CE
Product
Communications Element Manager
On CISA KEVExploited in the wild
68
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 7High 44Medium 15Low 2
Watch
Add Communications Element Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-1938 In wildKEV | 9.8 | Feb 24 | Apache Tomcat Improper Privilege Management Vulnerability Affected: 8.1.1; 8.2.0; 8.2.1 |
| CVE-2021-44790 | 9.8 | Dec 20 | A carefully crafted request body can cause a buffer overflow in the mod_lua multipart parser (r:parsebody() called from Lua scripts) Affected: through 9.0 |
| CVE-2020-11998 | 9.8 | Sep 10 | A regression has been introduced in the commit preventing JMX re-bind Affected: 8.2.0 through 8.2.4.0 |
| CVE-2020-11984 | 9.8 | Aug 7 | Apache HTTP server 2.4.32 to 2.4.44 mod_proxy_uwsgi info disclosure and possible RCE Affected: 8.2.0 through 8.2.2 |
| CVE-2020-9546 | 9.8 | Mar 2 | FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to… Affected: 8.2.0 through 8.2.2 |
| CVE-2020-9548 | 9.8 | Mar 2 | FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPConfig (aka… Affected: 8.2.0 through 8.2.2 |
| CVE-2019-10082 | 9.1 | Sep 26 | In Apache HTTP Server 2.4.18-2.4.39, using fuzzed network input, the http/2 session handling could be made to read memory after being freed, during connection shutdown Affected: 8.0.0; 8.1.0; 8.1.1; 8.2.0 |
Showing 7