What’s Vulnerable › Products

Oracle Corporation Oracle Communications BRM - Elastic Charging Engine vulnerabilities

36 known vulnerabilities, 1 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.

Check whether your Oracle Corporation Oracle Communications BRM - Elastic Charging Engine version is affected

Exploited Oracle Corporation Oracle Communications BRM - Elastic Charging Engine vulnerabilities

• CVE-2021-39144 — XStream Remote Code Execution Vulnerability

Latest Oracle Corporation Oracle Communications BRM - Elastic Charging Engine vulnerabilities

• CVE-2026-101793 — (CVSS 5.5)
• CVE-2026-101792 — (CVSS 5.9)
• CVE-2026-101791 — (CVSS 8.1)
• CVE-2026-101790 — (CVSS 3.3)
• CVE-2026-101763 — (CVSS 9.8)
• CVE-2026-61053 — (CVSS 7.8)
• CVE-2023-21824 — (CVSS 4.4)
• CVE-2021-39152 — A Server-Side Forgery Request vulnerability in XStream via HashMap unmarshaling (CVSS 8.5)
• CVE-2021-39150 — A Server-Side Forgery Request vulnerability in XStream via PriorityQueue unmarshaling (CVSS 8.5)
• CVE-2021-39140 — XStream can cause a Denial of Service (CVSS 6.3)
• CVE-2021-39154 — XStream is vulnerable to an Arbitrary Code Execution attack (CVSS 8.5)
• CVE-2021-39153 — XStream is vulnerable to an Arbitrary Code Execution attack (CVSS 8.5)
• CVE-2021-39151 — XStream is vulnerable to an Arbitrary Code Execution attack (CVSS 8.5)
• CVE-2021-39149 — XStream is vulnerable to an Arbitrary Code Execution attack (CVSS 8.5)
• CVE-2021-39148 — XStream is vulnerable to an Arbitrary Code Execution attack (CVSS 8.5)
• CVE-2021-39147 — XStream is vulnerable to an Arbitrary Code Execution attack (CVSS 8.5)
• CVE-2021-39146 — XStream is vulnerable to an Arbitrary Code Execution attack (CVSS 8.5)
• CVE-2021-39145 — XStream is vulnerable to an Arbitrary Code Execution attack (CVSS 8.5)
• CVE-2021-39144 — XStream Remote Code Execution Vulnerability (CVSS 8.5) — exploited
• CVE-2021-39141 — XStream is vulnerable to an Arbitrary Code Execution attack (CVSS 8.5)
• CVE-2021-39139 — XStream is vulnerable to an Arbitrary Code Execution attack (CVSS 8.8)
• CVE-2021-29425 — Possible limited path traversal vulnerabily in Apache Commons IO (CVSS 4.8)
• CVE-2021-21351 — XStream is vulnerable to an Arbitrary Code Execution attack (CVSS 9.1)
• CVE-2021-21350 — XStream is vulnerable to an Arbitrary Code Execution attack (CVSS 9.8)
• CVE-2021-21349 — A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host (CVSS 8.6)