CC
Product
Communications Convergence
11
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 5Medium 5Low 0
Watch
Add Communications Convergence to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-1000613 | 9.8 | Jul 9 | Legion of the Bouncy Castle Legion of the Bouncy Castle Java Cryptography APIs 1.58 up to but not including 1.60 contains a CWE-470: Use of Externally-Controlled Input to Select… Affected: 3.0.2 |
| CVE-2023-21848 | 8.8 | Jan 18 | Vulnerability in the Oracle Communications Convergence product of Oracle Communications Applications (component: Admin Configuration) Affected: 3.0.3.1.0 |
| CVE-2020-28052 | 8.1 | Dec 18 | An issue was discovered in Legion of the Bouncy Castle BC Java 1.65 and 1.66 Affected: 3.0.2.2.0 |
| CVE-2019-17359 | 7.5 | Oct 8 | The ASN.1 parser in Bouncy Castle Crypto (aka BC Java) 1.63 can trigger a large attempted memory allocation, and resultant OutOfMemoryError error, via crafted ASN.1 data Affected: 3.0.1.0 through 3.0.2.1 |
| CVE-2019-10086 | 7.3 | Aug 20 | In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property… Affected: 3.0.2.2.0 |
| CVE-2017-10031 | 7.2 | Aug 8 | Vulnerability in the Oracle Communications Convergence component of Oracle Communications Applications (subcomponent: Mail Proxy (dojo)) Affected: 3.0; 3.0.1 |
| CVE-2019-10219 | 6.1 | Nov 8 | A vulnerability was found in Hibernate-Validator Affected: 3.0.2.2.0 |
| CVE-2018-2936 | 6.1 | Jul 18 | Vulnerability in the Oracle Communications Messaging Server component of Oracle Communications Applications (subcomponent: Web Client) Affected: 3.0.1 |
| CVE-2021-45105 | 5.9 | Dec 18 | Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups Affected: 3.0.2.2.0; 3.0.3.0 |
| CVE-2021-29425 | 4.8 | Apr 13 | Possible limited path traversal vulnerabily in Apache Commons IO Affected: 3.0.2.2.0 |
| CVE-2022-21338 | 4.6 | Jan 19 | Vulnerability in the Oracle Communications Convergence product of Oracle Communications Applications (component: General Framework) Affected: 3.0.2.2.0 |
Showing 11