What’s Vulnerable › Products

Oracle Corporation Communications Diameter Signaling Router (DSR) vulnerabilities

80 known vulnerabilities, 2 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Check whether your Oracle Corporation Communications Diameter Signaling Router (DSR) version is affected

Exploited Oracle Corporation Communications Diameter Signaling Router (DSR) vulnerabilities

• CVE-2017-9841 — PHPUnit Command Injection Vulnerability
• CVE-2020-2555 — Oracle Multiple Products Remote Code Execution Vulnerability

Latest Oracle Corporation Communications Diameter Signaling Router (DSR) vulnerabilities

• CVE-2021-44832 — Apache Log4j2 vulnerable to RCE via JDBC Appender when attacker controls configuration (CVSS 6.6)
• CVE-2021-45105 — Apache Log4j2 does not always protect from infinite recursion in lookup evaluation (CVSS 5.9)
• CVE-2021-21703 — PHP-FPM memory access in root process leading to privilege escalation (CVSS 7.0)
• CVE-2021-37137 — (CVSS 7.5)
• CVE-2021-37136 — (CVSS 7.5)
• CVE-2021-42340 — DoS via memory leak with WebSocket connections (CVSS 7.5)
• CVE-2021-34429 — (CVSS 5.3)
• CVE-2021-33037 — Incorrect Transfer-Encoding handling with HTTP/1.0 (CVSS 5.3)
• CVE-2021-30640 — Auth weakness in JNDIRealm (CVSS 6.5)
• CVE-2021-21783 — (CVSS 9.8)
• CVE-2021-21702 — Null Dereference in SoapClient (CVSS 7.5)
• CVE-2020-36189 — Unsafe Deserialization in jackson-databind (CVSS 8.1)
• CVE-2020-35490 — Serialization gadgets exploit in jackson-databind (CVSS 8.1)
• CVE-2020-17521 — (CVSS 5.5)
• CVE-2020-14788 — (CVSS 5.8)
• CVE-2020-14787 — (CVSS 4.9)
• CVE-2020-7069 — Wrong ciphertext/tag in AES-CCM encryption for a 12 bytes IV (CVSS 6.5)
• CVE-2020-24750 — Unsafe Deserialization in jackson-databind (CVSS 8.1)
• CVE-2020-13920 — (CVSS 5.9)
• CVE-2020-11998 — (CVSS 9.8)
• CVE-2020-24616 — Code Injection in jackson-databind (CVSS 8.1)
• CVE-2020-8622 — A truncated TSIG response can lead to an assertion failure (CVSS 6.5)
• CVE-2020-11994 — (CVSS 7.5)
• CVE-2020-14195 — Deserialization of untrusted data in Jackson Databind (CVSS 8.1)
• CVE-2020-14060 — Deserialization of untrusted data in Jackson Databind (CVSS 8.1)