CB
Product
Communications Brm - Elastic Charging Engine
14
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 7Medium 6Low 0
Watch
Add Communications Brm - Elastic Charging Engine to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-29505 | 8.8 | May 28 | XStream is vulnerable to a Remote Command Execution attack Affected: 11.3; 12.0 |
| CVE-2021-22118 | 7.8 | May 27 | In Spring Framework, versions 5.2.x prior to 5.2.15 and versions 5.3.x prior to 5.3.7, a WebFlux application is vulnerable to a privilege escalation: by (re)creating the temporary… Affected: 12.0.0.3 |
| CVE-2021-43859 | 7.5 | Feb 1 | XStream is an open source java library to serialize objects to XML and back again Affected: before 12.0.0.4.6; 12.0.0.5.0 |
| CVE-2021-37137 | 7.5 | Oct 19 | The Snappy frame decoder function doesn't restrict the chunk length which may lead to excessive memory usage Affected: before 12.0.0.4.6; 12.0.0.5.0 |
| CVE-2021-37136 | 7.5 | Oct 19 | The Bzip2 decompression decoder function doesn't allow setting size restrictions on the decompressed output data (which affects the allocation size used during decompression) Affected: before 12.0.0.4.6; 12 |
| CVE-2020-11612 | 7.5 | Apr 7 | The ZlibDecoders in Netty 4.1.x before 4.1.46 allow for unbounded memory allocation while decoding a ZlibEncoded byte stream Affected: 12.0.0.3 |
| CVE-2018-15756 | 7.5 | Oct 18 | DoS Attack via Range Requests Affected: 11.3; 12.0 |
Showing 7