CM
Product
Communications Messaging Server
40
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 20Medium 14Low 0
Watch
Add Communications Messaging Server to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-13954 | 6.1 | Nov 12 | By default, Apache CXF creates a /services page containing a listing of the available endpoint names and addresses Affected: 8.0.2; 8.1 |
| CVE-2021-45105 | 5.9 | Dec 18 | Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups Affected: 8.1 |
| CVE-2021-21409 | 5.9 | Mar 30 | Possible request smuggling in HTTP/2 due missing validation of content-length Affected: 8.1 |
| CVE-2021-31812 | 5.5 | Jun 12 | In Apache PDFBox, a carefully crafted PDF file can trigger an infinite loop while loading the file Affected: 8.1 |
| CVE-2021-31811 | 5.5 | Jun 12 | In Apache PDFBox, a carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file Affected: 8.1 |
| CVE-2021-28657 | 5.5 | Mar 31 | A carefully crafted or corrupt file may trigger an infinite loop in Tika's MP3Parser up to and including Tika 1.25 Affected: 8.1 |
| CVE-2021-27906 | 5.5 | Mar 19 | A carefully crafted PDF file can trigger an OutOfMemory-Exception while loading the file Affected: 8.1 |
| CVE-2021-27807 | 5.5 | Mar 19 | A carefully crafted PDF file can trigger an infinite loop while loading the file Affected: 8.1 |
| CVE-2021-21290 | 5.5 | Feb 8 | Local Information Disclosure Vulnerability in Netty on Unix-Like systems due temporary files Affected: 8.1 |
| CVE-2020-15358 | 5.5 | Jun 27 | In SQLite before 3.32.3, select.c mishandles query-flattener optimization, leading to a multiSelectOrderBy heap overflow because of misuse of transitive properties for constant… Affected: 8.1 |
| CVE-2020-9489 | 5.5 | Apr 27 | A carefully crafted or corrupt file may trigger a System.exit in Tika's OneNote Parser Affected: 8.1 |
| CVE-2020-1951 | 5.5 | Mar 23 | A carefully crafted or corrupt PSD file can cause an infinite loop in Apache Tika's PSDParser in versions 1.0-1.23 Affected: 8.0.2; 8.1 |
| CVE-2020-1950 | 5.5 | Mar 23 | A carefully crafted or corrupt PSD file can cause excessive memory usage in Apache Tika's PSDParser in versions 1.0-1.23 Affected: 8.0.2; 8.1 |
| CVE-2016-5455 | 5.3 | Jul 21 | Unspecified vulnerability in the Oracle Communications Messaging Server component in Oracle Communications Applications 6.3, 7.0, and 8.0 allows remote attackers to affect… Affected: 6.3; 7.0; 8.0 |
Showing 14