CS
Product
Communications Session Route Manager
On CISA KEVExploited in the wild
74
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 6High 48Medium 18Low 2
Watch
Add Communications Session Route Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-44790 | 9.8 | Dec 20 | A carefully crafted request body can cause a buffer overflow in the mod_lua multipart parser (r:parsebody() called from Lua scripts) Affected: through 9.0 |
| CVE-2020-11998 | 9.8 | Sep 10 | A regression has been introduced in the commit preventing JMX re-bind Affected: 8.0.0 through 8.2.2 |
| CVE-2020-11984 | 9.8 | Aug 7 | Apache HTTP server 2.4.32 to 2.4.44 mod_proxy_uwsgi info disclosure and possible RCE Affected: 8.2.0 through 8.2.2 |
| CVE-2020-9546 | 9.8 | Mar 2 | FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to… Affected: 8.2.0 through 8.2.2 |
| CVE-2020-9548 | 9.8 | Mar 2 | FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPConfig (aka… Affected: 8.2.0 through 8.2.2 |
| CVE-2019-13990 | 9.8 | Jul 26 | initDocumentParser in xml/XMLSchedulingDataProcessor.java in Terracotta Quartz Scheduler through 2.3.0 allows XXE attacks via a job description Affected: 8.2.0 through 8.2.2 |
Showing 6