Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

oracle communications session report manager vulnerabilities and exploits

(subscribe to this query)
8.8
CVSSv3
CVE-2020-10672
FasterXML jackson-databind 2.x prior to 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.aries.transaction.jms.internal.XaPooledConnectionFactory (aka aries.transaction.jms).
Fasterxml Jackson-databindDebian Debian Linux 8.0Netapp Steelstore Cloud Integrated Storage -Oracle Retail Xstore Point Of Service 15.0Oracle Primavera Unifier 16.2Oracle Retail Service Backbone 14.1Oracle Primavera Unifier 16.1Oracle Retail Service Backbone 15.0Oracle Weblogic Server 12.2.1.3.0Oracle Retail Xstore Point Of Service 16.0Oracle Primavera Unifier 18.8Oracle Primavera UnifierOracle Retail Merchandising System 15.0Oracle Agile Plm 9.3.6Oracle Banking Digital Experience 18.2Oracle Banking Digital Experience 18.3Oracle Banking Digital Experience 19.1Oracle Banking Digital Experience 18.1Oracle Weblogic Server 12.2.1.4.0Oracle Enterprise Manager Base Platform 13.3.0.0Oracle Financial Services Price Creation And Discovery 8.0.7Oracle Primavera Unifier 19.12
8.8
CVSSv3
CVE-2020-10673
FasterXML jackson-databind 2.x prior to 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.caucho.config.types.ResourceRef (aka caucho-quercus).
Fasterxml Jackson-databindDebian Debian Linux 8.0Netapp Steelstore Cloud Integrated Storage -Oracle Retail Xstore Point Of Service 15.0Oracle Primavera Unifier 16.2Oracle Retail Service Backbone 14.1Oracle Primavera Unifier 16.1Oracle Retail Service Backbone 15.0Oracle Weblogic Server 12.2.1.3.0Oracle Retail Xstore Point Of Service 16.0Oracle Primavera Unifier 18.8Oracle Primavera UnifierOracle Retail Merchandising System 15.0Oracle Agile Plm 9.3.6Oracle Banking Digital Experience 18.2Oracle Banking Digital Experience 18.3Oracle Banking Digital Experience 19.1Oracle Banking Digital Experience 18.1Oracle Weblogic Server 12.2.1.4.0Oracle Enterprise Manager Base Platform 13.3.0.0Oracle Financial Services Price Creation And Discovery 8.0.7Oracle Primavera Unifier 19.12
8.8
CVSSv3
CVE-2020-10968
FasterXML jackson-databind 2.x prior to 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.aoju.bus.proxy.provider.remoting.RmiProvider (aka bus-proxy).
Fasterxml Jackson-databindDebian Debian Linux 8.0Netapp Steelstore Cloud Integrated Storage -Oracle Retail Xstore Point Of Service 15.0Oracle Primavera Unifier 16.2Oracle Retail Service Backbone 14.1Oracle Primavera Unifier 16.1Oracle Retail Service Backbone 15.0Oracle Weblogic Server 12.2.1.3.0Oracle Retail Xstore Point Of Service 16.0Oracle Primavera Unifier 18.8Oracle Primavera UnifierOracle Retail Merchandising System 15.0Oracle Agile Plm 9.3.6Oracle Banking Digital Experience 18.2Oracle Banking Digital Experience 18.3Oracle Banking Digital Experience 19.1Oracle Banking Digital Experience 18.1Oracle Weblogic Server 12.2.1.4.0Oracle Enterprise Manager Base Platform 13.3.0.0Oracle Financial Services Price Creation And Discovery 8.0.7Oracle Primavera Unifier 19.12
8.8
CVSSv3
CVE-2020-10969
FasterXML jackson-databind 2.x prior to 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to javax.swing.JEditorPane.
Fasterxml Jackson-databindDebian Debian Linux 8.0Netapp Steelstore Cloud Integrated Storage -Oracle Retail Xstore Point Of Service 15.0Oracle Primavera Unifier 16.2Oracle Retail Service Backbone 14.1Oracle Primavera Unifier 16.1Oracle Retail Service Backbone 15.0Oracle Weblogic Server 12.2.1.3.0Oracle Retail Xstore Point Of Service 16.0Oracle Primavera Unifier 18.8Oracle Primavera UnifierOracle Retail Merchandising System 15.0Oracle Agile Plm 9.3.6Oracle Banking Digital Experience 18.2Oracle Banking Digital Experience 18.3Oracle Banking Digital Experience 19.1Oracle Banking Digital Experience 18.1Oracle Weblogic Server 12.2.1.4.0Oracle Enterprise Manager Base Platform 13.3.0.0Oracle Financial Services Price Creation And Discovery 8.0.7Oracle Primavera Unifier 19.12
8.8
CVSSv3
CVE-2020-11112
FasterXML jackson-databind 2.x prior to 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.proxy.provider.remoting.RmiProvider (aka apache/commons-proxy).
Fasterxml Jackson-databindDebian Debian Linux 8.0Netapp Steelstore Cloud Integrated Storage -Oracle Retail Xstore Point Of Service 15.0Oracle Primavera Unifier 16.2Oracle Retail Service Backbone 14.1Oracle Primavera Unifier 16.1Oracle Retail Service Backbone 15.0Oracle Weblogic Server 12.2.1.3.0Oracle Retail Xstore Point Of Service 16.0Oracle Primavera Unifier 18.8Oracle Primavera UnifierOracle Retail Merchandising System 15.0Oracle Agile Plm 9.3.6Oracle Banking Digital Experience 18.2Oracle Banking Digital Experience 18.3Oracle Banking Digital Experience 19.1Oracle Banking Digital Experience 18.1Oracle Weblogic Server 12.2.1.4.0Oracle Enterprise Manager Base Platform 13.3.0.0Oracle Financial Services Price Creation And Discovery 8.0.7Oracle Primavera Unifier 19.12
8.8
CVSSv3
CVE-2020-11113
FasterXML jackson-databind 2.x prior to 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.openjpa.ee.WASRegistryManagedRuntime (aka openjpa).
Fasterxml Jackson-databindDebian Debian Linux 8.0Netapp Steelstore Cloud Integrated Storage -Oracle Retail Xstore Point Of Service 15.0Oracle Primavera Unifier 16.2Oracle Retail Service Backbone 14.1Oracle Primavera Unifier 16.1Oracle Retail Service Backbone 15.0Oracle Weblogic Server 12.2.1.3.0Oracle Webcenter Portal 12.2.1.3.0Oracle Retail Xstore Point Of Service 16.0Oracle Primavera Unifier 18.8Oracle Primavera UnifierOracle Retail Merchandising System 15.0Oracle Agile Plm 9.3.6Oracle Banking Digital Experience 18.2Oracle Banking Digital Experience 18.3Oracle Banking Digital Experience 19.1Oracle Banking Digital Experience 18.1Oracle Weblogic Server 12.2.1.4.0Oracle Enterprise Manager Base Platform 13.3.0.0Oracle Financial Services Price Creation And Discovery 8.0.7
5.3
CVSSv3
CVE-2019-10247
In Eclipse Jetty version 7.x, 8.x, 9.2.27 and older, 9.3.26 and older, and 9.4.16 and older, the server running on any OS and Jetty version combination will reveal the configured fully qualified directory base resource location on the output of the 404 error for not finding a Con...
Eclipse Jetty 9.3.0Eclipse Jetty 9.3.4Eclipse Jetty 9.3.7Eclipse Jetty 9.3.8Eclipse Jetty 9.3.1Eclipse Jetty 9.3.2Eclipse Jetty 9.3.3Eclipse Jetty 9.3.5Eclipse Jetty 9.3.6Eclipse Jetty 9.3.9Eclipse Jetty 9.3.10Eclipse Jetty 9.3.11Eclipse Jetty 9.3.12Eclipse Jetty 9.3.13Eclipse Jetty 9.3.14Eclipse Jetty 9.3.15Eclipse Jetty 9.3.16Eclipse Jetty 9.3.17Eclipse Jetty 9.3.18Eclipse Jetty 9.3.19Eclipse Jetty 9.3.20Eclipse Jetty 9.3.21
8.1
CVSSv3
CVE-2020-35728
FasterXML jackson-databind 2.x prior to 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.oracle.wls.shaded.org.apache.xalan.lib.sql.JNDIConnectionPool (aka embedded Xalan in org.glassfish.web/javax.servlet.jsp.jstl).
Fasterxml Jackson-databindDebian Debian Linux 9.0Netapp Service Level Manager -Oracle Webcenter Portal 12.2.1.3.0Oracle Application Testing Suite 13.3.0.1Oracle Primavera UnifierOracle Agile Plm 9.3.6Oracle Communications Policy Management 12.5.0Oracle Webcenter Portal 12.2.1.4.0Oracle Communications Billing And Revenue Management 12.0.0.3.0Oracle Communications Billing And Revenue Management 7.5.0.23.0Oracle Communications Services Gatekeeper 7.0Oracle Retail Merchandising System 15.0.3Oracle Communications Evolved Communications Application Server 7.1Oracle Goldengate Application Adapters 19.1.0.0.0Oracle Data Integrator 12.2.1.4.0Oracle Primavera Unifier 20.12Oracle Banking Virtual Account Management 14.3.0Oracle Autovue 21.0.2Oracle Insurance Rules Palette 11.0.2Oracle Commerce PlatformOracle Commerce Platform 11.2.0
8.1
CVSSv3
CVE-2020-36181
FasterXML jackson-databind 2.x prior to 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.cpdsadapter.DriverAdapterCPDS.
Netapp Service Level Manager -Debian Debian Linux 9.0Oracle Webcenter Portal 12.2.1.3.0Oracle Primavera Unifier 17.2Oracle Application Testing Suite 13.3.0.1Oracle Primavera Unifier 18.8Oracle Primavera UnifierOracle Agile Plm 9.3.6Oracle Communications Policy Management 12.5.0Oracle Primavera Unifier 19.12Oracle Webcenter Portal 12.2.1.4.0Oracle Communications Billing And Revenue Management 12.0.0.3.0Oracle Communications Billing And Revenue Management 7.5.0.23.0Oracle Communications Services Gatekeeper 7.0Oracle Retail Merchandising System 15.0.3Oracle Communications Evolved Communications Application Server 7.1Oracle Goldengate Application Adapters 19.1.0.0.0Oracle Data Integrator 12.2.1.4.0Oracle Primavera Unifier 20.12Oracle Banking Virtual Account Management 14.3.0Oracle Insurance Rules Palette 11.0.2Oracle Commerce Platform
8.1
CVSSv3
CVE-2020-36179
FasterXML jackson-databind 2.x prior to 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.commons.dbcp.cpdsadapter.DriverAdapterCPDS.
Netapp Cloud Backup -Netapp Service Level Manager -Debian Debian Linux 9.0Oracle Webcenter Portal 12.2.1.3.0Oracle Application Testing Suite 13.3.0.1Oracle Primavera Unifier 18.8Oracle Primavera UnifierOracle Agile Plm 9.3.6Oracle Communications Policy Management 12.5.0Oracle Primavera Unifier 19.12Oracle Webcenter Portal 12.2.1.4.0Oracle Communications Billing And Revenue Management 12.0.0.3.0Oracle Communications Billing And Revenue Management 7.5.0.23.0Oracle Communications Services Gatekeeper 7.0Oracle Retail Merchandising System 15.0.3Oracle Communications Evolved Communications Application Server 7.1Oracle Goldengate Application Adapters 19.1.0.0.0Oracle Data Integrator 12.2.1.4.0Oracle Primavera Unifier 20.12Oracle Banking Virtual Account Management 14.3.0Oracle Insurance Rules Palette 11.0.2Oracle Commerce Platform
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-21987buffer overflowCVE-2024-28890CVE-2024-27574CVE-2024-27347CVE-2024-31450privilegeSSTICVE-2024-31666
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook