Product by Oracle

Communications Instant Messaging Server

57 known vulnerabilities in Communications Instant Messaging Server (Oracle), 3 of them actively exploited (CISA KEV).

Vulnerabilities

Actively exploited (KEV)

Used by ransomware

Critical

Vulnerabilities

Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

Vulnerabilities in Communications Instant Messaging Server (Oracle)

Critical	CVE-2020-1938	Apache Tomcat Improper Privilege Management Vulnerability In CISA KEValso in 20 other products	9.8	24.02.2020
Critical	CVE-2016-8735	Apache Tomcat Remote Code Execution Vulnerability In CISA KEValso in 19 other products	9.8	06.04.2017
Critical	CVE-2017-12617	Apache Tomcat Remote Code Execution Vulnerability In CISA KEValso in 54 other products	8.1	03.10.2017
Critical	CVE-2017-5645	Apache Log4j: Deserialization of Untrusted Data also in 74 other products	9.8	17.04.2017
Critical	CVE-2022-23305	SQL injection in JDBC Appender in Apache Log4j V1 also in 29 other products	9.8	18.01.2022
Critical	CVE-2017-7525	FasterXML Jackson-databind: Incomplete List of Disallowed Inputs also in 20 other products	9.8	06.02.2018
Critical	CVE-2018-7489	FasterXML Jackson-databind: Deserialization of Untrusted Data also in 4 other products	9.8	26.02.2018
Critical	CVE-2020-9548	FasterXML Jackson-databind: security vulnerability also in 25 other products	9.8	02.03.2020
Critical	CVE-2020-9547	FasterXML Jackson-databind: security vulnerability also in 17 other products	9.8	02.03.2020
Critical	CVE-2018-14718	FasterXML Jackson-databind: Deserialization of Untrusted Data also in 24 other products	9.8	02.01.2019
High	CVE-2022-23302	Deserialization of untrusted data in JMSSink in Apache Log4j 1.x also in 27 other products	8.8	18.01.2022
High	CVE-2022-23307	Apache Log4j 1.x: Deserialization of Untrusted Data also in 26 other products	8.8	18.01.2022
Critical	CVE-2019-20330	FasterXML Jackson-databind: security vulnerability also in 29 other products	9.8	03.01.2020
Critical	CVE-2017-15095	FasterXML Jackson-databind: Incomplete List of Disallowed Inputs also in 23 other products	9.8	06.02.2018
Critical	CVE-2019-14379	FasterXML Jackson-databind: Remote Code Execution also in 23 other products	9.8	29.07.2019
Critical	CVE-2018-11307	FasterXML Jackson-databind: security vulnerability also in 6 other products	9.8	09.07.2019
High	CVE-2020-13935	Apache Tomcat: Infinite Loop also in 17 other products	7.5	14.07.2020
High	CVE-2020-13934	Apache Tomcat: Denial of Service also in 13 other products	7.5	14.07.2020
Critical	CVE-2020-9546	FasterXML Jackson-databind: security vulnerability also in 31 other products	9.8	02.03.2020
High	CVE-2020-36179	FasterXML Jackson-databind: security vulnerability also in 43 other products	8.1	06.01.2021
High	CVE-2020-10673	FasterXML Jackson-databind: security vulnerability also in 31 other products	8.8	18.03.2020
High	CVE-2020-17527	Apache Tomcat: Request header mix-up between HTTP/2 streams also in 12 other products	7.5	03.12.2020
High	CVE-2020-11113	FasterXML Jackson-databind: security vulnerability also in 32 other products	8.8	31.03.2020
High	CVE-2020-9484	Apache Tomcat: Deserialization of Untrusted Data also in 25 other products	7.0	20.05.2020
High	CVE-2021-25122	Apache Tomcat h2c request mix-up also in 13 other products	7.5	01.03.2021

All vulnerabilities in search

All products by Oracle

Key figures

Vulnerabilities