What’s Vulnerable › Products
Oracle Corporation Communications Policy Management vulnerabilities
50 known vulnerabilities, 3 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.
Check whether your Oracle Corporation Communications Policy Management version is affected
Exploited Oracle Corporation Communications Policy Management vulnerabilities
- CVE-2022-22965 — Spring Framework JDK 9+ Remote Code Execution Vulnerability
- CVE-2020-17530 — Apache Struts Remote Code Execution Vulnerability
- CVE-2018-11776 — Apache Struts Remote Code Execution Vulnerability
Latest Oracle Corporation Communications Policy Management vulnerabilities
- CVE-2022-22965 — Spring Framework JDK 9+ Remote Code Execution Vulnerability (CVSS 9.8) — exploited
- CVE-2021-43859 — Denial of Service by injecting highly recursive collections or maps in XStream (CVSS 7.5)
- CVE-2021-23450 — Prototype Pollution (CVSS 9.8)
- CVE-2021-43527 — (CVSS 9.8)
- CVE-2021-33037 — Incorrect Transfer-Encoding handling with HTTP/1.0 (CVSS 5.3)
- CVE-2021-29425 — Possible limited path traversal vulnerabily in Apache Commons IO (CVSS 4.8)
- CVE-2021-21351 — XStream is vulnerable to an Arbitrary Code Execution attack (CVSS 9.1)
- CVE-2021-21350 — XStream is vulnerable to an Arbitrary Code Execution attack (CVSS 9.8)
- CVE-2021-21349 — A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host (CVSS 8.6)
- CVE-2021-21348 — XStream is vulnerable to an attack using Regular Expression for a Denial of Service (ReDos) (CVSS 7.5)
- CVE-2021-21347 — XStream is vulnerable to an Arbitrary Code Execution attack (CVSS 9.8)
- CVE-2021-21346 — XStream is vulnerable to an Arbitrary Code Execution attack (CVSS 9.8)
- CVE-2021-21345 — XStream is vulnerable to a Remote Command Execution attack (CVSS 9.9)
- CVE-2021-21344 — XStream is vulnerable to an Arbitrary Code Execution attack (CVSS 9.8)
- CVE-2021-21343 — XStream is vulnerable to an Arbitrary File Deletion on the local host when unmarshalling as long as the executing process has sufficient rights (CVSS 7.5)
- CVE-2021-21342 — A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host (CVSS 9.1)
- CVE-2020-36183 — Unsafe Deserialization in jackson-databind (CVSS 8.1)
- CVE-2020-36182 — Unsafe Deserialization in jackson-databind (CVSS 8.1)
- CVE-2020-36180 — Unsafe Deserialization in jackson-databind (CVSS 8.1)
- CVE-2020-36179 — Unsafe Deserialization in jackson-databind (CVSS 8.1)
- CVE-2020-36188 — Unsafe Deserialization in jackson-databind (CVSS 8.1)
- CVE-2020-36187 — Unsafe Deserialization in jackson-databind (CVSS 8.1)
- CVE-2020-36186 — Unsafe Deserialization in jackson-databind (CVSS 8.1)
- CVE-2020-36185 — Unsafe Deserialization in jackson-databind (CVSS 8.1)
- CVE-2020-36184 — Unsafe Deserialization in jackson-databind (CVSS 8.1)