What’s Vulnerable › Products
Oracle Corporation Communications BRM - Elastic Charging Engine vulnerabilities
14 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.
Latest Oracle Corporation Communications BRM - Elastic Charging Engine vulnerabilities
- CVE-2021-43859 — Denial of Service by injecting highly recursive collections or maps in XStream (CVSS 7.5)
- CVE-2021-44832 — Apache Log4j2 vulnerable to RCE via JDBC Appender when attacker controls configuration (CVSS 6.6)
- CVE-2021-37137 — (CVSS 7.5)
- CVE-2021-37136 — (CVSS 7.5)
- CVE-2021-38153 — Timing Attack Vulnerability for Apache Kafka Connect and Clients (CVSS 5.9)
- CVE-2021-29505 — XStream is vulnerable to a Remote Command Execution attack (CVSS 8.8)
- CVE-2021-22118 — (CVSS 7.8)
- CVE-2021-21409 — Possible request smuggling in HTTP/2 due missing validation of content-length (CVSS 5.9)
- CVE-2021-21342 — A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host (CVSS 9.1)
- CVE-2021-21290 — Local Information Disclosure Vulnerability in Netty on Unix-Like systems due temporary files (CVSS 5.5)
- CVE-2020-17521 — (CVSS 5.5)
- CVE-2020-11612 — (CVSS 7.5)
- CVE-2020-5397 — CSRF Attack via CORS Preflight Requests with Spring MVC or Spring WebFlux (CVSS 5.3)
- CVE-2018-15756 — DoS Attack via Range Requests (CVSS 7.5)