CB
Product
Communications Billing And Revenue Management
68
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 17High 35Medium 11Low 5
Watch
Add Communications Billing And Revenue Management to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-10878 | 8.6 | Jun 5 | Perl before 5.30.3 has an integer overflow related to mishandling of a "PL_regkind[OP(n)] == NOTHING" situation Affected: 12.0.0.2.0; 12.0.0.3.0 |
| CVE-2022-21430 | 8.5 | Apr 19 | Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: Connection Manager) Affected: 12.0.0.4; 12.0.0.5 |
| CVE-2022-21424 | 8.3 | Apr 19 | Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: Connection Manager) Affected: 12.0.0.4 |
| CVE-2021-2351 | 8.3 | Jul 21 | Vulnerability in the Advanced Networking Option component of Oracle Database Server Affected: 12.0.0.4; 12.0.0.5 |
| CVE-2020-10543 | 8.2 | Jun 5 | Perl before 5.30.3 on 32-bit platforms allows a heap-based buffer overflow because nested regular expression quantifiers have an integer overflow Affected: 12.0.0.2.0; 12.0.0.3.0 |
| CVE-2022-21429 | 8.1 | Jul 19 | Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: Billing Care) Affected: 12.0.0.4.0 through 12.0.0.6.0 |
| CVE-2020-36182 | 8.1 | Jan 7 | FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to… Affected: 7.5.0.23.0; 12.0.0.3.0 |
| CVE-2020-36180 | 8.1 | Jan 7 | FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to… Affected: 7.5.0.23.0; 12.0.0.3.0 |
| CVE-2020-36179 | 8.1 | Jan 7 | FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to… Affected: 7.5.0.23.0; 12.0.0.3.0 |
| CVE-2020-36184 | 8.1 | Jan 6 | FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to… Affected: 7.5.0.23.0; 12.0.0.3.0 |
| CVE-2020-36181 | 8.1 | Jan 6 | FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to… Affected: 7.5.0.23.0; 12.0.0.3.0 |
| CVE-2020-36183 | 8.1 | Jan 6 | FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to… Affected: 7.5.0.23.0; 12.0.0.3.0 |
| CVE-2020-36185 | 8.1 | Jan 6 | FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to… Affected: 7.5.0.23.0; 12.0.0.3.0 |
| CVE-2020-36186 | 8.1 | Jan 6 | FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to… Affected: 7.5.0.23.0; 12.0.0.3.0 |
| CVE-2020-36187 | 8.1 | Jan 6 | FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to… Affected: 7.5.0.23.0; 12.0.0.3.0 |
| CVE-2020-36188 | 8.1 | Jan 6 | FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to… Affected: 7.5.0.23.0; 12.0.0.3.0 |
| CVE-2020-36189 | 8.1 | Jan 6 | FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to… Affected: 7.5.0.23.0; 12.0.0.3.0 |
| CVE-2020-35728 | 8.1 | Dec 27 | FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to… Affected: 7.5.0.23.0; 12.0.0.3.0 |
| CVE-2026-61126 | 7.8 | Jul 21 | Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: Platform) Affected: 15.0.0.0.0 through 15.0.1.0.0; 15.1.0.0.0 through 15.2.0.0.0 |
| CVE-2026-61091 | 7.8 | Jul 21 | Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications (component: BRM Server) Affected: 15.0.0.0.0; 15.0.1.0.0; 15.1.0.0.0; 15.2.0.0.0 |
| CVE-2021-3345 | 7.8 | Jan 29 | _gcry_md_block_write in cipher/hash-common.c in Libgcrypt version 1.9.0 has a heap-based buffer overflow when the digest final function sets a large count value Affected: 12.0.0.3.0 |
| CVE-2022-21422 | 7.5 | Apr 19 | Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: Connection Manager) Affected: 12.0.0.4; 12.0.0.5 |
| CVE-2020-36518 | 7.5 | Mar 11 | jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects Affected: 12.0.0.4.0 through 12.0.0.6.0 |
| CVE-2022-21266 | 7.5 | Jan 19 | Vulnerability in the Oracle Communications Billing and Revenue Management product of Oracle Communications Applications (component: Pipeline Manager) Affected: 12.0.0.3.0; 12.0.0.4.0 |
| CVE-2021-35516 | 7.5 | Jul 13 | When reading a specially crafted 7Z archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs Affected: 12.0.0.4 |
| CVE-2021-35515 | 7.5 | Jul 13 | When reading a specially crafted 7Z archive, the construction of the list of codecs that decompress an entry can result in an infinite loop Affected: 12.0.0.4 |
| CVE-2021-36090 | 7.5 | Jul 13 | Apache Commons Compress 1.0 to 1.20 denial of service vulnerability Affected: 12.0.0.4 |
| CVE-2021-35517 | 7.5 | Jul 13 | Apache Commons Compress 1.1 to 1.20 denial of service vulnerability Affected: 12.0.0.4 |
| CVE-2020-8286 | 7.5 | Dec 14 | curl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to insufficient verification of the OCSP response Affected: 12.0.0.3.0 |
| CVE-2020-8285 | 7.5 | Dec 14 | curl 7.21.0 to and including 7.73.0 is vulnerable to uncontrolled recursion due to a stack overflow issue in FTP wildcard match parsing Affected: 12.0.0.3.0 |
| CVE-2020-25649 | 7.5 | Dec 3 | A flaw was found in FasterXML Jackson Databind, where it did not have entity expansion secured properly Affected: 7.5.0.23.0; 12.0.0.3.0 |
| CVE-2020-12723 | 7.5 | Jun 5 | regcomp.c in Perl before 5.30.3 allows a buffer overflow via a crafted regular expression because of recursive S_study_chunk calls Affected: 12.0.0.2.0; 12.0.0.3.0 |
| CVE-2016-2381 | 7.5 | Apr 8 | Perl might allow context-dependent attackers to bypass the taint protection mechanism in a child process via duplicate environment variables in envp Affected: 7.5 |
| CVE-2020-8203 | 7.4 | Jul 15 | Prototype pollution attack when using _.zipObjectDeep in lodash before 4.17.20 Affected: 7.5.0.23.0; 12.0.0.3.0 |
| CVE-2019-10086 | 7.3 | Aug 20 | In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property… Affected: 7.5; 12.0.0.3.0 |
Showing 35