Oracle

Communications Diameter Intelligence Hub

14 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2021-22696

  • EPSS 0.49%
  • Published 02.04.2021 10:15:12
  • Last modified 21.11.2024 05:50:28

CXF supports (via JwtRequestCodeFilter) passing OAuth 2 parameters via a JWT token as opposed to query parameters (see: The OAuth 2.0 Authorization Framework: JWT Secured Authorization Request (JAR)). Instead of sending a JWT token as a "request" par...

9.8

CVE-2020-17530

Warning
  • EPSS 94.36%
  • Published 11.12.2020 02:15:10
  • Last modified 03.04.2025 16:07:29

Forced OGNL evaluation, when evaluated on raw user input in tag attributes, may lead to remote code execution. Affected software : Apache Struts 2.0.0 - Struts 2.5.25.

5.9

CVE-2020-1971

  • EPSS 0.34%
  • Published 08.12.2020 16:15:11
  • Last modified 21.11.2024 05:11:45

The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL provides a function GENERAL_NAME_cmp which compares different instances of a GENERAL_NAME to see if they...

7.5

CVE-2020-11971

  • EPSS 2.05%
  • Published 14.05.2020 17:15:12
  • Last modified 21.11.2024 04:59:00

Apache Camel's JMX is vulnerable to Rebind Flaw. Apache Camel 2.22.x, 2.23.x, 2.24.x, 2.25.x, 3.0.0 up to 3.1.0 is affected. Users should upgrade to 3.2.0.