Vulnerabilities fixed in Oracle Communications

🗓️ 19 Jan 2022 00:00:00Reported by NCSCType

Oracle fixed vulnerabilities in Communications products to prevent Denial of Service and remote code execution.

Reporter	Title	Published	Views	Family All 6058
zdt	jQuery 1.2 - Cross-Site Scripting Vulnerability	14 Apr 202100:00	–	zdt
zdt	nginx 1.20.0 DNS Resolver Off-By-One Heap Write Exploit	27 May 202100:00	–	zdt
zdt	Eclipse Jetty 11.0.5 - Sensitive File Disclosure Vulnerability	3 Nov 202100:00	–	zdt
zdt	Nginx 1.20.0 - Denial of Service Exploit	11 Jul 202200:00	–	zdt
vulnersOsv	000demo (>=1.0.0 <=1.1.0), 03-npm-abc (>=1.0.0 <=1.1.0) +6267 more potentially affected by CVE-2020-11022 via jquery (>=1.12.0 <=3.4.1)	29 Apr 202022:18	–	vulnersosv
vulnersOsv	@enonic/semantic-ui-react-form (>=2.1.0 <=2.3.0) potentially affected by CVE-2019-10747 +1 more via set-value (=4.0.0)	12 Aug 202116:49	–	vulnersosv
vulnersOsv	ai.ylyue:yue-library-auth-client (>=j8.2.4.0 <=j11.2.4.0), ai.ylyue:yue-library-auth-service (>=j8.2.4.0 <=j11.2.4.0) +1439 more potentially affected by CVE-2021-22119 via org.springframework.security:spring-security-core (>=5.4.0 <=5.4.6)	2 Jul 202118:33	–	vulnersosv
vulnersOsv	com.savoirtech.aetos:aetos (>=4.2.0.1 <=4.2.1), org.apache.cxf.karaf:apache-cxf (>=3.4.6 <=3.4.10) +14 more potentially affected by CVE-2021-44832 via org.ops4j.pax.logging:pax-logging-log4j2 (>=1.11.10 <=1.11.12)	4 Jan 202216:14	–	vulnersosv
vulnersOsv	@alitajs/cordova (>=2.0.0 <=2.3.2), @alitajs/create-alita (=1.0.0-beta.1) +138 more potentially affected by CVE-2019-10747 +1 more via set-value (>=3.0.0 <=3.0.2)	12 Aug 202116:49	–	vulnersosv
vulnersOsv	-tompan-reacttemplate (>=1.0.1 <=1.1.0), 02-infrastructure (=1.0.0) +53822 more potentially affected by CVE-2021-23337 via lodash.template (>=2.2.1 <=4.5.0)	17 Nov 202013:02	–	vulnersosv

19 Jan 2022 00:00Current

7.4High risk

Vulners AI Score7.4

CVSS 29

CVSS 3.18.5 - 9.8

CVSS 39.8

EPSS0.99999

SSVC