Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

oracle communications diameter signaling router vulnerabilities and exploits

(subscribe to this query)
6.4
CVSSv2
CVE-2020-7069
In PHP versions 7.2.x below 7.2.34, 7.3.x below 7.3.23 and 7.4.x below 7.4.11, when AES-CCM mode is used with openssl_encrypt() function with 12 bytes IV, only first 7 bytes of the IV is actually used. This can lead to both decreased security and incorrect encryption data.
Php PhpFedoraproject Fedora 31Fedoraproject Fedora 32Fedoraproject Fedora 33Debian Debian Linux 10.0Opensuse Leap 15.1Opensuse Leap 15.2Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 20.04Canonical Ubuntu Linux 12.04Netapp Clustered Data Ontap -Oracle Communications Diameter Signaling RouterTenable Tenable.sc
6.8
CVSSv2
CVE-2020-24750
FasterXML jackson-databind 2.x prior to 2.9.10.6 mishandles the interaction between serialization gadgets and typing, related to com.pastdev.httpcomponents.configuration.JndiConfiguration.
Fasterxml Jackson-databindOracle Application Testing Suite 13.3.0.1Oracle Agile Plm 9.3.6Oracle Communications Policy Management 12.5.0Oracle Communications Diameter Signaling RouterOracle Communications Offline Mediation Controller 12.0.0.3.0Oracle Communications Services Gatekeeper 7.0Oracle Communications Contacts Server 8.0.0.5.0Oracle Communications Calendar Server 8.0.0.4.0Oracle Banking Credit Facilities Process Management 14.3.0Oracle Banking Corporate Lending Process Management 14.3.0Oracle Siebel Core - Server FrameworkOracle Communications Unified Inventory Management 7.4.1Oracle Communications Element ManagerOracle Autovue For Agile Product Lifecycle Management 21.0.2Oracle Banking Supply Chain Finance 14.2.0Oracle Banking Credit Facilities Process Management 14.2.0Oracle Banking Credit Facilities Process Management 14.5.0Oracle Banking Corporate Lending Process Management 14.2.0Oracle Banking Corporate Lending Process Management 14.5.0Oracle Banking Supply Chain Finance 14.5.0Oracle Banking Supply Chain Finance 14.3.0
5
CVSSv2
CVE-2021-37137
The Snappy frame decoder function doesn't restrict the chunk length which may lead to excessive memory usage. Beside this it also may buffer reserved skippable chunks until the whole chunk was received which may lead to excessive memory usage as well. This vulnerability can ...
Netty NettyOracle Webcenter Portal 12.2.1.3.0Oracle Peoplesoft Enterprise Peopletools 8.57Oracle Banking Digital Experience 18.2Oracle Banking Digital Experience 18.3Oracle Banking Digital Experience 19.1Oracle Banking Digital Experience 18.1Oracle Peoplesoft Enterprise Peopletools 8.58Oracle Webcenter Portal 12.2.1.4.0Oracle Banking Digital Experience 19.2Oracle Banking Digital Experience 20.1Oracle Commerce Guided Search 11.3.2Oracle Peoplesoft Enterprise Peopletools 8.59Oracle Banking Digital Experience 21.1Oracle Banking ApisOracle Banking Apis 19.1Oracle Banking Apis 19.2Oracle Banking Apis 20.1Oracle Banking Apis 21.1Oracle Communications Cloud Native Core Binding Support Function 1.10.0Oracle Communications Diameter Signaling RouterOracle Communications Brm - Elastic Charging Engine 12.0.0.5.0
6.8
CVSSv2
CVE-2020-11619
FasterXML jackson-databind 2.x prior to 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.springframework.aop.config.MethodLocatingFactoryBean (aka spring-aop).
Fasterxml Jackson-databindDebian Debian Linux 8.0Netapp Steelstore Cloud Integrated Storage -Netapp Active Iq Unified ManagerOracle Retail Xstore Point Of Service 15.0Oracle Primavera Unifier 16.2Oracle Primavera Unifier 16.1Oracle Weblogic Server 12.2.1.3.0Oracle Retail Xstore Point Of Service 16.0Oracle Primavera Unifier 18.8Oracle Primavera UnifierOracle Retail Merchandising System 15.0Oracle Agile Plm 9.3.6Oracle Weblogic Server 12.2.1.4.0Oracle Enterprise Manager Base Platform 13.3.0.0Oracle Primavera Unifier 19.12Oracle Enterprise Manager Base Platform 13.4.0.0Oracle Communications Instant Messaging Server 10.0.1.4.0Oracle Retail Xstore Point Of Service 17.0Oracle Retail Xstore Point Of Service 18.0Oracle Retail Xstore Point Of Service 19.0Oracle Communications Diameter Signaling Router
4
CVSSv2
CVE-2020-8622
In BIND 9.0.0 -> 9.11.21, 9.12.0 -> 9.16.5, 9.17.0 -> 9.17.3, also affects 9.9.3-S1 -> 9.11.21-S1 of the BIND 9 Supported Preview Edition, An attacker on the network path for a TSIG-signed request, or operating the server receiving the TSIG-signed request, could send ...
Isc BindIsc Bind 9.9.3Isc Bind 9.11.21Fedoraproject Fedora 31Fedoraproject Fedora 32Debian Debian Linux 9.0Debian Debian Linux 10.0Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 20.04Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 12.04Netapp Steelstore Cloud Integrated Storage -Opensuse Leap 15.1Opensuse Leap 15.2Synology Dns ServerOracle Communications Diameter Signaling Router
2.1
CVSSv2
CVE-2020-17521
Apache Groovy provides extension methods to aid with creating temporary directories. Prior to this fix, Groovy's implementation of those extension methods was using a now superseded Java JDK method call that is potentially not secure on some operating systems in some context...
Apache Groovy 4.0.0Apache GroovyNetapp Snapcenter -Oracle Primavera Unifier 16.2Oracle Primavera Unifier 16.1Oracle Ilearning 6.2Oracle Business Process Management Suite 12.2.1.3.0Oracle Primavera Unifier 18.8Oracle Primavera UnifierOracle Agile Plm 9.3.3Oracle Agile Plm 9.3.6Oracle Primavera Unifier 19.12Oracle Retail Bulk Data Integration 15.0.3.0Oracle Retail Bulk Data Integration 16.0.3.0Oracle Communications Services Gatekeeper 7.0Oracle Retail Merchandising System 16.0.3Oracle Communications Evolved Communications Application Server 7.1Oracle Agile Engineering Data Management 6.2.1.0Oracle Primavera Unifier 20.12Oracle Business Process Management Suite 12.2.1.4.0Oracle Communications Services Gatekeeper 6.0Oracle Communications Services Gatekeeper 6.1
5
CVSSv2
CVE-2021-37136
The Bzip2 decompression decoder function doesn't allow setting size restrictions on the decompressed output data (which affects the allocation size used during decompression). All users of Bzip2Decoder are affected. The malicious input can trigger an OOME and so a DoS attack
Netty NettyQuarkus QuarkusOracle Peoplesoft Enterprise Peopletools 8.48Oracle Webcenter Portal 12.2.1.3.0Oracle Peoplesoft Enterprise Peopletools 8.57Oracle Banking Digital Experience 18.2Oracle Banking Digital Experience 18.3Oracle Banking Digital Experience 19.1Oracle Banking Digital Experience 18.1Oracle Peoplesoft Enterprise Peopletools 8.58Oracle Coherence 12.2.1.4.0Oracle Webcenter Portal 12.2.1.4.0Oracle Coherence 14.1.1.0.0Oracle Banking Digital Experience 19.2Oracle Banking Digital Experience 20.1Oracle Commerce Guided Search 11.3.2Oracle Peoplesoft Enterprise Peopletools 8.59Oracle Communications Cloud Native Core Security Edge Protection Proxy 1.7.0Oracle Banking Digital Experience 21.1Oracle Banking ApisOracle Banking Apis 19.1Oracle Banking Apis 19.2
6.8
CVSSv2
CVE-2020-35490
FasterXML jackson-databind 2.x prior to 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.PerUserPoolDataSource.
