CVE-2023-21890

Vulnerability in the Oracle Communications Converged Application Server product of Oracle Communications component: Core. Supported versions that are affected are 7.1.0 and 8.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via UDP to compromise Oracle...

CVE-2023-21848

Vulnerability in the Oracle Communications Convergence product of Oracle Communications Applications component: Admin Configuration. The supported version that is affected is 3.0.3.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Orac...

CVE-2023-21848

Vulnerability in the Oracle Communications Convergence product of Oracle Communications Applications component: Admin Configuration. The supported version that is affected is 3.0.3.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Orac...

CVE-2023-21824

Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications Applications component: Customer, Config, Pricing Manager. Supported versions that are affected are 12.0.0.3.0-12.0.0.7.0. Easily exploitable vulnerability allows high privileged attacker wit...

Design/Logic Flaw

Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications Applications component: Customer, Config, Pricing Manager. Supported versions that are affected are 12.0.0.3.0-12.0.0.7.0. Easily exploitable vulnerability allows high privileged attacker wit...

Design/Logic Flaw

Vulnerability in the Oracle Communications Converged Application Server product of Oracle Communications component: Core. Supported versions that are affected are 7.1.0 and 8.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via UDP to compromise Oracle...

Design/Logic Flaw

Vulnerability in the Oracle Communications Convergence product of Oracle Communications Applications component: Admin Configuration. The supported version that is affected is 3.0.3.1.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Orac...

Oracle Communications Applications 安全漏洞

Oracle Communications Applications is an advanced communications and collaboration services application from Oracle Corporation. A security vulnerability exists in Oracle Communications BRM that can be exploited by an attacker to allow an elevated privilege attacker to log in to the infrastructur...

Oracle Communications Applications 安全漏洞

Oracle Communications Applications etc. are products of Oracle Corporation USA.Oracle Communications Applications is an advanced communications and collaboration services application.Oracle Communications is a product. ecto, etc. are products of elixir-ecto open source. ecto is a toolkit for data...

Oracle Communications Converged Application Server 安全漏洞

Oracle Communications is a product of Oracle Corporation USA. provides integrated communications and cloud solutions for service providers and enterprises to accelerate their digital transformation. A security vulnerability exists in Oracle Communications Converged Application Server versions 7.1...

CVE-2023-21890

Summary: CVE-2023-21890 affects Oracle Communications Converged Application Server (Core) versions 7.1.0–8.0.0. An input-validation flaw in the Core component allows an unauthenticated attacker with network access via UDP to compromise the server, potentially taking over the affected system. Impa...

CVE-2023-21848

Oracle Communications Convergence (Admin Configuration) vulnerable in version 3.0.3.1.0 due to insufficient input validation. A remote, low-privilege attacker with network access over HTTP can potentially take over the system. Public details in PT-2023-1195 confirm the issue and note that a fix i...

CVE-2023-21824

CVE-2023-21824 affects Oracle Communications BRM – Elastic Charging Engine, within Oracle Communications Applications. Affected versions are 12.0.0.3.0 through 12.0.0.7.0. The vulnerability allows a high-privilege attacker who can log on to the infrastructure where the Elastic Charging Engine run...

PT-2023-1184 · Oracle · Oracle Communications Converged Application Server

Name of the Vulnerable Software and Affected Versions: Oracle Communications Converged Application Server versions 7.1.0 through 8.0.0 Description: The issue is related to insufficient input validation in the Core component of the Oracle Communications Converged Application Server, allowing an...

Shopware 输入验证错误漏洞

Shopware is a suite of open source e-commerce software from German company Shopware. An input validation error vulnerability exists in Shopware, which arises from a failure to fully check the double validation of communications and can skip parts of the process...

CVE-2023-22597

InHand Networks InRouter 302, prior to version IR302 V3.5.56, and InRouter 615, prior to version InRouter6XX-S-V2.3.0.r5542, contain vulnerability CWE-319: Cleartext Transmission of Sensitive Information. They use an unsecured channel to communicate with the cloud platform by default. An...

CVE-2022-43539

A vulnerability exists in the ClearPass Policy Manager cluster communications that allow for an attacker in a privileged network position to potentially obtain sensitive information. A successful exploit could allow an attacker to retrieve information that allows for unauthorized actions as a...

CVE-2022-43539

A vulnerability exists in the ClearPass Policy Manager cluster communications that allow for an attacker in a privileged network position to potentially obtain sensitive information. A successful exploit could allow an attacker to retrieve information that allows for unauthorized actions as a...

CVE-2022-43539

A vulnerability exists in the ClearPass Policy Manager cluster communications that allow for an attacker in a privileged network position to potentially obtain sensitive information. A successful exploit could allow an attacker to retrieve information that allows for unauthorized actions as a...

PT-2023-14250 · Aruba · Aruba Clearpass Policy Manager

Name of the Vulnerable Software and Affected Versions: Aruba ClearPass Policy Manager versions 6.10.7 and below Aruba ClearPass Policy Manager versions 6.9.12 and below Description: A vulnerability exists in the ClearPass Policy Manager cluster communications, allowing an attacker in a privileged...