What’s Vulnerable › Products
Oracle Communications Session Route Manager vulnerabilities
74 known vulnerabilities, 2 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.
Check whether your Oracle Communications Session Route Manager version is affected
Exploited Oracle Communications Session Route Manager vulnerabilities
- CVE-2020-11023 — JQuery Cross-Site Scripting (XSS) Vulnerability
- CVE-2019-0211 — Apache HTTP Server Privilege Escalation Vulnerability
Latest Oracle Communications Session Route Manager vulnerabilities
- CVE-2022-23437 — Infinite loop within Apache XercesJ xml parser (CVSS 6.5)
- CVE-2021-44790 — Possible buffer overflow when parsing multipart content in mod_lua of Apache HTTP Server 2.4.51 and earlier (CVSS 9.8)
- CVE-2021-44224 — Possible NULL dereference or SSRF in forward proxy configurations in Apache HTTP Server 2.4.51 and earlier (CVSS 8.2)
- CVE-2021-45105 — Apache Log4j2 does not always protect from infinite recursion in lookup evaluation (CVSS 5.9)
- CVE-2021-2351 — (CVSS 5.1)
- CVE-2021-36090 — Apache Commons Compress 1.0 to 1.20 denial of service vulnerability (CVSS 7.5)
- CVE-2021-35517 — Apache Commons Compress 1.1 to 1.20 denial of service vulnerability (CVSS 7.5)
- CVE-2021-35516 — Apache Commons Compress 1.6 to 1.20 denial of service vulnerability (CVSS 7.5)
- CVE-2021-35515 — Apache Commons Compress 1.6 to 1.20 denial of service vulnerability (CVSS 7.5)
- CVE-2021-33037 — Incorrect Transfer-Encoding handling with HTTP/1.0 (CVSS 5.3)
- CVE-2021-34428 — (CVSS 3.5)
- CVE-2021-22118 — (CVSS 7.8)
- CVE-2021-22696 — OAuth 2 authorization service vulnerable to DDos attacks (CVSS 7.5)
- CVE-2021-28165 — (CVSS 7.5)
- CVE-2021-28164 — (CVSS 5.3)
- CVE-2021-28163 — (CVSS 2.7)
- CVE-2020-13947 — (CVSS 6.1)
- CVE-2021-26117 — ActiveMQ: LDAP-Authentication does not verify passwords on servers with anonymous bind (CVSS 7.5)
- CVE-2020-36183 — Unsafe Deserialization in jackson-databind (CVSS 8.1)
- CVE-2020-36182 — Unsafe Deserialization in jackson-databind (CVSS 8.1)
- CVE-2020-36180 — Unsafe Deserialization in jackson-databind (CVSS 8.1)
- CVE-2020-36179 — Unsafe Deserialization in jackson-databind (CVSS 8.1)
- CVE-2020-36189 — Unsafe Deserialization in jackson-databind (CVSS 8.1)
- CVE-2020-36188 — Unsafe Deserialization in jackson-databind (CVSS 8.1)
- CVE-2020-36187 — Unsafe Deserialization in jackson-databind (CVSS 8.1)