Product by Oracle
Communications Design Studio
15 known vulnerabilities in Communications Design Studio (Oracle), 0 of them actively exploited (CISA KEV).
Key figures
15
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2020-5421 | RFD Protection Bypass via jsessionid | 8.7 | |
| High | CVE-2019-0227 | Apache Axis 1.4: Server-Side Request Forgery (SSRF) | 7.5 | |
| High | CVE-2019-10086 | Apache Commons Beanutils: security vulnerability | 7.3 | |
| High | CVE-2021-23337 | Command Injection | 7.2 | |
| High | CVE-2020-11612 | Netty: security vulnerability | 7.5 | |
| Medium | CVE-2018-8032 | Apache Axis: Cross-Site Scripting (XSS) | 6.1 | |
| Medium | CVE-2019-16168 | SQLite: Divide By Zero | 6.5 | |
| High | CVE-2021-2351 | Oracle WebLogic Server: security vulnerability | 8.3 | |
| Medium | CVE-2020-28500 | Regular Expression Denial of Service (ReDoS) | 5.3 | |
| Medium | CVE-2021-21409 | Possible request smuggling in HTTP/2 due missing validation of content-length | 5.9 | |
| Medium | CVE-2021-29425 | Possible limited path traversal vulnerabily in Apache Commons IO | 4.8 | |
| Medium | CVE-2021-43797 | Netty: HTTP Request/Response Smuggling | 6.5 | |
| Medium | CVE-2019-10219 | Hibernate Hibernate-validator: Cross-site Scripting | 6.5 | |
| Medium | CVE-2021-21290 | Local Information Disclosure Vulnerability in Netty on Unix-Like systems due temporary files | 6.2 | |
| Medium | CVE-2022-22969 | Spring Security OAuth: Denial of Service | 6.5 |