Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

oracle communications offline mediation controller 12.0.0.3.0 vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv3

CVE-2020-25648

A flaw was found in the way NSS handled CCS (ChangeCipherSpec) messages in TLS 1.3. This flaw allows a remote malicious user to send multiple CCS messages, causing a denial of service for servers compiled with the NSS library. The highest threat from this vulnerability is to syst...
Mozilla Network Security ServicesRedhat Enterprise Linux 7.0Redhat Enterprise Linux 8.0Fedoraproject Fedora 31Fedoraproject Fedora 32Fedoraproject Fedora 33Oracle Communications Offline Mediation Controller 12.0.0.3.0Oracle Communications Pricing Design Center 12.0.0.3.0Oracle Jd Edwards Enterpriseone Tools
7.5
CVSSv3

CVE-2020-28196

MIT Kerberos 5 (aka krb5) prior to 1.17.2 and 1.18.x prior to 1.18.3 allows unbounded recursion via an ASN.1-encoded Kerberos message because the lib/krb5/asn.1/asn1_encode.c support for BER indefinite lengths lacks a recursion limit.
Mit Kerberos 5Fedoraproject Fedora 31Netapp Active Iq Unified Manager -Netapp Cloud Backup -Netapp Oncommand Insight -Netapp Oncommand Workflow Automation -Netapp Snapcenter -Oracle Communications Cloud Native Core Policy 1.14.0Oracle Communications Offline Mediation Controller 12.0.0.3.0Oracle Communications Pricing Design Center 12.0.0.3.0Oracle Mysql Server
6.1
CVSSv3

CVE-2020-27783

A XSS vulnerability exists in python-lxml's clean module. The module's parser didn't properly imitate browsers, which caused different behaviors between the sanitizer and the user's page. A remote attacker could exploit this flaw to run arbitrary HTML/JS code.
Lxml LxmlRedhat Software Collections -Redhat Enterprise Linux 8.0Debian Debian Linux 9.0Debian Debian Linux 10.0Fedoraproject Fedora 32Fedoraproject Fedora 33Netapp Snapcenter -Oracle Communications Offline Mediation Controller 12.0.0.3.0Oracle Zfs Storage Appliance Kit 8.8
9.8
CVSSv3

CVE-2021-3177

Python 3.x up to and including 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may lead to remote code execution in certain Python applications that accept floating-point numbers as untrusted input, as demonstrated by a 1e300 argument to c_double.from_para...
Python PythonFedoraproject Fedora 32Fedoraproject Fedora 33Netapp Active Iq Unified Manager -Netapp Ontap Select Deploy Administration Utility -Debian Debian Linux 9.0Oracle Communications Cloud Native Core Network Function Cloud Native Environment 22.2.0Oracle Communications Offline Mediation Controller 12.0.0.3.0Oracle Communications Pricing Design Center 12.0.0.3.0Oracle Enterprise Manager Ops Center 12.4.0.0Oracle Zfs Storage Appliance Kit 8.8
5.9
CVSSv3

CVE-2021-23336

The package python/cpython from 0 and prior to 3.6.13, from 3.7.0 and prior to 3.7.10, from 3.8.0 and prior to 3.8.8, from 3.9.0 and prior to 3.9.2 are vulnerable to Web Cache Poisoning via urllib.parse.parse_qsl and urllib.parse.parse_qs by using a vector called parameter cloaki...
Python PythonFedoraproject Fedora 32Fedoraproject Fedora 33Fedoraproject Fedora 34Debian Debian Linux 9.0Netapp Cloud Backup -Netapp Inventory Collect Tool -Netapp Ontap Select Deploy Administration Utility -Netapp Snapcenter -Djangoproject DjangoOracle Communications Offline Mediation Controller 12.0.0.3.0Oracle Communications Pricing Design Center 12.0.0.3.0
7.1
CVSSv3

