Oracle ≫ Communications Session Router

3 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.

5.9

CVE-2020-1971

EPSS 0.34%
Published 08.12.2020 16:15:11
Last modified 21.11.2024 05:11:45

The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL provides a function GENERAL_NAME_cmp which compares different instances of a GENERAL_NAME to see if they...

7.4

CVE-2020-8203

Exploit

EPSS 2.44%
Published 15.07.2020 17:15:11
Last modified 21.11.2024 05:38:29

Prototype pollution attack when using _.zipObjectDeep in lodash before 4.17.20.

5.9

CVE-2019-1559

EPSS 5.05%
Published 27.02.2019 23:29:00
Last modified 21.11.2024 04:36:48

If an application encounters a fatal protocol error and then calls SSL_shutdown() twice (once to send a close_notify, and once to receive one) then OpenSSL can respond differently to the calling application if a 0 byte record is received with invalid...