Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

oracle communications session route manager 8.1.1 vulnerabilities and exploits

(subscribe to this query)
6.1
CVSSv3

CVE-2020-1941

In Apache ActiveMQ 5.0.0 to 5.15.11, the webconsole admin GUI is open to XSS, in the view that lists the contents of a queue.
Apache ActivemqOracle Communications Diameter Signaling RouterOracle Communications Element Manager 8.1.1Oracle Communications Element Manager 8.2.0Oracle Communications Element Manager 8.2.1Oracle Communications Session Report Manager 8.1.1Oracle Communications Session Report Manager 8.2.0Oracle Communications Session Report Manager 8.2.1Oracle Communications Session Route Manager 8.1.1Oracle Communications Session Route Manager 8.2.0Oracle Communications Session Route Manager 8.2.1Oracle Enterprise Repository 11.1.1.7.0
6.1
CVSSv3

CVE-2019-17573

By default, Apache CXF creates a /services page containing a listing of the available endpoint names and addresses. This webpage is vulnerable to a reflected Cross-Site Scripting (XSS) attack, which allows a malicious actor to inject javascript into the web page. Please note that...
Apache CxfOracle Commerce Guided Search 11.3.2Oracle Communications Element Manager 8.1.1Oracle Communications Element Manager 8.2.0Oracle Communications Element Manager 8.2.1Oracle Communications Session Report Manager 8.1.1Oracle Communications Session Report Manager 8.2.0Oracle Communications Session Report Manager 8.2.1Oracle Communications Session Route Manager 8.1.1Oracle Communications Session Route Manager 8.2.0Oracle Communications Session Route Manager 8.2.1Oracle Flexcube Private Banking 12.0.0
7.5
CVSSv3

CVE-2019-12423

Apache CXF ships with a OpenId Connect JWK Keys service, which allows a client to obtain the public keys in JWK format, which can then be used to verify the signature of tokens issued by the service. Typically, the service obtains the public key from a local keystore (JKS/PKCS12)...
Apache CxfOracle Commerce Guided Search 11.3.2Oracle Communications Diameter Signaling RouterOracle Communications Element ManagerOracle Communications Session Report ManagerOracle Communications Session Route Manager 8.1.1Oracle Communications Session Route Manager 8.2.0Oracle Communications Session Route Manager 8.2.1Oracle Flexcube Private Banking 12.0.0Oracle Flexcube Private Banking 12.1.0Oracle Retail Order Broker 15.0
5.3
CVSSv3

CVE-2020-1934

In Apache HTTP Server 2.4.0 to 2.4.41, mod_proxy_ftp may use uninitialized memory when proxying to a malicious FTP server.
Apache Http ServerFedoraproject Fedora 31Fedoraproject Fedora 32Debian Debian Linux 9.0Debian Debian Linux 10.0Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 20.04Opensuse Leap 15.1Oracle Communications Element Manager 8.1.1Oracle Communications Element Manager 8.2.0Oracle Communications Element Manager 8.2.1
7.2
CVSSv3

CVE-2019-10097

In Apache HTTP Server 2.4.32-2.4.39, when mod_remoteip was configured to use a trusted intermediary proxy server using the "PROXY" protocol, a specially crafted PROXY header could trigger a stack buffer overflow or NULL pointer deference. This vulnerability could only b...
Apache Http Server 2.4.33Apache Http Server 2.4.34Apache Http Server 2.4.35Apache Http Server 2.4.37Apache Http Server 2.4.38Oracle Communications Element Manager 8.0.0Oracle Communications Element Manager 8.1.0Oracle Communications Element Manager 8.1.1Oracle Communications Element Manager 8.2.0Oracle Communications Session Report Manager 8.1.1Oracle Communications Session Report Manager 8.2.0Oracle Communications Session Report Manager 8.2.1
6.1
CVSSv3

