Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

oracle communications diameter intelligence hub vulnerabilities and exploits

(subscribe to this query)
9.8
CVSSv3

CVE-2020-17530

Forced OGNL evaluation, when evaluated on raw user input in tag attributes, may lead to remote code execution. Affected software : Apache Struts 2.0.0 - Struts 2.5.25.
Apache StrutsOracle Business Intelligence 12.2.1.3.0Oracle Business Intelligence 12.2.1.4.0Oracle Communications Diameter Intelligence Hub 8.0.0Oracle Communications Diameter Intelligence Hub 8.1.0Oracle Communications Diameter Intelligence Hub 8.2.0Oracle Communications Diameter Intelligence Hub 8.2.3Oracle Communications Policy Management 12.5.0Oracle Communications Pricing Design Center 12.0.0.3.0Oracle Financial Services Data Integration Hub 8.0.3Oracle Financial Services Data Integration Hub 8.0.6Oracle Hospitality Opera 5 5.6
7.5
CVSSv3

CVE-2021-22696

CXF supports (via JwtRequestCodeFilter) passing OAuth 2 parameters via a JWT token as opposed to query parameters (see: The OAuth 2.0 Authorization Framework: JWT Secured Authorization Request (JAR)). Instead of sending a JWT token as a "request" parameter, the spec als...
Apache CxfOracle Business Intelligence 5.5.0.0.0Oracle Business Intelligence 5.9.0.0.0Oracle Business Intelligence 12.2.1.3.0Oracle Business Intelligence 12.2.1.4.0Oracle Communications Diameter Intelligence HubOracle Communications Element Manager 8.2.2Oracle Communications Session Report ManagerOracle Communications Session Route Manager
7.5
CVSSv3

CVE-2020-11971

Apache Camel's JMX is vulnerable to Rebind Flaw. Apache Camel 2.22.x, 2.23.x, 2.24.x, 2.25.x, 3.0.0 up to 3.1.0 is affected. Users should upgrade to 3.2.0.
Apache CamelOracle Communications Diameter Intelligence HubOracle Communications Diameter Signaling RouterOracle Enterprise Manager Base Platform 13.3.0.0Oracle Enterprise Manager Base Platform 13.4.0.0Oracle Flexcube Private Banking 12.0.0Oracle Flexcube Private Banking 12.1.0
7.5
CVSSv3

CVE-2021-43859

XStream is an open source java library to serialize objects to XML and back again. Versions before 1.4.19 may allow a remote malicious user to allocate 100% CPU time on the target system depending on CPU type or parallel execution of such a payload resulting in a denial of servic...
Xstream Project XstreamFedoraproject Fedora 34Fedoraproject Fedora 35Debian Debian Linux 9.0Oracle Commerce Guided Search 11.3.2Oracle Communications Brm - Elastic Charging EngineOracle Communications Brm - Elastic Charging Engine 12.0.0.5.0Oracle Communications Cloud Native Core Automated Test Suite 1.9.0Oracle Communications Diameter Intelligence HubOracle Communications Policy Management 12.6.0.0.0Oracle Flexcube Private Banking 12.1.0Oracle Retail Xstore Point Of Service 16.0.6
7.5
CVSSv3

CVE-2021-36090

When reading a specially crafted ZIP archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs. This could be used to mount a denial of service attack against services that use Compress' zip pack...
Apache Commons CompressOracle Banking ApisOracle Banking Apis 19.1Oracle Banking Apis 19.2Oracle Banking Apis 20.1Oracle Banking Apis 21.1Oracle Banking Digital ExperienceOracle Banking Digital Experience 19.1Oracle Banking Digital Experience 19.2Oracle Banking Digital Experience 20.1Oracle Banking Digital Experience 21.1Oracle Banking Enterprise Default Management 2.7.0
5.9
CVSSv3

CVE-2020-1971

The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL provides a function GENERAL_NAME_cmp which compares different instances of a GENERAL_NAME to see if they are equal or not. This functi...
Openssl OpensslDebian Debian Linux 9.0Debian Debian Linux 10.0Fedoraproject Fedora 32Fedoraproject Fedora 33Oracle Api Gateway 11.1.2.4.0Oracle Business Intelligence 5.5.0.0.0Oracle Business Intelligence 5.9.0.0.0Oracle Business Intelligence 12.2.1.3.0Oracle Business Intelligence 12.2.1.4.0Oracle Communications Cloud Native Core Network Function Cloud Native Environment 1.10.0Oracle Communications Diameter Intelligence Hub
7.5
CVSSv3

CVE-2021-40690

All versions of Apache Santuario - XML Security for Java before 2.2.3 and 2.1.7 are vulnerable to an issue where the "secureValidation" property is not passed correctly when creating a KeyInfo from a KeyInfoReference element. This allows an malicious user to abuse an XP...
Apache Santuario Xml Security For JavaApache Cxf 3.4.4Apache TomeeDebian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0Oracle Agile Plm 9.3.6Oracle Commerce Guided Search 11.3.2Oracle Commerce Platform 11.3.2Oracle Communications Diameter Intelligence HubOracle Communications Messaging Server 8.1Oracle Flexcube Private Banking 12.1.0
7.8
CVSSv3

CVE-2021-22118

In Spring Framework, versions 5.2.x before 5.2.15 and versions 5.3.x before 5.3.7, a WebFlux application is vulnerable to a privilege escalation: by (re)creating the temporary storage directory, a locally authenticated malicious user can read or modify files that have been upload...
Vmware Spring FrameworkOracle Commerce Guided Search 11.3.2Oracle Communications Brm - Elastic Charging Engine 12.0.0.3Oracle Communications Cloud Native Core Binding Support Function 1.9.0Oracle Communications Cloud Native Core Policy 1.14.0Oracle Communications Cloud Native Core Security Edge Protection Proxy 1.6.0Oracle Communications Cloud Native Core Service Communication Proxy 1.14.0Oracle Communications Cloud Native Core Unified Data Repository 1.14.0Oracle Communications Diameter Intelligence HubOracle Communications Element ManagerOracle Communications Interactive Session Recorder 6.4Oracle Communications Network Integrity 7.3.6
7.5
CVSSv3

CVE-2021-35515

When reading a specially crafted 7Z archive, the construction of the list of codecs that decompress an entry can result in an infinite loop. This could be used to mount a denial of service attack against services that use Compress' sevenz package.
Apache Commons CompressNetapp Active Iq Unified Manager -Netapp Oncommand Insight -Oracle Banking Digital ExperienceOracle Banking Digital Experience 19.1Oracle Banking Digital Experience 20.1Oracle Banking Digital Experience 21.1Oracle Banking Enterprise Default Management 2.7.0Oracle Banking Party Management 2.7.0Oracle Banking Payments 14.5Oracle Banking Trade Finance 14.5Oracle Banking Treasury Management 14.5
7.5
CVSSv3

CVE-2021-35516

When reading a specially crafted 7Z archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs. This could be used to mount a denial of service attack against services that use Compress' sevenz pa...
Apache Commons CompressNetapp Active Iq Unified Manager -Netapp Oncommand Insight -Oracle Banking Digital ExperienceOracle Banking Digital Experience 19.1Oracle Banking Digital Experience 19.2Oracle Banking Digital Experience 20.1Oracle Banking Digital Experience 21.1Oracle Banking Enterprise Default Management 2.7.0Oracle Banking Party Management 2.7.0Oracle Business Process Management Suite 12.2.1.3.0Oracle Business Process Management Suite 12.2.1.4.0
Preferred Score:
CVSSv3
CVSSv2
CVSSv3
CVSSv4
EPSS
VMScore
Recommendations:
CVE-2025-23629CVE-2024-52331CVE-2025-0693precious metals charts and widgets for wordpressneofixsimple downloads listCVE-2025-23544CVE-2025-21298client sidememory leakCVE-2019-5418XSSdeebot x5 pro plus
Home
/
Search Results
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook