Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

oracle communications element manager 8.0.0 vulnerabilities and exploits

(subscribe to this query)
9.1
CVSSv3

CVE-2019-10082

In Apache HTTP Server 2.4.18-2.4.39, using fuzzed network input, the http/2 session handling could be made to read memory after being freed, during connection shutdown.
Apache Http ServerOracle Communications Element Manager 8.0.0Oracle Communications Element Manager 8.1.0Oracle Communications Element Manager 8.1.1Oracle Communications Element Manager 8.2.0Oracle Enterprise Manager Ops Center 12.3.3Oracle Enterprise Manager Ops Center 12.4.0Oracle Enterprise Manager Ops Center 12.4.0.0Oracle Http Server 12.2.1.3.0Oracle Http Server 12.2.1.4.0Oracle Instantis EnterprisetrackOracle Retail Xstore Point Of Service 7.1
7.2
CVSSv3

CVE-2019-10097

In Apache HTTP Server 2.4.32-2.4.39, when mod_remoteip was configured to use a trusted intermediary proxy server using the "PROXY" protocol, a specially crafted PROXY header could trigger a stack buffer overflow or NULL pointer deference. This vulnerability could only b...
Apache Http Server 2.4.33Apache Http Server 2.4.34Apache Http Server 2.4.35Apache Http Server 2.4.37Apache Http Server 2.4.38Oracle Communications Element Manager 8.0.0Oracle Communications Element Manager 8.1.0Oracle Communications Element Manager 8.1.1Oracle Communications Element Manager 8.2.0Oracle Communications Session Report Manager 8.1.1Oracle Communications Session Report Manager 8.2.0Oracle Communications Session Report Manager 8.2.1
6.1
CVSSv3

CVE-2019-10092

In Apache HTTP Server 2.4.0-2.4.39, a limited cross-site scripting issue was reported affecting the mod_proxy error page. An attacker could cause the link on the error page to be malformed and instead point to a page of their choice. This would only be exploitable where a server ...
Apache Http ServerOpensuse Leap 15.0Opensuse Leap 15.1Debian Debian Linux 8.0Debian Debian Linux 9.0Debian Debian Linux 10.0Redhat Software Collection 1.0Fedoraproject Fedora 30Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 19.04Netapp Clustered Data Ontap
5.3
CVSSv3

CVE-2019-10246

In Eclipse Jetty version 9.2.27, 9.3.26, and 9.4.16, the server running on Windows is vulnerable to exposure of the fully qualified Base Resource directory name on Windows to a remote client when it is configured for showing a Listing of directory contents. This information revea...
Eclipse Jetty 9.2.27Eclipse Jetty 9.3.26Eclipse Jetty 9.4.16Netapp Oncommand System ManagerNetapp Snap Creator Framework -Netapp Snapcenter -Netapp Snapmanager -Netapp Storage Replication Adapter For Clustered Data OntapNetapp Storage Replication Adapter For Clustered Data Ontap 9.6Netapp Storage Services Connector -Netapp Vasa Provider For Clustered Data OntapNetapp Vasa Provider For Clustered Data Ontap -
7.5
CVSSv3

CVE-2019-9517

Some HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to a denial of service. The attacker opens the HTTP/2 window so the peer can send without constraint; however, they leave the TCP window closed so the peer cannot actually writ...
Apple SwiftnioApache Http ServerApache Traffic ServerCanonical Ubuntu Linux 16.04Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 19.04Debian Debian Linux 9.0Debian Debian Linux 10.0Synology Diskstation Manager 6.2Synology Skynas -Synology Vs960hd Firmware -Fedoraproject Fedora 29
7.5
CVSSv3

CVE-2019-0227

A Server Side Request Forgery (SSRF) vulnerability affected the Apache Axis 1.4 distribution that was last released in 2006. Security and bug commits commits continue in the projects Axis 1.x Subversion repository, legacy users are encouraged to build from source. The successor t...
Apache Axis 1.4Oracle Agile Engineering Data Management 6.2.1.0Oracle Agile Product Lifecycle Management Framework 9.3.3Oracle Application Testing Suite 13.2.0.1Oracle Application Testing Suite 13.3.0.1Oracle Big Data Discovery 1.6Oracle Communications Asap Cartridges 7.2Oracle Communications Asap Cartridges 7.3Oracle Communications Design Studio 7.3.4.3.0Oracle Communications Design Studio 7.3.5.5.0Oracle Communications Design Studio 7.4.0.4.0Oracle Communications Design Studio 7.4.1.1.0
6.1
CVSSv3

CVE-2018-8032

Apache Axis 1.x up to and including 1.4 is vulnerable to a cross-site scripting (XSS) attack in the default servlet/services.
Apache AxisOracle Agile Engineering Data Management 6.2.1.0Oracle Agile Product Lifecycle Management Framework 9.3.3Oracle Application Testing Suite 13.2.0.1Oracle Application Testing Suite 13.3.0.1Oracle Big Data Discovery 1.6Oracle Communications Asap Cartridges 7.2Oracle Communications Asap Cartridges 7.3Oracle Communications Design Studio 7.3.4.3.0Oracle Communications Design Studio 7.3.5.5.0Oracle Communications Design Studio 7.4.0.4.0Oracle Communications Design Studio 7.4.1.1.0
9.8
CVSSv3

CVE-2020-1938

When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat. Tomcat treats AJP connections as having higher trust than, for example, a similar HTTP connection. If such connections are available to an attacker, they can be exp...
Apache Geode 1.12.0Apache TomcatFedoraproject Fedora 30Fedoraproject Fedora 31Fedoraproject Fedora 32Oracle Agile Engineering Data Management 6.2.1.0Oracle Agile Plm 9.3.3Oracle Agile Plm 9.3.5Oracle Agile Plm 9.3.6Oracle Communications Element Manager 8.1.1Oracle Communications Element Manager 8.2.0Oracle Communications Element Manager 8.2.1
7.5
CVSSv3

CVE-2018-15756

Spring Framework, version 5.1, versions 5.0.x before 5.0.10, versions 4.3.x before 4.3.20, and older unsupported versions on the 4.2.x branch provide support for range requests when serving static resources through the ResourceHttpRequestHandler, or starting in 5.0 when an annota...
Vmware Spring FrameworkVmware Spring Framework 5.1.0Oracle Agile Plm 9.3.3Oracle Agile Plm 9.3.4Oracle Agile Plm 9.3.5Oracle Agile Plm 9.3.6Oracle Communications Brm - Elastic Charging Engine 11.3Oracle Communications Brm - Elastic Charging Engine 12.0Oracle Communications Converged Application Server - Service Controller 6.0Oracle Communications Converged Application Server - Service Controller 6.1Oracle Communications Diameter Signaling Router 8.0.0Oracle Communications Diameter Signaling Router 8.1
5.3
CVSSv3

CVE-2019-10247

In Eclipse Jetty version 7.x, 8.x, 9.2.27 and older, 9.3.26 and older, and 9.4.16 and older, the server running on any OS and Jetty version combination will reveal the configured fully qualified directory base resource location on the output of the 404 error for not finding a Con...
Eclipse Jetty 7.0.0Eclipse Jetty 7.0.1Eclipse Jetty 7.0.2Eclipse Jetty 7.1.0Eclipse Jetty 7.1.1Eclipse Jetty 7.1.2Eclipse Jetty 7.1.3Eclipse Jetty 7.1.4Eclipse Jetty 7.1.5Eclipse Jetty 7.1.6Eclipse Jetty 7.2.0Eclipse Jetty 7.2.1
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-12326CVE-2024-44852XSSprivilege escalationCSRFCVE-2024-12115CVE-2024-38925CVE-2024-38144CVE-2024-6387
Home
/
Search Results
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook