CO
Product
Communications Operations Monitor
by Oracle · last CVE Apr 27, 2022
On CISA KEVExploited in the wild
44
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 7High 19Medium 18Low 0
Watch

Add Communications Operations Monitor to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-11023
In wildKEV
6.1
85%
Apr 29
Potential XSS vulnerability in jQuery
Affected: 4.1 through 4.3; 3.4
CVE-2021-44790
9.8
97%
Dec 20
A carefully crafted request body can cause a buffer overflow in the mod_lua multipart parser (r:parsebody() called from Lua scripts)
Affected: 4.3; 4.4; 5.0
CVE-2019-5482
9.8
18%
Sep 16
Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3
Affected: 3.4; 4.0; 4.1; 4.2; 4.3
CVE-2019-5481
9.8
7%
Sep 16
Double-free vulnerability in the FTP-kerberos code in cURL 7.52.0 to 7.65.3
Affected: 3.4; 4.0; 4.1; 4.2; 4.3
CVE-2019-7164
9.8
4%
Feb 20
SQLAlchemy through 1.2.17 and 1.3.x through 1.3.0b2 allows SQL Injection via the order_by parameter
Affected: 4.2; 4.3
CVE-2019-3822
9.8
13%
Feb 6
libcurl versions from 7.36.0 to before 7.64.0 are vulnerable to a stack-based buffer overflow
Affected: 3.4; 4.0
CVE-2018-11219
9.8
7%
Jun 17
An Integer Overflow issue was discovered in the struct library in the Lua subsystem in Redis before 3.2.12, 4.x before 4.0.10, and 5.x before 5.0 RC2, leading to a failure of…
Affected: 3.4; 4.0
CVE-2018-11218
9.8
59%
Jun 17
Memory Corruption was discovered in the cmsgpack library in the Lua subsystem in Redis before 3.2.12, 4.x before 4.0.10, and 5.x before 5.0 RC2 because of stack-based buffer…
Affected: 3.4; 4.0
CVE-2021-32762
8.8
3%
Oct 4
Redis is an open source, in-memory database that persists on disk
Affected: 4.3; 4.4; 5.0
CVE-2021-32626
8.8
16%
Oct 4
Redis is an open source, in-memory database that persists on disk
Affected: 4.3; 4.4; 5.0
CVE-2021-44224
8.2
82%
Dec 20
A crafted URI sent to httpd configured as a forward proxy (ProxyRequests on) can cause a crash (NULL pointer dereference) or, for configurations mixing forward and reverse proxy…
Affected: 4.0; 4.3; 4.4; 5.0
CVE-2022-24735
7.8
2%
Apr 27
Redis is an in-memory database that persists on disk
Affected: 4.3; 4.4; 5.0
CVE-2019-7548
7.8
2%
Feb 6
SQLAlchemy 1.2.17 has SQL Injection when the group_by parameter can be controlled
Affected: 4.2; 4.3
CVE-2021-23017
7.7
53%
Jun 1
A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting…
Affected: 3.4; 4.2; 4.3; 4.4
CVE-2020-14147
7.7
3%
Jun 15
An integer overflow in the getnum function in lua_struct.c in Redis before 6.0.3 allows context-dependent attackers with permission to run Lua code in a Redis session to cause a…
Affected: 3.4; 4.1; 4.2; 4.3
CVE-2021-41099
7.5
4%
Oct 4
Redis is an open source, in-memory database that persists on disk
Affected: 4.3; 4.4; 5.0
CVE-2021-32687
7.5
4%
Oct 4
Redis is an open source, in-memory database that persists on disk
Affected: 4.3; 4.4; 5.0
CVE-2021-32675
7.5
16%
Oct 4
Redis is an open source, in-memory database that persists on disk
Affected: 4.3; 4.4; 5.0
CVE-2021-32628
7.5
14%
Oct 4
Redis is an open source, in-memory database that persists on disk
Affected: 4.3; 4.4; 5.0
CVE-2021-32627
7.5
4%
Oct 4
Redis is an open source, in-memory database that persists on disk
Affected: 4.3; 4.4; 5.0
CVE-2019-16056
7.5
5%
Sep 6
An issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7.x through 3.7.4
Affected: 4.1 through 4.3; 3.4
CVE-2018-16890
7.5
5%
Feb 6
libcurl versions from 7.36.0 to before 7.64.0 is vulnerable to a heap buffer out-of-bounds read
Affected: 3.4; 4.0
CVE-2019-3823
7.5
4%
Feb 6
libcurl versions from 7.34.0 to before 7.64.0 are vulnerable to a heap out-of-bounds read in the code handling the end-of-response for SMTP
Affected: 3.4; 4.0
CVE-2017-3730
7.5
55%
May 4
In OpenSSL 1.1.0 before 1.1.0d, if a malicious server supplies bad parameters for a DHE or ECDHE key exchange then this can result in the client attempting to dereference a NULL…
Affected: 3.4; 4.0
CVE-2022-21395
7.2
1%
Jan 19
Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Engine)
Affected: 3.4; 4.2; 4.3; 4.4; 5.0
CVE-2019-10193
7.2
24%
Jul 11
A stack-buffer overflow vulnerability was found in the Redis hyperloglog data structure versions 3.x before 3.2.13, 4.x before 4.0.14 and 5.x before 5.0.4
Affected: 3.4; 4.1
CVE-2019-10192
7.2
26%
Jul 11
A heap-buffer overflow vulnerability was found in the Redis hyperloglog data structure versions 3.x before 3.2.13, 4.x before 4.0.14 and 5.x before 5.0.4
Affected: 3.4; 4.1
CVE-2022-21403
6.6
1%
Jan 19
Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Engine)
Affected: 3.4; 4.2; 4.3; 4.4; 5.0
CVE-2022-21401
6.6
1%
Jan 19
Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Engine)
Affected: 3.4; 4.2; 4.3; 4.4; 5.0
CVE-2022-21399
6.6
1%
Jan 19
Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Engine)
Affected: 3.4; 4.2; 4.3; 4.4; 5.0
CVE-2016-3513
6.5
3%
Jul 21
Unspecified vulnerability in the Oracle Communications Operations Monitor component in Oracle Communications Applications before 3.3.92.0.0 allows remote authenticated users to…
Affected: through 3.3.92.0.0
CVE-2021-41184
6.1
41%
Oct 26
jQuery-UI is the official jQuery user interface library
Affected: 4.3; 4.4; 5.0
CVE-2021-41183
6.1
9%
Oct 26
jQuery-UI is the official jQuery user interface library
Affected: 4.3; 4.4; 5.0
CVE-2021-41182
6.1
39%
Oct 26
jQuery-UI is the official jQuery user interface library
Affected: 4.3; 4.4; 5.0; 4.3; 4.4; 5.0
CVE-2019-11358
6.1
87%
Apr 20
jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution
Affected: 4.1 through 4.3; 3.4; 4.0; 4.1.0
CVE-2022-24736
5.5
1%
Apr 27
Redis is an in-memory database that persists on disk
Affected: 4.3; 4.4; 5.0
CVE-2022-21400
5.4
1%
Jan 19
Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Engine)
Affected: 3.4; 4.2; 4.3; 4.4; 5.0
CVE-2022-21398
5.4
1%
Jan 19
Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Engine)
Affected: 3.4; 4.2; 4.3; 4.4; 5.0
CVE-2022-21397
5.4
1%
Jan 19
Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Engine)
Affected: 3.4; 4.2; 4.3; 4.4; 5.0
CVE-2022-21396
5.4
1%
Jan 19
Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Engine)
Affected: 3.4; 4.2; 4.3; 4.4; 5.0
CVE-2022-21246
5.4
1%
Jan 19
Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Engine)
Affected: 3.4; 4.2; 4.3; 4.4; 5.0
CVE-2019-15165
5.3
3%
Oct 3
sf-pcapng.c in libpcap before 1.9.1 does not properly validate the PHB header length before allocating memory
Affected: 3.4; 4.0; 4.1; 4.2; 4.3
CVE-2022-21402
4.8
1%
Jan 19
Vulnerability in the Oracle Communications Operations Monitor product of Oracle Communications (component: Mediation Engine)
Affected: 3.4; 4.2; 4.3; 4.4; 5.0
CVE-2021-32672
4.3
2%
Oct 4
Redis is an open source, in-memory database that persists on disk
Affected: 4.3; 4.4; 5.0
Showing 44