Oracle Communications Offline Mediation Controller vulnerabilities, page 2
37 vulnerabilities
Known vulnerabilities in Oracle Communications Offline Mediation Controller, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
HighCVE-2020-25649apache · iotdb +139 moreapache iotdbA flaw was found in FasterXML Jackson Databind, where it did not have entity expansion secured properly. This flaw allows vulnerability to XML external entity (XXE) attacks. The highest threat from this vulnerability is data integrity.EPSS17.71%HighCVE-2020-27216apache · beam +264 moreapache beamIn Eclipse Jetty versions 1.0 thru 9.4.32.v20200930, 10.0.0.alpha1 thru 10.0.0.beta2, and 11.0.0.alpha1 thru 11.0.0.beta2O, on Unix like systems, the system's temporary directory is shared between all users on that system. A collocated user can observe the process of creating a temporary sub directory in the shared temporary directory and race to complete the creation of the temporary subdirectory. If the attacker wins the race then they will have read and write permission to the subdirectory used to unpack web applications, including their WEB-INF/lib jar files and JSP files. If any code is ever executed out of this temporary directory, this can lead to a local privilege escalation vulnerability.EPSS4.35%MediumCVE-2020-27218apache · kafka +24 moreapache kafkaIn Eclipse Jetty version 9.4.0.RC0 to 9.4.34.v20201102, 10.0.0.alpha0 to 10.0.0.beta2, and 11.0.0.alpha0 to 11.0.0.beta2, if GZIP request body inflation is enabled and requests from different clients are multiplexed onto a single connection, and if an attacker can send a request with a body that is received entirely but not consumed by the application, then a subsequent request on the same connection will see that body prepended to its body. The attacker will not see any data but may inject data into the body of the subsequent request.EPSS8.28%MediumCVE-2020-27783Alpine Linuxalpine · py3-lxml +19 morealpine py3-lxmlA XSS vulnerability was discovered in python-lxml's clean module. The module's parser didn't properly imitate browsers, which caused different behaviors between the sanitizer and the user's page. A remote attacker could exploit this flaw to run arbitrary HTML/JS code.EPSS3.98%HighCVE-2020-10878Alpine Linuxalpine · perl +19 morealpine perlPerl before 5.30.3 has an integer overflow related to mishandling of a "PL_regkind[OP(n)] == NOTHING" situation. A crafted regular expression could lead to malformed bytecode with a possibility of instruction injection.EPSS4.88%HighCVE-2020-10543Alpine Linuxalpine · perl +17 morealpine perlPerl before 5.30.3 on 32-bit platforms allows a heap-based buffer overflow because nested regular expression quantifiers have an integer overflow.EPSS11.33%HighCVE-2020-24750chainguard · eco-java-gradle-2.10 +98 morechainguard eco-java-gradle-2.10FasterXML jackson-databind 2.x before 2.9.10.6 mishandles the interaction between serialization gadgets and typing, related to com.pastdev.httpcomponents.configuration.JndiConfiguration.EPSS7.33%HighCVE-2020-24616chainguard · eco-java-gradle-2.10 +95 morechainguard eco-java-gradle-2.10FasterXML jackson-databind 2.x before 2.9.10.6 mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPDataSource (aka Anteros-DBCP).EPSS7.61%HighCVE-2020-28196Alpine Linuxalpine · krb5 +61 morealpine krb5MIT Kerberos 5 (aka krb5) before 1.17.2 and 1.18.x before 1.18.3 allows unbounded recursion via an ASN.1-encoded Kerberos message because the lib/krb5/asn.1/asn1_encode.c support for BER indefinite lengths lacks a recursion limit.EPSS4.42%HighCVE-2020-12723Alpine Linuxalpine · perl +51 morealpine perlregcomp.c in Perl before 5.30.3 allows a buffer overflow via a crafted regular expression because of recursive S_study_chunk calls.EPSS5.97%HighCVE-2020-35490chainguard · eco-java-gradle-2.10 +95 morechainguard eco-java-gradle-2.10FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.PerUserPoolDataSource.EPSS6.29%HighCVE-2020-35491chainguard · eco-java-gradle-2.10 +96 morechainguard eco-java-gradle-2.10FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.SharedPoolDataSource.EPSS7.75%CriticalCVE-2022-23307apache software foundation · apache log4j 1.x +35 moreA deserialization flaw in the Chainsaw component of Log4j 1 can lead to malicious code execution.CVE-2020-9493 identified a deserialization issue that was present in Apache Chainsaw. Prior to Chainsaw V2.0 Chainsaw was a component of Apache Log4j 1.2.x where the same issue exists.EPSS54.41%HighCVE-2022-23302apache software foundation · apache log4j 1.x +35 moreDeserialization of untrusted data in JMSSink in Apache Log4j 1.xJMSSink in all versions of Log4j 1.x is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration or if the configuration references an LDAP service the attacker has access to. The attacker can provide a TopicConnectionFactoryBindingName configuration causing JMSSink to perform JNDI requests that result in remote code execution in a similar fashion to CVE-2021-4104. Note this issue only affects Log4j 1.x when specifically configured to use JMSSink, which is not the default. Apache Log4j 1.2 reached end of life in August 2015. Users should upgrade to Log4j 2 as it addresses numerous other issues from the previous versions.EPSS63.56%CriticalCVE-2022-23305apache software foundation · apache log4j 1.x +37 moreSQL injection in JDBC Appender in Apache Log4j V1By design, the JDBCAppender in Log4j 1.2.x accepts an SQL statement as a configuration parameter where the values to be inserted are converters from PatternLayout. The message converter, %m, is likely to always be included. This allows attackers to manipulate the SQL by entering crafted strings into input fields or headers of an application that are logged allowing unintended SQL queries to be executed. Note this issue only affects Log4j 1.x when specifically configured to use the JDBCAppender, which is not the default. Beginning in version 2.0-beta8, the JDBCAppender was re-introduced with proper support for parameterized SQL queries and further customization over the columns written to in logs. Apache Log4j 1.2 reached end of life in August 2015. Users should upgrade to Log4j 2 as it addresses numerous other issues from the previous versions.EPSS66.54%HighCVE-2019-17566apache · batik +25 moreapache batikApache Batik is vulnerable to server-side request forgery, caused by improper input validation by the "xlink:href" attributes. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server to make arbitrary GET requests.EPSS10.87%MediumCVE-2019-10219debian · libhibernate-validator-java +191 moredebian libhibernate-validator-javaA vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.EPSS2.16%