CD
Product
Communications Design Studio
15
CVEs
0
On KEV
8.3
Max CVSS
0
New 30D
Severity mix
Critical 0High 5Medium 10Low 0
Watch
Add Communications Design Studio to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-2351 | 8.3 | Jul 21 | Vulnerability in the Advanced Networking Option component of Oracle Database Server Affected: 7.3.5; 7.4.0; 7.4.1; 7.4.2 |
| CVE-2020-11612 | 7.5 | Apr 7 | The ZlibDecoders in Netty 4.1.x before 4.1.46 allow for unbounded memory allocation while decoding a ZlibEncoded byte stream Affected: 7.4.2 |
| CVE-2019-0227 | 7.5 | May 1 | A Server Side Request Forgery (SSRF) vulnerability affected the Apache Axis 1.4 distribution that was last released in 2006 Affected: 7.3.4.3.0; 7.3.5.5.0; 7.4.0.4.0; 7.4.1.1.0 |
| CVE-2019-10086 | 7.3 | Aug 20 | In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property… Affected: 7.3.4; 7.3.5; 7.4.0 |
| CVE-2021-23337 | 7.2 | Feb 15 | Command Injection Affected: 7.4.2.0.0 |
| CVE-2022-22969 | 6.5 | Apr 21 | <Issue Description> Spring Security OAuth versions 2.5.x prior to 2.5.2 and older unsupported versions are susceptible to a Denial-of-Service (DoS) attack via the initiation of… Affected: 7.4.2 |
| CVE-2021-43797 | 6.5 | Dec 9 | HTTP fails to validate against control chars in header names which may lead to HTTP request smuggling Affected: 7.4.2 |
| CVE-2020-5421 | 6.5 | Sep 19 | RFD Protection Bypass via jsessionid Affected: 7.3.4; 7.3.5; 7.4.0 |
| CVE-2019-16168 | 6.5 | Sep 9 | In SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other application because of missing validation of a sqlite_stat1 sz field, aka a "severe… Affected: 7.3.4.3.0; 7.3.5.5.0; 7.4.0.4.0 |
| CVE-2019-10219 | 6.1 | Nov 8 | A vulnerability was found in Hibernate-Validator Affected: 7.3.4; 7.3.5; 7.4.0; 7.4.1; 7.4.2 |
| CVE-2018-8032 | 6.1 | Aug 2 | Apache Axis 1.x up to and including 1.4 is vulnerable to a cross-site scripting (XSS) attack in the default servlet/services Affected: 7.3.4.3.0; 7.3.5.5.0; 7.4.0.4.0; 7.4.1.1.0 |
| CVE-2021-21409 | 5.9 | Mar 30 | Possible request smuggling in HTTP/2 due missing validation of content-length Affected: 7.4.2.0.0 |
| CVE-2021-21290 | 5.5 | Feb 8 | Local Information Disclosure Vulnerability in Netty on Unix-Like systems due temporary files Affected: 7.4.2 |
| CVE-2020-28500 | 5.3 | Feb 15 | Regular Expression Denial of Service (ReDoS) Affected: 7.4.2 |
| CVE-2021-29425 | 4.8 | Apr 13 | Possible limited path traversal vulnerabily in Apache Commons IO Affected: 7.4.0 through 7.4.2; 7.3.5 |
Showing 15