CVE-2021-28041

ssh-agent in OpenSSH prior to 8.5 has a double free that may be relevant in a few less-common scenarios, such as unconstrained agent-socket access on a legacy operating system, or the forwarding of an agent to an attacker-controlled host.
Openbsd OpensshFedoraproject Fedora 33Fedoraproject Fedora 34Netapp Cloud Backup -Netapp Hci Management Node -Netapp Solidfire -Netapp Hci Compute Node Firmware -Netapp Hci Storage Node Firmware -Oracle Communications Offline Mediation Controller 12.0.0.3.0Oracle Zfs Storage Appliance 8.8
4.8
CVSSv3

CVE-2020-27218

In Eclipse Jetty version 9.4.0.RC0 to 9.4.34.v20201102, 10.0.0.alpha0 to 10.0.0.beta2, and 11.0.0.alpha0 to 11.0.0.beta2, if GZIP request body inflation is enabled and requests from different clients are multiplexed onto a single connection, and if an attacker can send a request ...
Eclipse JettyEclipse Jetty 10.0.0Eclipse Jetty 11.0.0Netapp Oncommand System ManagerNetapp Snap Creator Framework -Oracle Blockchain PlatformOracle Communications Converged Application Server - Service Controller 6.2Oracle Communications Offline Mediation Controller 12.0.0.3.0Oracle Communications Pricing Design Center 12.0.0.3.0Oracle Communications Services Gatekeeper 7.0Oracle Communications Session Route ManagerOracle Flexcube Private Banking 12.0.0
7
CVSSv3

CVE-2020-27216

In Eclipse Jetty versions 1.0 thru 9.4.32.v20200930, 10.0.0.alpha1 thru 10.0.0.beta2, and 11.0.0.alpha1 thru 11.0.0.beta2O, on Unix like systems, the system's temporary directory is shared between all users on that system. A collocated user can observe the process of creatin...
Eclipse JettyEclipse Jetty 10.0.0Eclipse Jetty 11.0.0Netapp Snap Creator Framework -Netapp Snapcenter -Netapp Vasa ProviderNetapp Virtual Storage ConsoleNetapp Storage Replication AdapterOracle Communications Application Session Controller 3.9m0p2Oracle Communications Converged Application Server - Service Controller 6.2Oracle Communications Element ManagerOracle Communications Offline Mediation Controller 12.0.0.3.0
7.5
CVSSv3

CVE-2020-12723

regcomp.c in Perl prior to 5.30.3 allows a buffer overflow via a crafted regular expression because of recursive S_study_chunk calls.
Perl PerlNetapp Oncommand Workflow Automation -Netapp Snap Creator Framework -Fedoraproject Fedora 31Opensuse Leap 15.1Oracle Communications Billing And Revenue Management 12.0.0.2.0Oracle Communications Billing And Revenue Management 12.0.0.3.0Oracle Communications Diameter Signaling RouterOracle Communications Eagle Application ProcessorOracle Communications Eagle Lnp Application Processor 10.1Oracle Communications Eagle Lnp Application Processor 10.2Oracle Communications Lsms
8.2
CVSSv3

CVE-2020-10543

Perl prior to 5.30.3 on 32-bit platforms allows a heap-based buffer overflow because nested regular expression quantifiers have an integer overflow.
Perl PerlFedoraproject Fedora 31Opensuse Leap 15.1Oracle Communications Billing And Revenue Management 12.0.0.2.0Oracle Communications Billing And Revenue Management 12.0.0.3.0Oracle Communications Diameter Signaling RouterOracle Communications Eagle Application ProcessorOracle Communications Eagle Lnp Application Processor 10.1Oracle Communications Eagle Lnp Application Processor 10.2Oracle Communications Eagle Lnp Application Processor 46.7Oracle Communications Eagle Lnp Application Processor 46.8Oracle Communications Eagle Lnp Application Processor 46.9
Preferred Score:
CVSSv3
CVSSv2
CVSSv3
CVSSv4
EPSS
VMScore
Recommendations:
CVE-2024-55591CVE-2024-13184unauthorizedinformation disclosureCVE-2024-13385CVE-2024-43468denial of serviceCVE-2024-57370CVE-2025-21606
Home
/
Search Results
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook