Oracle Communications Metasolv Solution vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Oracle Communications Metasolv Solution: 5 record(s), with affected versions and fixes.cpe:2.3:a:oracle:communications_metasolv_solution
CVE-2022-23990
High · 7.5
CWE-190 Jan 26, 2022
Expat (aka libexpat) before 2.4.4 has an integer overflow in the doProlog function.
Expat (aka libexpat) before 2.4.4 has an integer overflow in the doProlog function.
CVE-2022-23852
Critical · 9.8
CWE-190 Jan 23, 2022
Expat (aka libexpat) before 2.4.4 has a signed integer overflow in XML_GetBuffer, for...
Expat (aka libexpat) before 2.4.4 has a signed integer overflow in XML_GetBuffer, for configurations with a nonzero XML_CONTEXT_BYTES.
CVE-2020-11987
High · 8.2
CWE-20 Feb 24, 2021
Improper Input Validation in Apache Software Foundation Batik
Apache Batik 1.13 is vulnerable to server-side request forgery, caused by improper input validation by the NodePickerPanel. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server to make arbitrary GET requests.
CVE-2019-10219
Medium · 6.1
CWE-79 Nov 8, 2019
Cross-site Scripting (XSS) in Red Hat Hibernate Validator
A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.
CVE-2019-10086
High · 7.3
CWE-502 Aug 20, 2019
Deserialization of Untrusted Data in Apache Software Foundation Commons Beanutils
In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all Java objects. We, however were not using this by default characteristic of the PropertyUtilsBean.