CVE-2020-1927

In Apache HTTP Server 2.4.0 to 2.4.41, redirects configured with mod_rewrite that were intended to be self-referential might be fooled by encoded newlines and redirect instead to an an unexpected URL within the request URL.
Apache Http ServerFedoraproject Fedora 31Fedoraproject Fedora 32Debian Debian Linux 9.0Debian Debian Linux 10.0Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 20.04Opensuse Leap 15.1Netapp Oncommand Unified Manager Core Package -Broadcom Brocade Fabric Operating System -Oracle Communications Element Manager 8.1.1
4.2
CVSSv3

CVE-2019-0197

A vulnerability was found in Apache HTTP Server 2.4.34 to 2.4.38. When HTTP/2 was enabled for a http: host or H2Upgrade was enabled for h2 on a https: host, an Upgrade request from http/1.1 to http/2 that was not the first request on a connection could lead to a misconfiguration ...
Apache Http ServerCanonical Ubuntu Linux 16.04Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 19.04Fedoraproject Fedora 30Opensuse Leap 15.0Opensuse Leap 42.3Redhat Jboss Core Services 1.0Oracle Communications Session Report Manager 8.0.0Oracle Communications Session Report Manager 8.1.0Oracle Communications Session Report Manager 8.1.1Oracle Communications Session Report Manager 8.2.0
5.3
CVSSv3

CVE-2019-10246

In Eclipse Jetty version 9.2.27, 9.3.26, and 9.4.16, the server running on Windows is vulnerable to exposure of the fully qualified Base Resource directory name on Windows to a remote client when it is configured for showing a Listing of directory contents. This information revea...
Eclipse Jetty 9.2.27Eclipse Jetty 9.3.26Eclipse Jetty 9.4.16Netapp Oncommand System ManagerNetapp Snap Creator Framework -Netapp Snapcenter -Netapp Snapmanager -Netapp Storage Replication Adapter For Clustered Data OntapNetapp Storage Replication Adapter For Clustered Data Ontap 9.6Netapp Storage Services Connector -Netapp Vasa Provider For Clustered Data OntapNetapp Vasa Provider For Clustered Data Ontap -
7.5
CVSSv3

CVE-2019-0227

A Server Side Request Forgery (SSRF) vulnerability affected the Apache Axis 1.4 distribution that was last released in 2006. Security and bug commits commits continue in the projects Axis 1.x Subversion repository, legacy users are encouraged to build from source. The successor t...
Apache Axis 1.4Oracle Agile Engineering Data Management 6.2.1.0Oracle Agile Product Lifecycle Management Framework 9.3.3Oracle Application Testing Suite 13.2.0.1Oracle Application Testing Suite 13.3.0.1Oracle Big Data Discovery 1.6Oracle Communications Asap Cartridges 7.2Oracle Communications Asap Cartridges 7.3Oracle Communications Design Studio 7.3.4.3.0Oracle Communications Design Studio 7.3.5.5.0Oracle Communications Design Studio 7.4.0.4.0Oracle Communications Design Studio 7.4.1.1.0
6.1
CVSSv3

CVE-2018-8032

Apache Axis 1.x up to and including 1.4 is vulnerable to a cross-site scripting (XSS) attack in the default servlet/services.
Apache AxisOracle Agile Engineering Data Management 6.2.1.0Oracle Agile Product Lifecycle Management Framework 9.3.3Oracle Application Testing Suite 13.2.0.1Oracle Application Testing Suite 13.3.0.1Oracle Big Data Discovery 1.6Oracle Communications Asap Cartridges 7.2Oracle Communications Asap Cartridges 7.3Oracle Communications Design Studio 7.3.4.3.0Oracle Communications Design Studio 7.3.5.5.0Oracle Communications Design Studio 7.4.0.4.0Oracle Communications Design Studio 7.4.1.1.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-12326CVE-2024-44852XSSprivilege escalationCSRFCVE-2024-12115CVE-2024-38925CVE-2024-38144CVE-2024-6387
Home
/
Search Results
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook