CO
Product
Communications Order And Service Management
13
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 12Low 0
Watch
Add Communications Order And Service Management to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-0227 | 7.5 | May 1 | A Server Side Request Forgery (SSRF) vulnerability affected the Apache Axis 1.4 distribution that was last released in 2006 Affected: 7.3.0.0.0; 7.4 |
| CVE-2025-21542 | 6.3 | Jan 21 | Vulnerability in the Oracle Communications Order and Service Management product of Oracle Communications Applications (component: Security) Affected: 7.4.0; 7.4.1; 7.5.0 |
| CVE-2020-1945 | 6.3 | May 14 | Apache Ant 1.1 to 1.9.14 and 1.10.0 to 1.10.7 uses the default temporary directory identified by the Java system property java.io.tmpdir for several tasks and may thus leak… Affected: 7.3; 7.4 |
| CVE-2018-2756 | 6.3 | Apr 19 | Vulnerability in the Oracle Communications Order and Service Management component of Oracle Communications Applications (subcomponent: WebUI) Affected: 7.2.4.3.0; 7.3.0.1.0; 7.3.0.1.5; 7.3.1.0.7; 7.3.5.0.0 |
| CVE-2018-8032 | 6.1 | Aug 2 | Apache Axis 1.x up to and including 1.4 is vulnerable to a cross-site scripting (XSS) attack in the default servlet/services Affected: 7.3.0.0.0; 7.4 |
| CVE-2018-2567 | 6.1 | Jan 18 | Vulnerability in the Oracle Communications Order and Service Management component of Oracle Communications Applications (subcomponent: Portal) Affected: 7.2.4.1.0; 7.2.4.1.5; 7.2.4.2.0; 7.2.4.2.1; 7.2.4.2.10; 7.3.0.0.0; +5 more |
| CVE-2025-30729 | 5.5 | Apr 15 | Vulnerability in the Oracle Communications Order and Service Management product of Oracle Communications Applications (component: Security) Affected: 7.4.0; 7.4.1; 7.5.0 |
| CVE-2021-36374 | 5.5 | Jul 14 | When reading a specially crafted ZIP archive, or a derived formats, an Apache Ant build can be made to allocate large amounts of memory that leads to an out of memory error, even… Affected: 7.3; 7.4 |
| CVE-2021-36373 | 5.5 | Jul 14 | When reading a specially crafted TAR archive an Apache Ant build can be made to allocate large amounts of memory that finally leads to an out of memory error, even for small… Affected: 7.3; 7.4 |
| CVE-2025-21544 | 5.4 | Jan 21 | Vulnerability in the Oracle Communications Order and Service Management product of Oracle Communications Applications (component: Security) Affected: 7.4.0; 7.4.1; 7.5.0 |
| CVE-2025-21554 | 5.3 | Jan 21 | Vulnerability in the Oracle Communications Order and Service Management product of Oracle Communications Applications (component: Security) Affected: 7.4.0; 7.4.1; 7.5.0 |
| CVE-2021-29425 | 4.8 | Apr 13 | Possible limited path traversal vulnerabily in Apache Commons IO Affected: 7.3; 7.4 |
| CVE-2023-22088 | 4.3 | Oct 17 | Vulnerability in the Oracle Communications Order and Service Management product of Oracle Communications Applications (component: User Management) Affected: 7.4.0; 7.4.1 |
Showing 13