Product by Oracle

    Oracle Communications Messaging Server

    41 known vulnerabilities in Oracle Communications Messaging Server (Oracle), 0 of them actively exploited (CISA KEV).

    Key figures

    41

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    4

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Oracle Communications Messaging Server (Oracle)
    CriticalCVE-2017-5645

    Apache Log4j: Deserialization of Untrusted Data

    also in 74 other products

    		9.8
    CriticalCVE-2022-23305

    SQL injection in JDBC Appender in Apache Log4j V1

    also in 29 other products

    		9.8
    HighCVE-2022-23302

    Deserialization of untrusted data in JMSSink in Apache Log4j 1.x

    also in 27 other products

    		8.8
    HighCVE-2022-23307

    Apache Log4j 1.x: Deserialization of Untrusted Data

    also in 26 other products

    		8.8
    CriticalCVE-2019-0228

    Apache PDFBox: XML External Entity (XXE)

    also in 13 other products

    		9.8
    CriticalCVE-2020-11656

    SQLite: Use-After-Free

    also in 11 other products

    		9.8
    HighCVE-2021-4104

    Deserialization of untrusted data in JMSAppender in Apache Log4j 1.2

    also in 45 other products

    		7.5
    HighCVE-2021-33813

    Jdom: XML External Entity (XXE)

    also in 4 other products

    		7.5
    HighCVE-2020-25649

    Jackson-databind: Improper Restriction of XML External Entity Reference

    also in 39 other products

    		7.5
    HighCVE-2020-24616

    FasterXML Jackson-databind: security vulnerability

    also in 25 other products

    		8.1
    HighCVE-2020-24750

    FasterXML Jackson-databind: security vulnerability

    also in 26 other products

    		8.1
    HighCVE-2021-36090

    Apache Commons Compress 1.0 to 1.20 denial of service vulnerability

    also in 34 other products

    		7.5
    HighCVE-2020-28052

    Oracle Utilities Framework: security vulnerability

    also in 19 other products

    		8.1
    HighCVE-2021-35516

    Apache Commons Compress 1.6 to 1.20 denial of service vulnerability

    also in 24 other products

    		7.5
    HighCVE-2021-35515

    Apache Commons Compress 1.6 to 1.20 denial of service vulnerability

    also in 26 other products

    		7.5
    HighCVE-2021-35517

    Apache Commons Compress 1.1 to 1.20 denial of service vulnerability

    also in 27 other products

    		7.5
    HighCVE-2020-11612

    Netty: security vulnerability

    also in 14 other products

    		7.5
    MediumCVE-2021-45105

    Apache Log4j2 does not always protect from infinite recursion in lookup evaluation

    also in 107 other products

    		5.9
    HighCVE-2021-40690

    Bypass of the secureValidation property

    also in 18 other products

    		7.5
    HighCVE-2021-30468

    Apache CXF Denial of service vulnerability in parsing JSON via JsonMapObjectReaderWriter

    also in 5 other products

    		7.5
    MediumCVE-2020-13954

    Apache CXF Reflected XSS in the services listing page via the styleSheetPath

    also in 6 other products

    		6.1
    HighCVE-2021-37714

    Jhy Jsoup: Infinite Loop

    also in 16 other products

    		7.5
    HighCVE-2020-36189

    FasterXML Jackson-databind: security vulnerability

    also in 40 other products

    		8.1
    HighCVE-2020-13871

    SQLite: Use-After-Free

    also in 12 other products

    		7.5
    HighCVE-2020-11655

    SQLite: Denial of Service

    also in 17 other products

    		7.5

    All vulnerabilities in search

    News

    All products by Oracle