Atos Unify OpenScape Code Execution / Missing Authentication Vulnerabilities

Atos Unify OpenScape Session Border Controller, Atos Unify OpenScape Branch, and Atos Unify OpenScape BCF suffer from remote code execution and missing authentication vulnerabilities. Atos OpenScape SBC versions before 10 R3.3.0, Branch version 10 versions before R3.3.0, and BCF version 10 versio...

PT-2023-7028 · Atos · Atos Unify Openscape Branch +2

Name of the Vulnerable Software and Affected Versions: Atos Unify OpenScape Session Border Controller versions through V10 R3.01.03 Atos Unify OpenScape Branch affected versions not specified Atos Unify OpenScape BCF affected versions not specified Description: The issue allows execution of...

Vulnerabilities fixed in Oracle Communications

Vulnerabilities have been fixed in Oracle Communications. The vulnerabilities allow a malicious party to carry out attacks execute attacks that result in the following categories of damage: Denial-of-Service DoS. Bypassing authentication Remote code execution User rights Access to system data...

The vulnerability of the WebUI component of the Oracle Enterprise Session Border Controller allows a perpetrator to compromise the integrity of the protected information.

The vulnerability of the Oracle Enterprise Session Border Controller’s WebUI component exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to compromise the integrity of protected information through HTTP requests...

The vulnerability of the Log component in the Oracle Enterprise Session Border Controller allows a perpetrator to cause a partial service disruption.

The vulnerability of the Log component in the Oracle Enterprise Session Border Controller is related to resource release errors. Exploiting this vulnerability could allow a malicious actor to cause a partial service outage using the HTTP protocol...

Oracle Enterprise Session Border Controller Denial of Service Vulnerability

Oracle Communications is a product of Oracle Corporation USA. A denial-of-service vulnerability exists in Oracle Enterprise Session Border Controller, which could be exploited by an attacker to cause a partial denial of service in Oracle Enterprise Session Border The vulnerability can be exploite...

Oracle Enterprise Session Border Controller has an unspecified vulnerability (CNVD-2022-17338)

Oracle Communications is a product of Oracle Corporation USA. provides integrated communications and cloud solutions for service providers and enterprises to accelerate their digital transformation.A security vulnerability exists in Oracle Enterprise Session Border Controller, which could be...

Oracle Enterprise Session Border Controller has an unspecified vulnerability (CNVD-2022-17340)

Oracle Communications is a product of Oracle Corporation USA. A security vulnerability exists in Oracle Enterprise Session Border Controller that could be exploited by an attacker to cause unauthorized creation, deletion, or modification of critical data or all Oracle Enterprise Session Border...

CVE-2022-21382

Vulnerability in the Oracle Enterprise Session Border Controller product of Oracle Communications component: WebUI. Supported versions that are affected are 8.4 and 9.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Enterprise...

CVE-2022-21383

Vulnerability in the Oracle Enterprise Session Border Controller product of Oracle Communications component: Log. Supported versions that are affected are 8.4 and 9.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Enterprise...

CVE-2022-21381

Vulnerability in the Oracle Enterprise Session Border Controller product of Oracle Communications component: WebUI. Supported versions that are affected are 8.4 and 9.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Enterprise...

CVE-2022-21381

Vulnerability in the Oracle Enterprise Session Border Controller product of Oracle Communications component: WebUI. Supported versions that are affected are 8.4 and 9.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Enterprise...

CVE-2022-21381

Vulnerability in the Oracle Enterprise Session Border Controller product of Oracle Communications component: WebUI. Supported versions that are affected are 8.4 and 9.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Enterprise...

Design/Logic Flaw

Vulnerability in the Oracle Enterprise Session Border Controller product of Oracle Communications component: WebUI. Supported versions that are affected are 8.4 and 9.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Enterprise...

Design/Logic Flaw

Vulnerability in the Oracle Enterprise Session Border Controller product of Oracle Communications component: Log. Supported versions that are affected are 8.4 and 9.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Enterprise...

CVE-2022-21383

Vulnerability in the Oracle Enterprise Session Border Controller product of Oracle Communications component: Log. Supported versions that are affected are 8.4 and 9.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Enterprise...

CVE-2022-21383

Vulnerability in the Oracle Enterprise Session Border Controller product of Oracle Communications component: Log. Supported versions that are affected are 8.4 and 9.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Enterprise...

CVE-2022-21383

CVE-2022-21383 affects Oracle Communications’ Oracle Enterprise Session Border Controller (E-SBC), specifically the “Log” component. Affected software versions are 8.4 and 9.0. The vulnerability allows a low-privilege, network-authenticated attacker (via HTTP) to compromise the E-SBC and can lead...

CVE-2022-21382

Vulnerability in the Oracle Enterprise Session Border Controller product of Oracle Communications component: WebUI. Supported versions that are affected are 8.4 and 9.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Enterprise...

CVE-2022-21382

Vulnerability in the Oracle Enterprise Session Border Controller product of Oracle Communications component: WebUI. Supported versions that are affected are 8.4 and 9.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Enterprise...