oracle communications interactive session recorder 6.4 vulnerabilities and exploits

Vulnerability in the Oracle Communications Interactive Session Recorder product of Oracle Communications (component: Provision API). The supported version that is affected is 6.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to com...

Oracle Communications Interactive Session Recorder 6.4

8.8

CVSSv3

Spring Security 5.4.x before 5.4.4, 5.3.x before 5.3.8.RELEASE, 5.2.x before 5.2.9.RELEASE, and older unsupported versions can fail to save the SecurityContext if it is changed more than once in a single request.A malicious user cannot cause the bug to happen (it must be programm...

Pivotal Software Spring Security Vmware Spring Security Oracle Communications Element Manager Oracle Communications Interactive Session Recorder 6.3 Oracle Communications Interactive Session Recorder 6.4 Oracle Communications Unified Inventory Management 7.4.1 Oracle Hospitality Cruise Shipboard Property Management System 20.1.0 Oracle Insurance Policy Administration 11.2.0 Oracle Insurance Policy Administration 11.3.0 Oracle Mysql Enterprise Monitor

1 Github repository

4.7

CVSSv3

Vulnerability in the Oracle Communications Interactive Session Recorder product of Oracle Communications Applications (component: FACE). Supported versions that are affected are 6.1-6.4. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastr...

Oracle Communications Interactive Session Recorder

8.1

CVSSv3

FasterXML jackson-databind 2.x prior to 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.PerUserPoolDataSource.

Fasterxml Jackson-databind Netapp Service Level Manager -Debian Debian Linux 9.0 Oracle Agile Plm 9.3.6 Oracle Application Testing Suite 13.3.0.1 Oracle Autovue For Agile Product Lifecycle Management 21.0.2 Oracle Banking Platform 2.6.2 Oracle Banking Platform 2.7.0 Oracle Banking Platform 2.7.1 Oracle Banking Platform 2.8.0 Oracle Banking Platform 2.9.0 Oracle Banking Platform 2.10.0

8.1

CVSSv3

FasterXML jackson-databind 2.x prior to 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.DriverManagerConnectionSource.

Fasterxml Jackson-databind Netapp Cloud Backup -Netapp Service Level Manager -Debian Debian Linux 9.0 Oracle Agile Plm 9.3.6 Oracle Application Testing Suite 13.3.0.1 Oracle Autovue For Agile Product Lifecycle Management 21.0.2 Oracle Banking Platform 2.6.2 Oracle Banking Platform 2.7.0 Oracle Banking Platform 2.7.1 Oracle Banking Platform 2.8.0 Oracle Banking Platform 2.9.0

7.5

CVSSv3

A flaw was found in FasterXML Jackson Databind, where it did not have entity expansion secured properly. This flaw allows vulnerability to XML external entity (XXE) attacks. The highest threat from this vulnerability is data integrity.

Fasterxml Jackson-databind Netapp Oncommand Api Services -Netapp Oncommand Workflow Automation -Netapp Service Level Manager -Fedoraproject Fedora 32 Quarkus Quarkus Apache Iotdb Oracle Agile Plm 9.3.6 Oracle Agile Product Lifecycle Management Integration Pack 3.6 Oracle Banking Apis Oracle Banking Apis 19.1 Oracle Banking Apis 19.2

1 Github repository1 Article

7.8

CVSSv3

In Spring Framework, versions 5.2.x before 5.2.15 and versions 5.3.x before 5.3.7, a WebFlux application is vulnerable to a privilege escalation: by (re)creating the temporary storage directory, a locally authenticated malicious user can read or modify files that have been upload...

6.1

CVSSv3

jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the `of` option of the `.position()` util from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. Any string value passed to the `of` option...

Jqueryui Jquery Ui Fedoraproject Fedora 33 Fedoraproject Fedora 34 Fedoraproject Fedora 35 Fedoraproject Fedora 36 Netapp H300s Firmware -Netapp H500s Firmware -Netapp H700s Firmware -Netapp H300e Firmware -Netapp H500e Firmware -Netapp H700e Firmware -Netapp H410s Firmware -

6.1

CVSSv3

jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of various `*Text` options of the Datepicker widget from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. The values passed to various `*Text...

6.1

CVSSv3

jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the `altField` option of the Datepicker widget from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. Any string value passed to the `altFi...

Jqueryui Jquery Ui Fedoraproject Fedora 33 Fedoraproject Fedora 34 Fedoraproject Fedora 35 Fedoraproject Fedora 36 Netapp H500s Firmware -Netapp H700s Firmware -Netapp H300e Firmware -Netapp H500e Firmware -Netapp H700e Firmware -Netapp H410s Firmware -Netapp H410c Firmware -

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

oracle communications interactive session recorder 6.4 vulnerabilities and exploits

CVE-2021-2461

CVE-2021-22112

CVE-2020-14574

CVE-2020-35490

CVE-2020-36189

CVE-2020-25649

CVE-2021-22118

CVE-2021-41184

CVE-2021-41183

CVE-2021-41182

Vulmon Search

About

Products

Connect