Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

oracle communications pricing design center 12.0.0.3.0 vulnerabilities and exploits

(subscribe to this query)
3.3
CVSSv3

CVE-2022-21388

Vulnerability in the Oracle Communications Pricing Design Center product of Oracle Communications Applications (component: On Premise Install). Supported versions that are affected are 12.0.0.3.0 and 12.0.0.4.0. Easily exploitable vulnerability allows low privileged attacker with...
Oracle Communications Pricing Design Center 12.0.0.3.0Oracle Communications Pricing Design Center 12.0.0.4.0
7.5
CVSSv3

CVE-2020-25648

A flaw was found in the way NSS handled CCS (ChangeCipherSpec) messages in TLS 1.3. This flaw allows a remote malicious user to send multiple CCS messages, causing a denial of service for servers compiled with the NSS library. The highest threat from this vulnerability is to syst...
Mozilla Network Security ServicesRedhat Enterprise Linux 7.0Redhat Enterprise Linux 8.0Fedoraproject Fedora 31Fedoraproject Fedora 32Fedoraproject Fedora 33Oracle Communications Offline Mediation Controller 12.0.0.3.0Oracle Communications Pricing Design Center 12.0.0.3.0Oracle Jd Edwards Enterpriseone Tools
7.5
CVSSv3

CVE-2020-28196

MIT Kerberos 5 (aka krb5) prior to 1.17.2 and 1.18.x prior to 1.18.3 allows unbounded recursion via an ASN.1-encoded Kerberos message because the lib/krb5/asn.1/asn1_encode.c support for BER indefinite lengths lacks a recursion limit.
Mit Kerberos 5Fedoraproject Fedora 31Netapp Active Iq Unified Manager -Netapp Cloud Backup -Netapp Oncommand Insight -Netapp Oncommand Workflow Automation -Netapp Snapcenter -Oracle Communications Cloud Native Core Policy 1.14.0Oracle Communications Offline Mediation Controller 12.0.0.3.0Oracle Communications Pricing Design Center 12.0.0.3.0Oracle Mysql Server
9.8
CVSSv3

CVE-2021-3177

Python 3.x up to and including 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may lead to remote code execution in certain Python applications that accept floating-point numbers as untrusted input, as demonstrated by a 1e300 argument to c_double.from_para...
Python PythonFedoraproject Fedora 32Fedoraproject Fedora 33Netapp Active Iq Unified Manager -Netapp Ontap Select Deploy Administration Utility -Debian Debian Linux 9.0Oracle Communications Cloud Native Core Network Function Cloud Native Environment 22.2.0Oracle Communications Offline Mediation Controller 12.0.0.3.0Oracle Communications Pricing Design Center 12.0.0.3.0Oracle Enterprise Manager Ops Center 12.4.0.0Oracle Zfs Storage Appliance Kit 8.8
5.9
CVSSv3

CVE-2021-23336

The package python/cpython from 0 and prior to 3.6.13, from 3.7.0 and prior to 3.7.10, from 3.8.0 and prior to 3.8.8, from 3.9.0 and prior to 3.9.2 are vulnerable to Web Cache Poisoning via urllib.parse.parse_qsl and urllib.parse.parse_qs by using a vector called parameter cloaki...
Python PythonFedoraproject Fedora 32Fedoraproject Fedora 33Fedoraproject Fedora 34Debian Debian Linux 9.0Netapp Cloud Backup -Netapp Inventory Collect Tool -Netapp Ontap Select Deploy Administration Utility -Netapp Snapcenter -Djangoproject DjangoOracle Communications Offline Mediation Controller 12.0.0.3.0Oracle Communications Pricing Design Center 12.0.0.3.0
6.5
CVSSv3

CVE-2021-30640

A vulnerability in the JNDI Realm of Apache Tomcat allows an malicious user to authenticate using variations of a valid user name and/or to bypass some of the protection provided by the LockOut Realm. This issue affects Apache Tomcat 10.0.0-M1 to 10.0.5; 9.0.0.M1 to 9.0.45; 8.5.0...
Apache TomcatOracle Communications Cloud Native Core Policy 1.14.0Oracle Communications Diameter Signaling RouterOracle Communications Pricing Design Center 12.0.0.3.0Oracle Hospitality Cruise Shipboard Property Management System 20.1.0Oracle Tekelec Platform DistributionDebian Debian Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0
7.7
CVSSv3

CVE-2020-5258

In affected versions of dojo (NPM package), the deepCopy method is vulnerable to Prototype Pollution. Prototype Pollution refers to the ability to inject properties into existing JavaScript language construct prototypes, such as objects. An attacker manipulates these attributes t...
Linuxfoundation DojoDebian Debian Linux 8.0Oracle Communications Application Session Controller 3.9.0Oracle Communications Policy Management 12.5.0Oracle Communications Pricing Design Center 12.0.0.3.0Oracle DocumakerOracle MysqlOracle Primavera UnifierOracle Primavera Unifier 18.8Oracle Primavera Unifier 19.12Oracle Primavera Unifier 20.12Oracle Webcenter Sites 12.2.1.3.0
6.5
CVSSv3

CVE-2020-6950

Directory traversal in Eclipse Mojarra prior to 2.3.14 allows malicious users to read arbitrary files via the loc parameter or con parameter.
Eclipse MojarraOracle Banking Enterprise Default Management 2.10.0Oracle Banking Enterprise Default Management 2.12.0Oracle Banking Platform 2.6.2Oracle Banking Platform 2.7.1Oracle Banking Platform 2.9.0Oracle Banking Platform 2.12.0Oracle Communications Network Integrity 7.3.6Oracle Communications Pricing Design Center 12.0.0.3.0Oracle Hyperion Calculation ManagerOracle Retail Merchandising System 19.0.1Oracle Solaris Cluster 4.0
8.2
CVSSv3

CVE-2020-10543

Perl prior to 5.30.3 on 32-bit platforms allows a heap-based buffer overflow because nested regular expression quantifiers have an integer overflow.
Perl PerlFedoraproject Fedora 31Opensuse Leap 15.1Oracle Communications Billing And Revenue Management 12.0.0.2.0Oracle Communications Billing And Revenue Management 12.0.0.3.0Oracle Communications Diameter Signaling RouterOracle Communications Eagle Application ProcessorOracle Communications Eagle Lnp Application Processor 10.1Oracle Communications Eagle Lnp Application Processor 10.2Oracle Communications Eagle Lnp Application Processor 46.7Oracle Communications Eagle Lnp Application Processor 46.8Oracle Communications Eagle Lnp Application Processor 46.9
9.8
CVSSv3

CVE-2020-17530

Forced OGNL evaluation, when evaluated on raw user input in tag attributes, may lead to remote code execution. Affected software : Apache Struts 2.0.0 - Struts 2.5.25.
Apache StrutsOracle Business Intelligence 12.2.1.3.0Oracle Business Intelligence 12.2.1.4.0Oracle Communications Diameter Intelligence Hub 8.0.0Oracle Communications Diameter Intelligence Hub 8.1.0Oracle Communications Diameter Intelligence Hub 8.2.0Oracle Communications Diameter Intelligence Hub 8.2.3Oracle Communications Policy Management 12.5.0Oracle Communications Pricing Design Center 12.0.0.3.0Oracle Financial Services Data Integration Hub 8.0.3Oracle Financial Services Data Integration Hub 8.0.6Oracle Hospitality Opera 5 5.6
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
SQL injectionCVE-2024-52320SQLlogic flawCVE-2024-6387CVE-2024-11457CVE-2024-11329CVE-2024-50404CVE-2023-48788
Home
/
Search Results
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook