Product by Oracle
Communications Brm - Elastic Charging Engine
14 known vulnerabilities in Communications Brm - Elastic Charging Engine (Oracle), 0 of them actively exploited (CISA KEV).
Key figures
14
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2021-29505 | XStream is vulnerable to a Remote Command Execution attack | 7.5 | |
| Medium | CVE-2021-44832 | Apache Log4j2 vulnerable to RCE via JDBC Appender when attacker controls configuration | 6.6 | |
| High | CVE-2020-11612 | Netty: security vulnerability | 7.5 | |
| High | CVE-2018-15756 | DoS Attack via Range Requests | 7.5 | |
| High | CVE-2021-43859 | Denial of Service by injecting highly recursive collections or maps in XStream | 7.5 | |
| High | CVE-2021-37137 | The Netty project Netty: Uncontrolled Resource Consumption | 7.5 | |
| High | CVE-2021-37136 | The Netty project Netty: Uncontrolled Resource Consumption | 7.5 | |
| Critical | CVE-2021-21342 | Xstream: Deserialization of Untrusted Data | 5.3 | |
| Medium | CVE-2021-38153 | Timing Attack Vulnerability for Apache Kafka Connect and Clients | 5.9 | |
| Medium | CVE-2021-21409 | Possible request smuggling in HTTP/2 due missing validation of content-length | 5.9 | |
| Medium | CVE-2020-5397 | CSRF Attack via CORS Preflight Requests with Spring MVC or Spring WebFlux | 5.3 | |
| Medium | CVE-2021-21290 | Local Information Disclosure Vulnerability in Netty on Unix-Like systems due temporary files | 6.2 | |
| Medium | CVE-2020-17521 | Apache Groovy: security vulnerability | 5.5 | |
| High | CVE-2021-22118 | Spring Framework: Improper Privilege Management | 7.8 |