CP
Product
Communications Pricing Design Center
On CISA KEVExploited in the wild
41
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 26Medium 9Low 2
Watch
Add Communications Pricing Design Center to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-30640 | 6.5 | Jul 12 | Auth weakness in JNDIRealm Affected: 12.0.0.3.0 |
| CVE-2020-6950 | 6.5 | Jun 2 | Directory traversal in Eclipse Mojarra before 2.3.14 allows attackers to read arbitrary files via the loc parameter or con parameter Affected: 12.0.0.3.0 |
| CVE-2021-45105 | 5.9 | Dec 18 | Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups Affected: 12.0.0.4; 12.0.0.5 |
| CVE-2021-23336 | 5.9 | Feb 15 | Web Cache Poisoning Affected: 12.0.0.3.0 |
| CVE-2022-24329 | 5.3 | Feb 25 | In JetBrains Kotlin before 1.6.0, it was not possible to lock dependencies for Multiplatform Gradle Projects Affected: 12.0.0.4; 12.0.0.5 |
| CVE-2021-33037 | 5.3 | Jul 12 | Incorrect Transfer-Encoding handling with HTTP/1.0 Affected: 12.0.0.3.0 |
| CVE-2021-29425 | 4.8 | Apr 13 | Possible limited path traversal vulnerabily in Apache Commons IO Affected: 12.0.0.4.0; 12.0.0.5.0 |
| CVE-2020-27218 | 4.8 | Nov 28 | In Eclipse Jetty version 9.4.0.RC0 to 9.4.34.v20201102, 10.0.0.alpha0 to 10.0.0.beta2, and 11.0.0.alpha0 to 11.0.0.beta2, if GZIP request body inflation is enabled and requests… Affected: 12.0.0.3.0 |
| CVE-2021-21275 | 4.3 | Jan 25 | The MediaWiki "Report" extension has a Cross-Site Request Forgery (CSRF) vulnerability Affected: 12.0.0.4.0; 12.0.0.5.0 |
Showing 9