Product by Oracle

    Oracle Communications Application Session Controller

    20 known vulnerabilities in Oracle Communications Application Session Controller (Oracle), 1 of them actively exploited (CISA KEV).

    Key figures

    20

    Vulnerabilities

    1

    Actively exploited (KEV)

    0

    Used by ransomware

    3

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Oracle Communications Application Session Controller (Oracle)
    CriticalCVE-2016-8735

    Apache Tomcat Remote Code Execution Vulnerability

    In CISA KEValso in 19 other products

    		9.8
    CriticalCVE-2020-10683

    Dom4j Project Dom4j: XML External Entity (XXE)

    also in 36 other products

    		9.8
    CriticalCVE-2018-1000613

    Oracle Communications Diameter Signaling Router (DSR): Deserialization of Untrusted Data

    also in 22 other products

    		9.8
    HighCVE-2017-3730

    Bad (EC)DHE parameters cause a client crash

    also in 6 other products

    		7.5
    HighCVE-2020-11987

    Apache Batik: Server-Side Request Forgery (SSRF)

    also in 22 other products

    		8.2
    MediumCVE-2020-11022

    jQuery has a potential XSS vulnerability

    also in 63 other products

    		6.9
    HighCVE-2020-28052

    Oracle Utilities Framework: security vulnerability

    also in 19 other products

    		8.1
    HighCVE-2019-17566

    Apache Batik: Server-Side Request Forgery (SSRF)

    also in 17 other products

    		7.5
    MediumCVE-2019-11358

    Drupal core: security vulnerability

    also in 89 other products

    		6.1
    MediumCVE-2013-2566

    Oracle HTTP Server: security vulnerability

    also in 15 other products

    		5.9
    HighCVE-2020-5258

    Prototype pollution in dojo

    also in 9 other products

    		7.7
    HighCVE-2020-27216

    The Eclipse Foundation Eclipse Jetty: Creation of Temporary File With Insecure Permissions

    also in 20 other products

    		7.0
    MediumCVE-2018-11784

    Apache Tomcat: security vulnerability

    also in 15 other products

    		4.3
    HighCVE-2018-1000180

    Oracle Business Process Management Suite: security vulnerability

    also in 18 other products

    		7.5
    HighCVE-2021-2351

    Oracle WebLogic Server: security vulnerability

    also in 97 other products

    		8.3
    LowCVE-2015-2808

    IBM Cognos Metrics Manager: security vulnerability

    also in 35 other products

    		3.7
    MediumCVE-2021-29425

    Possible limited path traversal vulnerabily in Apache Commons IO

    also in 60 other products

    		4.8
    LowCVE-2020-9488

    Apache Log4j: security vulnerability

    also in 44 other products

    		3.7
    MediumCVE-2019-10219

    Hibernate Hibernate-validator: Cross-site Scripting

    also in 166 other products

    		6.5
    Not ratedCVE-2015-0235

    GNU glibc: Heap-Based Buffer Overflow

    also in 17 other products

    		—

    News

    All products by Oracle