Fasterxml Jackson-databindNetapp Service Level Manager -Debian Debian Linux 9.0Oracle Webcenter Portal 12.2.1.3.0Oracle Application Testing Suite 13.3.0.1Oracle Banking Platform 2.6.2Oracle Agile Plm 9.3.6Oracle Webcenter Portal 12.2.1.4.0Oracle Communications Services Gatekeeper 7.0Oracle Retail Merchandising System 15.0.3Oracle Banking Platform 2.7.0Oracle Banking Platform 2.7.1Oracle Banking Platform 2.9.0Oracle Communications Evolved Communications Application Server 7.1Oracle Banking Platform 2.8.0Oracle Banking Virtual Account Management 14.3.0Oracle Insurance Policy Administration J2ee 11.2.0Oracle Communications Interactive Session Recorder 6.3Oracle Communications Interactive Session Recorder 6.4Oracle Communications Diameter Signaling RouterOracle Communications Unified Inventory Management 7.4.1Oracle Retail Xstore Point Of Service 16.0.6
4.4
CVSSv2
CVE-2020-9484
When using Apache Tomcat versions 10.0.0-M1 to 10.0.0-M4, 9.0.0.M1 to 9.0.34, 8.5.0 to 8.5.54 and 7.0.0 to 7.0.103 if a) an attacker is able to control the contents and name of a file on the server; and b) the server is configured to use the PersistenceManager with a FileStore; a...
Apache Tomcat 9.0.0Apache Tomcat 10.0.0Apache TomcatDebian Debian Linux 8.0Debian Debian Linux 9.0Debian Debian Linux 10.0Opensuse Leap 15.1Fedoraproject Fedora 31Fedoraproject Fedora 32Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 20.04Oracle Transportation Management 6.3.7Oracle Hospitality Guest Access 4.2.0Oracle Hospitality Guest Access 4.2.1Oracle Managed File Transfer 12.2.1.3.0Oracle Retail Order Broker 15.0Oracle Agile Plm 9.3.3Oracle Agile Plm 9.3.5Oracle Agile Plm 9.3.6Oracle Database 12.2.0.1Oracle Instantis EnterprisetrackOracle Communications Instant Messaging Server 10.0.1.4.0
6.8
CVSSv2
CVE-2020-9548
FasterXML jackson-databind 2.x prior to 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPConfig (aka anteros-core).
Fasterxml Jackson-databindNetapp Active Iq Unified ManagerDebian Debian Linux 8.0Oracle Retail Xstore Point Of Service 15.0Oracle Primavera Unifier 16.2Oracle Primavera Unifier 16.1Oracle Weblogic Server 12.2.1.3.0Oracle Retail Xstore Point Of Service 16.0Oracle Primavera Unifier 18.8Oracle Primavera UnifierOracle Retail Merchandising System 15.0Oracle Agile Plm 9.3.6Oracle Banking Digital Experience 18.2Oracle Banking Digital Experience 18.3Oracle Banking Digital Experience 19.1Oracle Banking Digital Experience 18.1Oracle Weblogic Server 12.2.1.4.0Oracle Enterprise Manager Base Platform 13.3.0.0Oracle Primavera Unifier 19.12Oracle Enterprise Manager Base Platform 13.4.0.0Oracle Communications Instant Messaging Server 10.0.1.4.0Oracle Retail Xstore Point Of Service 17.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-30924CVE-2024-3400overflowCVE-2024-23528CVE-2024-21338CVE-2024-3818CVE-2024-23535NULL pointer dereferenceelevation of privilege
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook