Vulnerabilidades do Oracle Communications Metasolv Solution
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Oracle Communications Metasolv Solution: 5 registro(s), com versões afetadas e correções.cpe:2.3:a:oracle:communications_metasolv_solution
CVE-2022-23990
Alta · 7.5
CWE-190 26/01/2022
Expat (aka libexpat) before 2.4.4 has an integer overflow in the doProlog function.
Expat (aka libexpat) before 2.4.4 has an integer overflow in the doProlog function.
CVE-2022-23852
Crítica · 9.8
CWE-190 23/01/2022
Expat (aka libexpat) before 2.4.4 has a signed integer overflow in XML_GetBuffer, for...
Expat (aka libexpat) before 2.4.4 has a signed integer overflow in XML_GetBuffer, for configurations with a nonzero XML_CONTEXT_BYTES.
CVE-2020-11987
Alta · 8.2
CWE-20 24/02/2021
Improper Input Validation em Apache Software Foundation Batik
Apache Batik 1.13 is vulnerable to server-side request forgery, caused by improper input validation by the NodePickerPanel. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server to make arbitrary GET requests.
CVE-2019-10219
Média · 6.1
CWE-79 08/11/2019
Cross-site Scripting (XSS) em Red Hat Hibernate Validator
A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.
CVE-2019-10086
Alta · 7.3
CWE-502 20/08/2019
Deserialization of Untrusted Data em Apache Software Foundation Commons Beanutils
In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all Java objects. We, however were not using this by default characteristic of the PropertyUtilsBean.