Oracle Communications Webrtc Session Controller vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Oracle Communications Webrtc Session Controller: 2 record(s), with affected versions and fixes.
cpe:2.3:a:oracle:communications_webrtc_session_controller

CVE-2019-10219 Medium · 6.1 CWE-79 Nov 8, 2019

Cross-site Scripting (XSS) in Red Hat Hibernate Validator

A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.

CVE-2017-5645 Critical · 9.8 Public exploit CWE-502 Apr 17, 2017

Deserialization of Untrusted Data in Apache Software Foundation Log4j

In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that, when deserialized, can execute arbitrary code.