What’s Vulnerable › Products
Oracle Communications Messaging Server vulnerabilities
41 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.
Check whether your Oracle Communications Messaging Server version is affected
Latest Oracle Communications Messaging Server vulnerabilities
- CVE-2022-23307 — A deserialization flaw in the Chainsaw component of Log4j 1 can lead to malicious code execution. (CVSS 8.8)
- CVE-2022-23305 — SQL injection in JDBC Appender in Apache Log4j V1 (CVSS 9.8)
- CVE-2022-23302 — Deserialization of untrusted data in JMSSink in Apache Log4j 1.x (CVSS 8.8)
- CVE-2021-45105 — Apache Log4j2 does not always protect from infinite recursion in lookup evaluation (CVSS 5.9)
- CVE-2021-4104 — Deserialization of untrusted data in JMSAppender in Apache Log4j 1.2 (CVSS 7.5)
- CVE-2021-40690 — Bypass of the secureValidation property (CVSS 7.5)
- CVE-2021-37714 — Crafted input may cause the jsoup HTML and XML parser to get stuck, timeout, or throw unchecked exceptions (CVSS 7.5)
- CVE-2021-36090 — Apache Commons Compress 1.0 to 1.20 denial of service vulnerability (CVSS 7.5)
- CVE-2021-35517 — Apache Commons Compress 1.1 to 1.20 denial of service vulnerability (CVSS 7.5)
- CVE-2021-35516 — Apache Commons Compress 1.6 to 1.20 denial of service vulnerability (CVSS 7.5)
- CVE-2021-35515 — Apache Commons Compress 1.6 to 1.20 denial of service vulnerability (CVSS 7.5)
- CVE-2021-33813 — (CVSS 7.5)
- CVE-2021-30468 — Apache CXF Denial of service vulnerability in parsing JSON via JsonMapObjectReaderWriter (CVSS 7.5)
- CVE-2021-31812 — A carefully crafted PDF file can trigger an infinite loop while loading the file (CVSS 5.5)
- CVE-2021-31811 — A carefully crafted PDF file can trigger an OutOfMemory-Exception while loading a tiny file (CVSS 5.5)
- CVE-2021-28657 — Infinite loop in Apache Tika's MP3 parser (CVSS 5.5)
- CVE-2021-21409 — Possible request smuggling in HTTP/2 due missing validation of content-length (CVSS 5.9)
- CVE-2021-27906 — A carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file (CVSS 5.5)
- CVE-2021-27807 — A carefully crafted PDF file can trigger an infinite loop while loading the file (CVSS 5.5)
- CVE-2021-21290 — Local Information Disclosure Vulnerability in Netty on Unix-Like systems due temporary files (CVSS 5.5)
- CVE-2020-36189 — Unsafe Deserialization in jackson-databind (CVSS 8.1)
- CVE-2020-28052 — (CVSS 8.1)
- CVE-2020-25649 — XML External Entity (XXE) Injection in Jackson Databind (CVSS 7.5)
- CVE-2020-13954 — Apache CXF Reflected XSS in the services listing page via the styleSheetPath (CVSS 6.1)
- CVE-2020-24750 — Unsafe Deserialization in jackson-databind (CVSS 8.1)