Product by Oracle

Communications Session Report Manager

69 known vulnerabilities in Communications Session Report Manager (Oracle), 2 of them actively exploited (CISA KEV).

Vulnerabilities

Actively exploited (KEV)

Used by ransomware

Critical

Vulnerabilities

Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

Vulnerabilities in Communications Session Report Manager (Oracle)

Critical	CVE-2019-0211	Apache HTTP Server Privilege Escalation Vulnerability In CISA KEValso in 27 other products	7.8	08.04.2019
Critical	CVE-2020-11023	Potential XSS vulnerability in jQuery In CISA KEValso in 48 other products	6.9	29.04.2020
Critical	CVE-2021-44790	Apache HTTP Server: Out-of-bounds Write also in 15 other products	9.8	20.12.2021
Critical	CVE-2020-11984	Apache HTTP Server: Remote Code Execution also in 12 other products	9.8	07.08.2020
Critical	CVE-2020-11998	Apache ActiveMQ: Code Execution also in 6 other products	9.8	10.09.2020
Critical	CVE-2020-9548	FasterXML Jackson-databind: security vulnerability also in 25 other products	9.8	02.03.2020
Critical	CVE-2019-0228	Apache PDFBox: XML External Entity (XXE) also in 13 other products	9.8	17.04.2019
High	CVE-2021-44224	Apache HTTP Server: NULL Pointer Dereference also in 13 other products	8.2	20.12.2021
High	CVE-2020-5398	Spring Framework: Cross-site Scripting also in 33 other products	8.0	16.01.2020
High	CVE-2020-5421	RFD Protection Bypass via jsessionid also in 36 other products	8.7	19.09.2020
High	CVE-2019-0227	Apache Axis 1.4: Server-Side Request Forgery (SSRF) also in 34 other products	7.5	01.05.2019
High	CVE-2020-9490	Apache HTTP Server: security vulnerability also in 24 other products	7.5	07.08.2020
Critical	CVE-2020-9546	FasterXML Jackson-databind: security vulnerability also in 31 other products	9.8	02.03.2020
High	CVE-2020-11993	Apache HTTP Server: security vulnerability also in 12 other products	7.5	07.08.2020
High	CVE-2021-28165	The Eclipse Foundation Eclipse Jetty: Incorrect Behavior Order: Authorization Before Parsing and Canonicalization also in 22 other products	7.5	01.04.2021
High	CVE-2020-36179	FasterXML Jackson-databind: security vulnerability also in 43 other products	8.1	06.01.2021
High	CVE-2020-10673	FasterXML Jackson-databind: security vulnerability also in 31 other products	8.8	18.03.2020
High	CVE-2020-35728	FasterXML Jackson-databind: security vulnerability also in 40 other products	8.1	27.12.2020
High	CVE-2019-10097	Apache HTTP Server: Stack-Based Buffer Overflow also in 7 other products	7.2	26.09.2019
High	CVE-2020-11113	FasterXML Jackson-databind: security vulnerability also in 32 other products	8.8	31.03.2020
High	CVE-2020-9484	Apache Tomcat: Deserialization of Untrusted Data also in 25 other products	7.0	20.05.2020
High	CVE-2020-36188	FasterXML Jackson-databind: security vulnerability also in 45 other products	8.1	06.01.2021
High	CVE-2020-14060	FasterXML Jackson-databind: security vulnerability also in 12 other products	8.1	14.06.2020
High	CVE-2019-12402	Apache Commons Compress: Infinite Loop also in 19 other products	7.5	29.08.2019
High	CVE-2020-36184	FasterXML Jackson-databind: security vulnerability also in 45 other products	8.1	06.01.2021

All vulnerabilities in search

News

SSA-501673 V1.0: Apache Log4j Denial of Service Vulnerability (CVE-2021-45105) - Impact to Siemens Productssiemens-productcert
SSA-661247 V1.0: Apache Log4j Vulnerability (CVE-2021-44228, Log4Shell) - Impact to Siemens Productssiemens-productcert
SSA-479842 V1.0: Apache Log4j Vulnerabilities - Impact to Siemens Energy Sensformer (Platform, Basic and Advanced)siemens-productcert

All products by Oracle

Key figures

Vulnerabilities

News