Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

139 matches found

OSV
OSV•added 2020/07/15 6:15 p.m.•8 views

CVE-2020-14580

Vulnerability in the Oracle Communications Session Border Controller product of Oracle Communications Applications component: System Admin. Supported versions that are affected are 8.1.0, 8.2.0 and 8.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via SSH ...

8.2CVSS7.3AI score0.00978EPSS
SaveExploits0References1
NVD
NVD•added 2020/07/15 6:15 p.m.•18 views

CVE-2020-14580

Vulnerability in the Oracle Communications Session Border Controller product of Oracle Communications Applications component: System Admin. Supported versions that are affected are 8.1.0, 8.2.0 and 8.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via SSH ...

8.2CVSS0.00978EPSS
SaveExploits0References1
Prion
Prion•added 2020/07/15 6:15 p.m.•16 views

Design/Logic Flaw

Vulnerability in the Oracle Communications Session Border Controller product of Oracle Communications Applications component: System Admin. Supported versions that are affected are 8.1.0, 8.2.0 and 8.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via SSH ...

6CVSS8.1AI score0.00978EPSS
SaveExploits0References1Affected Software1
Prion
Prion•added 2020/07/15 6:15 p.m.•25 views

Code injection

Vulnerability in the Oracle Enterprise Session Border Controller product of Oracle Communications Applications component: File Upload. Supported versions that are affected are 8.1.0, 8.2.0 and 8.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to...

7.5CVSS7.2AI score0.008EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment•added 2020/07/15 5:34 p.m.•11 views

CVE-2020-14630

Vulnerability in the Oracle Enterprise Session Border Controller product of Oracle Communications Applications component: File Upload. Supported versions that are affected are 8.1.0, 8.2.0 and 8.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to...

7.5CVSS6.8AI score0.008EPSS
SaveExploits0References1
Cvelist
Cvelist•added 2020/07/15 5:34 p.m.•23 views

CVE-2020-14630

Vulnerability in the Oracle Enterprise Session Border Controller product of Oracle Communications Applications component: File Upload. Supported versions that are affected are 8.1.0, 8.2.0 and 8.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to...

7.5CVSS7.4AI score0.008EPSS
SaveExploits0References1
CVE
CVE•added 2020/07/15 5:34 p.m.•46 views

CVE-2020-14630

CVE-2020-14630 is a vulnerability in Oracle Enterprise Session Border Controller (E-SBC) File Upload, affecting 8.1.0/8.2.0/8.3.0. The issue enables a high-privileged attacker who can reach the E-SBC over HTTP to cause a hang/crash (DOS) and unauthorized data modifications/reads. The base CVSS v3...

7.5CVSS7.2AI score0.008EPSS
SaveExploits0References1Affected Software1
CVE
CVE•added 2020/07/15 5:34 p.m.•53 views

CVE-2020-14580

CVE-2020-14580 affects Oracle Communications Session Border Controller (Oracle Communications Applications, component: System Admin) in versions 8.1.0, 8.2.0 and 8.3.0. The description indicates an easily exploitable vulnerability that allows a low-privilege attacker with network access via SSH t...

8.2CVSS8.1AI score0.00978EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment•added 2020/07/15 5:34 p.m.•6 views

CVE-2020-14580

Vulnerability in the Oracle Communications Session Border Controller product of Oracle Communications Applications component: System Admin. Supported versions that are affected are 8.1.0, 8.2.0 and 8.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via SSH ...

8.2CVSS7.4AI score0.00978EPSS
SaveExploits0References1
Cvelist
Cvelist•added 2020/07/15 5:34 p.m.•19 views

CVE-2020-14580

Vulnerability in the Oracle Communications Session Border Controller product of Oracle Communications Applications component: System Admin. Supported versions that are affected are 8.1.0, 8.2.0 and 8.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via SSH ...

8.2CVSS8.3AI score0.00978EPSS
SaveExploits0References1
CNVD
CNVD•added 2020/07/15 12:0 a.m.•7 views

Unspecified Vulnerability in Oracle Enterprise Session Border Controller

Oracle Enterprise Session Border Controller E-SBC connects disparate Internet Protocol IP communications networks while mitigating security threats, resolving interoperability issues, and ensuring reliable communications. A security vulnerability exists in the File Upload component in Oracle...

7.5CVSS8.9AI score0.008EPSS
SaveExploits0References1
Symantec
Symantec•added 2020/01/10 12:0 a.m.•91 views

Oracle January 2020 Critical Patch Update Multiple Vulnerabilities

Description Oracle has released advance notification regarding the January 2020 Critical Patch Update CPU to be released on January 14, 2020. The update addresses 333 vulnerabilities affecting the following software: Oracle Database Server, versions 12.2.0.1, 18c, 19c Oracle Communications Design...

1.2AI score
SaveExploits0References1Affected Software88
NVD
NVD•added 2019/10/22 4:15 p.m.•25 views

CVE-2019-12147

The Sangoma Session Border Controller SBC 2.3.23-119 GA web interface is vulnerable to Argument Injection via special characters in the username field. Upon successful exploitation, a remote unauthenticated user can create a local system user with sudo privileges, and use that user to login to th...

9.8CVSS9.4AI score0.02626EPSS
SaveExploits3References3
OSV
OSV•added 2019/10/22 4:15 p.m.•4 views

CVE-2019-12148

The Sangoma Session Border Controller SBC 2.3.23-119 GA web interface is vulnerable to an authentication bypass via an argument injection vulnerability involving special characters in the username field. Upon successful exploitation, a remote unauthenticated user can login into the device's admin...

9.8CVSS7.3AI score0.03531EPSS
SaveExploits3References2
NVD
NVD•added 2019/10/22 4:15 p.m.•30 views

CVE-2019-12148

The Sangoma Session Border Controller SBC 2.3.23-119 GA web interface is vulnerable to an authentication bypass via an argument injection vulnerability involving special characters in the username field. Upon successful exploitation, a remote unauthenticated user can login into the device's admin...

9.8CVSS9.8AI score0.03531EPSS
SaveExploits3References2
OSV
OSV•added 2019/10/22 4:15 p.m.•5 views

CVE-2019-12147

The Sangoma Session Border Controller SBC 2.3.23-119 GA web interface is vulnerable to Argument Injection via special characters in the username field. Upon successful exploitation, a remote unauthenticated user can create a local system user with sudo privileges, and use that user to login to th...

9.8CVSS5.8AI score0.02626EPSS
SaveExploits3References3
Prion
Prion•added 2019/10/22 4:15 p.m.•19 views

Authentication flaw

The Sangoma Session Border Controller SBC 2.3.23-119 GA web interface is vulnerable to an authentication bypass via an argument injection vulnerability involving special characters in the username field. Upon successful exploitation, a remote unauthenticated user can login into the device's admin...

7.5CVSS9.6AI score0.03531EPSS
SaveExploits3References2Affected Software1
Cvelist
Cvelist•added 2019/10/22 3:47 p.m.•25 views

CVE-2019-12147

The Sangoma Session Border Controller SBC 2.3.23-119 GA web interface is vulnerable to Argument Injection via special characters in the username field. Upon successful exploitation, a remote unauthenticated user can create a local system user with sudo privileges, and use that user to login to th...

9.4AI score0.02626EPSS
SaveExploits3References3
CVE
CVE•added 2019/10/22 3:47 p.m.•87 views

CVE-2019-12147

CVE-2019-12147 affects Sangoma SBC 2.3.23-119 GA web interface. The issue is Argument Injection via special characters in the username field, enabling a remote unauthenticated user to create a local privileged user (sudo) and subsequently access the system via web or SSH to compromise the device....

9.8CVSS9.2AI score0.02626EPSS
SaveExploits3References3Affected Software1
Cvelist
Cvelist•added 2019/10/22 3:20 p.m.•36 views

CVE-2019-12148

The Sangoma Session Border Controller SBC 2.3.23-119 GA web interface is vulnerable to an authentication bypass via an argument injection vulnerability involving special characters in the username field. Upon successful exploitation, a remote unauthenticated user can login into the device's admin...

9.8AI score0.03531EPSS
SaveExploits3References2
Rows per page
Query Builder