Vulnerabilidades do Oracle Communications Billing And Revenue Management Elastic Charging Engine
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Oracle Communications Billing And Revenue Management Elastic Charging Engine: 28 registro(s), com versões afetadas e correções.cpe:2.3:a:oracle:communications_billing_and_revenue_management_elastic_charging_engine
CVE-2020-5398
Alta · 7.5
CWE-494 16/01/2020
RFD Attack via "Content-Disposition" Header Sourced from Request Input by Spring MVC or Spring WebFlux Application
In Spring Framework, versions 5.2.x prior to 5.2.3, versions 5.1.x prior to 5.1.13, and versions 5.0.x prior to 5.0.16, an application is vulnerable to a reflected file download (RFD) attack when it sets a "Content-Disposition" header in the response where the filename attribute is derived from user supplied input.
CVE-2019-10219
Média · 6.1
CWE-79 08/11/2019
Cross-site Scripting (XSS) em Red Hat Hibernate Validator
A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.
CVE-2019-10086
Alta · 7.3
CWE-502 20/08/2019
Deserialization of Untrusted Data em Apache Software Foundation Commons Beanutils
In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all Java objects. We, however were not using this by default characteristic of the PropertyUtilsBean.