Product by Oracle

    Oracle Communications Interactive Session Recorder

    19 known vulnerabilities in Oracle Communications Interactive Session Recorder (Oracle), 2 of them actively exploited (CISA KEV).

    Key figures

    19

    Vulnerabilities

    2

    Actively exploited (KEV)

    0

    Used by ransomware

    3

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Oracle Communications Interactive Session Recorder (Oracle)
    CriticalCVE-2016-8735

    Apache Tomcat Remote Code Execution Vulnerability

    In CISA KEValso in 19 other products

    		9.8
    CriticalCVE-2020-11023

    Potential XSS vulnerability in jQuery

    In CISA KEValso in 48 other products

    		6.9
    CriticalCVE-2017-5645

    Apache Log4j: Deserialization of Untrusted Data

    also in 74 other products

    		9.8
    MediumCVE-2021-44832

    Apache Log4j2 vulnerable to RCE via JDBC Appender when attacker controls configuration

    also in 21 other products

    		6.6
    HighCVE-2020-25649

    Jackson-databind: Improper Restriction of XML External Entity Reference

    also in 39 other products

    		7.5
    HighCVE-2020-35490

    FasterXML Jackson-databind: security vulnerability

    also in 25 other products

    		8.1
    MediumCVE-2021-41184

    XSS in the `of` option of the `.position()` util

    also in 27 other products

    		6.5
    MediumCVE-2021-41182

    XSS in the `altField` option of the Datepicker widget

    also in 29 other products

    		6.5
    MediumCVE-2019-11358

    Drupal core: security vulnerability

    also in 89 other products

    		6.1
    MediumCVE-2021-45105

    Apache Log4j2 does not always protect from infinite recursion in lookup evaluation

    also in 107 other products

    		5.9
    MediumCVE-2015-9251

    jQuery: Cross-Site Scripting (XSS)

    also in 45 other products

    		6.1
    HighCVE-2021-22112

    Spring Security: security vulnerability

    also in 7 other products

    		8.8
    HighCVE-2020-36189

    FasterXML Jackson-databind: security vulnerability

    also in 40 other products

    		8.1
    MediumCVE-2021-41183

    XSS in `*Text` options of the Datepicker widget

    also in 28 other products

    		6.5
    MediumCVE-2021-29425

    Possible limited path traversal vulnerabily in Apache Commons IO

    also in 60 other products

    		4.8
    MediumCVE-2019-10219

    Hibernate Hibernate-validator: Cross-site Scripting

    also in 166 other products

    		6.5
    HighCVE-2021-2461

    Oracle Communications Interactive Session Recorder: Denial of Service

    also in 1 other product

    		8.3
    HighCVE-2021-22118

    Spring Framework: Improper Privilege Management

    also in 31 other products

    		7.8
    MediumCVE-2020-14574

    Oracle Communications Interactive Session Recorder: security vulnerability

    also in 1 other product

    		4.7

    News

    All products by Oracle