Recently modified vulnerabilities for "oracle communications billing and revenue management elastic charging engine"

9.8

First published (updated )

CVE-2019-10173

Oracle Banking APIsPossible limited path traversal vulnerabily in Apache Commons IO

5.8

First published (updated )

CVE-2021-29425

Oracle UtilitiesXStream is vulnerable to a Remote Command Execution attack

8.5

Exploited

First published (updated )

CVE-2021-39144

Oracle Banking Digital ExperienceLast updated 24 July 2024

7.5

First published (updated )

CVE-2021-37136

Oracle Financial Services Enterprise Case ManagementTiming Attack Vulnerability for Apache Kafka Connect and Clients

5.9

First published (updated )

CVE-2021-38153

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Oracle UtilitiesA flaw was found in the Apache Commons BeanUtils, where the class property in PropertyUtilsBean is n…

7.5

First published (updated )

CVE-2019-10086

Apache Log4jApache log4j2 log messages substitution (CVE-2021-44228)

9.8

Zeroday

First published (updated )

CVE-2021-44832

Oracle Banking Digital ExperienceLast updated 24 July 2024

7.5

First published (updated )

CVE-2021-37137

redhat/eap7-elytron-webPossible request smuggling in HTTP/2 due missing validation of content-length

5.9

First published (updated )

CVE-2021-21409

Oracle Communications Unified Inventory ManagementA Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host

8.6

First published (updated )

CVE-2021-21349

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Oracle Communications Unified Inventory ManagementXStream is vulnerable to an Arbitrary Code Execution attack

9.8

First published (updated )

CVE-2021-21350

Oracle Communications Unified Inventory ManagementXStream is vulnerable to an attack using Regular Expression for a Denial of Service (ReDos)

7.8

First published (updated )

CVE-2021-21348

Oracle Communications Unified Inventory ManagementXStream is vulnerable to an Arbitrary Code Execution attack

9.1

First published (updated )

CVE-2021-21351

Oracle Communications Unified Inventory ManagementXStream is vulnerable to a Remote Command Execution attack

9.9

First published (updated )

CVE-2021-21345

Oracle Communications Unified Inventory ManagementXStream is vulnerable to an Arbitrary File Deletion on the local host when unmarshalling as long as the executing process has sufficient rights

7.5

First published (updated )

CVE-2021-21343

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Oracle Communications Unified Inventory ManagementXStream is vulnerable to an Arbitrary Code Execution attack

9.8

First published (updated )

CVE-2021-21346

Oracle Communications Unified Inventory ManagementXStream is vulnerable to an Arbitrary Code Execution attack

9.8

First published (updated )

CVE-2021-21347

Oracle Communications Unified Inventory ManagementXStream is vulnerable to an Arbitrary Code Execution attack

9.8

First published (updated )

CVE-2021-21344

Oracle Communications Unified Inventory ManagementXStream can cause a Denial of Service

7.5

First published (updated )

CVE-2021-21341

Oracle Communications Unified Inventory ManagementA Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or the local host

9.1

First published (updated )

CVE-2021-21342

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

redhat/eap7-artemis-wildfly-integrationLocal Information Disclosure Vulnerability in Netty on Unix-Like systems due temporary files

6.2

First published (updated )

CVE-2021-21290

redhat/qpid-cppBuffer Overflow

7.5

First published (updated )

CVE-2020-11612

Oracle UnifierInfoleak

5.5

First published (updated )

CVE-2020-17521

Oracle Insurance Policy AdministrationXSS

6.5

First published (updated )

CVE-2019-10219

Oracle Communications Billing and Revenue Management Elastic Charging EngineVulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communica…

4.4

First published (updated )

CVE-2023-21824

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Oracle Insurance Policy AdministrationCSRF Attack via CORS Preflight Requests with Spring MVC or Spring WebFlux

5.3

First published (updated )

CVE-2020-5397

Oracle Insurance Rules PaletteDoS Attack via Range Requests

7.5

First published (updated )

CVE-2018-15756

Oracle Insurance Policy AdministrationRFD Attack via "Content-Disposition" Header Sourced from Request Input by Spring MVC or Spring WebFlux Application

8

First published (updated )

CVE-2020-5398

Oracle Retail Xstore Office Cloud ServiceDenial of Service by injecting highly recursive collections or maps in XStream

7.5

First published (updated )

CVE-2021-43859

Oracle UtilitiesXStream is vulnerable to an Arbitrary Code Execution attack

8.8

First published (updated )

CVE-2021-39139

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.