical Ubuntu Linux 16.04Fedoraproject Fedora 30Opensuse Leap 42.3Opensuse Leap 15.0Redhat Jboss Core Services 1.0Oracle Retail Xstore Point Of Service 7.1Oracle Retail Xstore Point Of Service 7.0Oracle Http Server 12.2.1.3.0Oracle Enterprise Manager Ops Center 12.3.3Oracle Instantis Enterprisetrack 17.1Oracle Instantis Enterprisetrack 17.2Oracle Instantis Enterprisetrack 17.3Oracle Enterprise Manager Ops Center 12.4.0Oracle Communications Session Report Manager 8.1.1Oracle Communications Session Report Manager 8.2.0Oracle Communications Session Route Manager 8.1.1Oracle Communications Session Route Manager 8.2.0Oracle Communications Session Route Manager 8.0.0Oracle Communications Session Route Manager 8.1.0
5.8
CVSSv2
CVE-2020-1927
In Apache HTTP Server 2.4.0 to 2.4.41, redirects configured with mod_rewrite that were intended to be self-referential might be fooled by encoded newlines and redirect instead to an an unexpected URL within the request URL.
Apache Http ServerFedoraproject Fedora 31Fedoraproject Fedora 32Debian Debian Linux 9.0Debian Debian Linux 10.0Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 20.04Canonical Ubuntu Linux 16.04Opensuse Leap 15.1Netapp Oncommand Unified Manager Core Package -Broadcom Brocade Fabric Operating System -Oracle Sd-wan Aware 8.2Oracle Instantis EnterprisetrackOracle Communications Element Manager 8.2.0Oracle Communications Element Manager 8.2.1Oracle Communications Element Manager 8.1.1Oracle Enterprise Manager Ops Center 12.4.0.0Oracle Communications Session Report Manager 8.1.1Oracle Communications Session Report Manager 8.2.0Oracle Communications Session Report Manager 8.2.1Oracle Communications Session Route Manager 8.1.1Oracle Communications Session Route Manager 8.2.0
4.3
CVSSv2
CVE-2019-12423
Apache CXF ships with a OpenId Connect JWK Keys service, which allows a client to obtain the public keys in JWK format, which can then be used to verify the signature of tokens issued by the service. Typically, the service obtains the public key from a local keystore (JKS/PKCS12)...
Apache CxfOracle Flexcube Private Banking 12.1.0Oracle Flexcube Private Banking 12.0.0Oracle Retail Order Broker 15.0Oracle Communications Diameter Signaling RouterOracle Communications Session Route Manager 8.1.1Oracle Communications Session Route Manager 8.2.0Oracle Communications Session Route Manager 8.2.1Oracle Communications Session Report ManagerOracle Communications Element ManagerOracle Commerce Guided Search 11.3.2
5
CVSSv2
CVE-2019-10246
In Eclipse Jetty version 9.2.27, 9.3.26, and 9.4.16, the server running on Windows is vulnerable to exposure of the fully qualified Base Resource directory name on Windows to a remote client when it is configured for showing a Listing of directory contents. This information revea...
Eclipse Jetty 9.2.27Eclipse Jetty 9.3.26Eclipse Jetty 9.4.16Netapp Snap Creator Framework -Netapp Snapcenter -Netapp Oncommand System ManagerNetapp Snapmanager -Netapp Storage Services Connector -Netapp Virtual Storage ConsoleNetapp Virtual Storage Console 9.6Netapp Storage Replication Adapter For Clustered Data OntapNetapp Storage Replication Adapter For Clustered Data Ontap 9.6Netapp Vasa Provider For Clustered Data OntapNetapp Vasa Provider For Clustered Data Ontap -Netapp Element -Oracle Retail Xstore Point Of Service 15.0Oracle Flexcube Private Banking 12.1.0Oracle Retail Xstore Point Of Service 7.1Oracle Flexcube Private Banking 12.0.0Oracle Flexcube Core Banking 5.2.0Oracle Hospitality Guest Access 4.2.0Oracle Hospitality Guest Access 4.2.1
4.3
CVSSv2
CVE-2020-11023
In jQuery versions greater than or equal to 1.0.3 and prior to 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted c...
Jquery JqueryDebian Debian Linux 9.0Fedoraproject Fedora 31Fedoraproject Fedora 32Fedoraproject Fedora 33Drupal DrupalOracle Weblogic Server 12.1.3.0.0Oracle Hyperion Financial Reporting 11.1.2.4Oracle Weblogic Server 12.2.1.3.0Oracle Webcenter Sites 12.2.1.3.0Oracle Application Testing Suite 13.3.0.1Oracle Communications Operations Monitor 3.4Oracle Weblogic Server 12.2.1.4.0Oracle Webcenter Sites 12.2.1.4.0Oracle Weblogic Server 14.1.1.0.0Oracle Communications Interactive Session RecorderOracle Communications Element Manager 8.2.0Oracle Communications Element Manager 8.2.1Oracle Communications Element Manager 8.1.1Oracle Application ExpressOracle Rest Data Services 12.2.0.1Oracle Rest Data Services 12.1.0.2
5.4
CVSSv2
CVE-2019-0227
A Server Side Request Forgery (SSRF) vulnerability affected the Apache Axis 1.4 distribution that was last released in 2006. Security and bug commits commits continue in the projects Axis 1.x Subversion repository, legacy users are encouraged to build from source. The successor t...
Apache Axis 1.4Oracle Agile Product Lifecycle Management Framework 9.3.3Oracle Flexcube Private Banking 12.1.0Oracle Primavera Unifier 16.2Oracle Peoplesoft Enterprise Human Capital Management Human Resources 9.2Oracle Retail Xstore Point Of Service 7.1Oracle Enterprise Manager Base Platform 12.1.0.5Oracle Flexcube Private Banking 12.0.0Oracle Primavera Unifier 16.1Oracle Peoplesoft Enterprise Peopletools 8.56Oracle Hospitality Guest Access 4.2.0Oracle Hospitality Guest Access 4.2.1Oracle Tuxedo 12.1.3Oracle Internet Directory 12.2.1.3.0Oracle Webcenter Portal 12.2.1.3.0Oracle Communications Order And Service Management 7.3.0.0.0Oracle Flexcube Core Banking 11.7.0Oracle Peoplesoft Enterprise Peopletools 8.57Oracle Application Testing Suite 13.2.0.1Oracle Application Testing Suite 13.3.0.1Oracle Secure Global Desktop 5.4Oracle Retail Order Broker 15.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-38028CVE-2024-32406CVE-2024-25624IMAPCVE-2024-2310CVE-2024-0874CVE-2024-20359XXEremote code execution
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook