Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

oracle communications instant messaging server 10.0.1.4.0 vulnerabilities and exploits

(subscribe to this query)
8.1
CVSSv3

CVE-2020-14195

FasterXML jackson-databind 2.x prior to 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to org.jsecurity.realm.jndi.JndiRealmFactory (aka org.jsecurity).
Fasterxml Jackson-databindNetapp Active Iq Unified ManagerNetapp Steelstore Cloud Integrated Storage -Debian Debian Linux 8.0Oracle Agile Plm 9.3.6Oracle Banking Digital Experience 18.1Oracle Banking Digital Experience 18.2Oracle Banking Digital Experience 18.3Oracle Banking Digital Experience 19.1Oracle Banking Digital Experience 19.2Oracle Banking Digital Experience 20.1Oracle Communications Calendar Server 8.0.0.4.0
8.1
CVSSv3

CVE-2020-14061

FasterXML jackson-databind 2.x prior to 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to oracle.jms.AQjmsQueueConnectionFactory, oracle.jms.AQjmsXATopicConnectionFactory, oracle.jms.AQjmsTopicConnectionFactory, oracle.jms.AQjmsXAQueueConnec...
Fasterxml Jackson-databindNetapp Active Iq Unified ManagerNetapp Steelstore Cloud Integrated Storage -Debian Debian Linux 8.0Oracle Agile Plm 9.3.6Oracle Autovue For Agile Product Lifecycle Management 21.0.2Oracle Banking Digital Experience 18.1Oracle Banking Digital Experience 18.2Oracle Banking Digital Experience 18.3Oracle Banking Digital Experience 19.1Oracle Banking Digital Experience 19.2Oracle Banking Digital Experience 20.1
8.1
CVSSv3

CVE-2020-11620

FasterXML jackson-databind 2.x prior to 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.jelly.impl.Embedded (aka commons-jelly).
Fasterxml Jackson-databindDebian Debian Linux 8.0Netapp Active Iq Unified ManagerNetapp Steelstore Cloud Integrated Storage -Oracle Banking PlatformOracle Communications Contacts Server 8.0.0.4.0Oracle Communications Evolved Communications Application Server 7.1Oracle Communications Instant Messaging Server 10.0.1.4.0Oracle Communications Network Charging And ControlOracle Communications Network Charging And Control 6.0.1Oracle Enterprise Manager Base Platform 13.3.0.0Oracle Enterprise Manager Base Platform 13.4.0.0
9.8
CVSSv3

CVE-2020-9547

FasterXML jackson-databind 2.x prior to 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.ibatis.sqlmap.engine.transaction.jta.JtaTransactionConfig (aka ibatis-sqlmap).
Fasterxml Jackson-databindNetapp Active Iq Unified ManagerDebian Debian Linux 8.0Oracle Autovue For Agile Product Lifecycle Management 21.0.2Oracle Banking PlatformOracle Communications Contacts Server 8.0.0.4.0Oracle Communications Evolved Communications Application Server 7.1Oracle Communications Instant Messaging Server 10.0.1.4.0Oracle Communications Network Charging And ControlOracle Communications Network Charging And Control 6.0.1Oracle Enterprise Manager Base Platform 13.3.0.0Oracle Enterprise Manager Base Platform 13.4.0.0
8.1
CVSSv3

CVE-2020-11619

FasterXML jackson-databind 2.x prior to 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.springframework.aop.config.MethodLocatingFactoryBean (aka spring-aop).
Fasterxml Jackson-databindDebian Debian Linux 8.0Netapp Active Iq Unified ManagerNetapp Steelstore Cloud Integrated Storage -Oracle Agile Plm 9.3.6Oracle Banking PlatformOracle Communications Calendar Server 8.0.0.4.0Oracle Communications Contacts Server 8.0.0.4.0Oracle Communications Contacts Server 8.0.0.5.0Oracle Communications Diameter Signaling RouterOracle Communications Evolved Communications Application Server 7.1Oracle Communications Instant Messaging Server 10.0.1.4.0
4.8
CVSSv3

CVE-2019-17569

The refactoring present in Apache Tomcat 9.0.28 to 9.0.30, 8.5.48 to 8.5.50 and 7.0.98 to 7.0.99 introduced a regression. The result of the regression was that invalid Transfer-Encoding headers were incorrectly processed leading to a possibility of HTTP Request Smuggling if Tomca...
Apache TomcatApache Tomee 7.0.7Opensuse Leap 15.1Netapp Data Availability Services -Netapp Oncommand System ManagerDebian Debian Linux 9.0Debian Debian Linux 10.0Oracle Agile Engineering Data Management 6.2.1.0Oracle Agile Plm 9.3.3Oracle Agile Plm 9.3.5Oracle Agile Plm 9.3.6Oracle Communications Instant Messaging Server 10.0.1.4.0
9.8
CVSSv3

CVE-2020-1938

When using the Apache JServ Protocol (AJP), care must be taken when trusting incoming connections to Apache Tomcat. Tomcat treats AJP connections as having higher trust than, for example, a similar HTTP connection. If such connections are available to an attacker, they can be exp...
Apache Geode 1.12.0Apache TomcatFedoraproject Fedora 30Fedoraproject Fedora 31Fedoraproject Fedora 32Oracle Agile Engineering Data Management 6.2.1.0Oracle Agile Plm 9.3.3Oracle Agile Plm 9.3.5Oracle Agile Plm 9.3.6Oracle Communications Element Manager 8.1.1Oracle Communications Element Manager 8.2.0Oracle Communications Element Manager 8.2.1
4.8
CVSSv3

CVE-2020-1935

In Apache Tomcat 9.0.0.M1 to 9.0.30, 8.5.0 to 8.5.50 and 7.0.0 to 7.0.99 the HTTP header parsing code used an approach to end-of-line parsing that allowed some invalid HTTP headers to be parsed as valid. This led to a possibility of HTTP Request Smuggling if Tomcat was located be...
Apache TomcatApache Tomcat 9.0.0Debian Debian Linux 8.0Debian Debian Linux 9.0Debian Debian Linux 10.0Canonical Ubuntu Linux 16.04Opensuse Leap 15.1Netapp Data Availability Services -Netapp Oncommand System ManagerOracle Agile Engineering Data Management 6.2.1.0Oracle Agile Product Lifecycle Management 9.3.3Oracle Agile Product Lifecycle Management 9.3.5
8.8
CVSSv3

CVE-2020-11111

FasterXML jackson-databind 2.x prior to 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.activemq.* (aka activemq-jms, activemq-core, activemq-pool, and activemq-pool-jms).
Fasterxml Jackson-databindDebian Debian Linux 8.0Netapp Steelstore Cloud Integrated Storage -Oracle Agile Plm 9.3.6Oracle Autovue For Agile Product Lifecycle Management 21.0.2Oracle Banking Digital Experience 18.1Oracle Banking Digital Experience 18.2Oracle Banking Digital Experience 18.3Oracle Banking Digital Experience 19.1Oracle Banking Digital Experience 19.2Oracle Banking Digital Experience 20.1Oracle Banking Platform
9.8
CVSSv3

CVE-2020-9548

FasterXML jackson-databind 2.x prior to 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPConfig (aka anteros-core).
Fasterxml Jackson-databindNetapp Active Iq Unified ManagerDebian Debian Linux 8.0Oracle Agile Plm 9.3.6Oracle Autovue For Agile Product Lifecycle Management 21.0.2Oracle Banking Digital Experience 18.1Oracle Banking Digital Experience 18.2Oracle Banking Digital Experience 18.3Oracle Banking Digital Experience 19.1Oracle Banking Digital Experience 19.2Oracle Banking Digital Experience 20.1Oracle Banking Platform
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
log injectionCVE-2024-42327CVE-2024-53691cameraCVE-2024-53810CVE-2024-41649logic flawCVE-2024-38921CVE-2024-41713
Home
/
Search Results
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook