CB
Product
Communications Billing And Revenue Management
68
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 17High 35Medium 11Low 5
Watch
Add Communications Billing And Revenue Management to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-8203 | 7.4 | Jul 15 | Prototype pollution attack when using _.zipObjectDeep in lodash before 4.17.20 Affected: 7.5.0.23.0; 12.0.0.3.0 |
| CVE-2019-10086 | 7.3 | Aug 20 | In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property… Affected: 7.5; 12.0.0.3.0 |
| CVE-2020-7017 | 6.7 | Jul 27 | In Kibana versions before 6.8.11 and 7.8.1 the region map visualization in contains a stored XSS flaw Affected: 12.0.0.3.0 |
| CVE-2022-21601 | 6.5 | Oct 18 | Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: Connection Manager) Affected: 12.0.0.4.0 through 12.0.0.7.0 |
| CVE-2022-21573 | 6.5 | Jul 19 | Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: Billing Care) Affected: 12.0.0.4.0 through 12.0.0.6.0 |
| CVE-2020-11022 | 6.1 | Apr 29 | In jQuery starting with 1.12.0 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e Affected: 7.5.0.23.0; 12.0.0.3.0; 7.5.0.23.0; 12.0.0.3.0 |
| CVE-2019-10219 | 6.1 | Nov 8 | A vulnerability was found in Hibernate-Validator Affected: 12.0.0.3; 12.0.0.4 |
| CVE-2019-11358 | 6.1 | Apr 20 | jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution Affected: 7.5; 7.5.0.23.0; 12.0; 12.0.0.3.0 |
| CVE-2021-45105 | 5.9 | Dec 18 | Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups Affected: 12.0.0.4; 12.0.0.5 |
| CVE-2022-21572 | 5.4 | Jul 19 | Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: Billing Care) Affected: 12.0.0.4.0 through 12.0.0.6.0 |
| CVE-2022-21574 | 5.3 | Jul 19 | Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: Connection Manager) Affected: 12.0.0.4.0 through 12.0.0.6.0 |
| CVE-2021-22876 | 5.3 | Apr 1 | curl 7.1.1 to and including 7.75.0 is vulnerable to an "Exposure of Private Personal Information to an Unauthorized Actor" by leaking credentials in the HTTP Referer: header Affected: 12.0.0.3.0 |
| CVE-2020-7016 | 4.8 | Jul 27 | Kibana versions before 6.8.11 and 7.8.1 contain a denial of service (DoS) flaw in Timelion Affected: 12.0.0.3.0 |
| CVE-2021-22890 | 3.7 | Apr 1 | curl 7.63.0 to and including 7.75.0 includes vulnerability that allows a malicious HTTPS proxy to MITM a connection due to bad handling of TLS 1.3 session tickets Affected: 12.0.0.3.0 |
| CVE-2020-8284 | 3.7 | Dec 14 | A malicious server can use the FTP PASV response to trick curl 7.73.0 and earlier into connecting back to a given IP address and port, and this way potentially make curl extract… Affected: 12.0.0.3.0 |
| CVE-2020-9488 | 3.7 | Apr 27 | Improper validation of certificate with host mismatch in Apache Log4j SMTP appender Affected: 7.5.0.23.0; 12.0.0.3.0 |
| CVE-2022-21268 | 3.3 | Jan 19 | Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: Pipeline Manager) Affected: 12.0.0.3.0; 12.0.0.4.0 |
| CVE-2022-21267 | 3.3 | Jan 19 | Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: Pipeline Manager) Affected: 12.0.0.3.0; 12.0.0.4.0 |