EC
Product
Enterprise Communications Broker
27
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 12Medium 10Low 1
Watch
Add Enterprise Communications Broker to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-3711 | 9.8 | Aug 24 | SM2 Decryption Buffer Overflow Affected: 3.2.0; 3.3.0 |
| CVE-2018-11236 | 9.8 | May 18 | stdlib/canonicalize.c in the GNU C Library (aka glibc or libc6) 2.27 and earlier, when processing very long pathname arguments to the realpath function, could encounter an integer… Affected: 3.0.0; 3.1.0 |
| CVE-2018-6485 | 9.8 | Feb 1 | An integer overflow in the implementation of the posix_memalign in memalign functions in the GNU C Library (aka glibc or libc6) 2.26 and earlier could cause these functions to… Affected: 3.0.0; 3.1.0 |
| CVE-2018-16865 | 7.8 | Jan 11 | An allocation of memory without limits, that could result in the stack clashing with another memory region, was discovered in systemd-journald when many entries are sent to the… Affected: 3.0.0; 3.1.0 |
| CVE-2018-16864 | 7.8 | Jan 11 | An allocation of memory without limits, that could result in the stack clashing with another memory region, was discovered in systemd-journald when a program with long command… Affected: 3.0.0; 3.1.0 |
| CVE-2018-11237 | 7.8 | May 18 | An AVX-512-optimized implementation of the mempcpy function in the GNU C Library (aka glibc or libc6) 2.27 and earlier may write data beyond the target buffer, leading to a buffer… Affected: 3.0.0; 3.1.0 |
| CVE-2021-23017 | 7.7 | Jun 1 | A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting… Affected: 3.3.0 |
| CVE-2020-10725 | 7.7 | May 20 | A flaw was found in DPDK version 19.11 and above that allows a malicious guest to cause a segmentation fault of the vhost-user backend application running on the host, which could… Affected: 3.1.0; 3.2.0 |
| CVE-2020-11080 | 7.5 | Jun 3 | In nghttp2 before version 1.41.0, the overly large HTTP/2 SETTINGS frame payload causes denial of service Affected: 3.1.0; 3.2.0 |
| CVE-2019-9513 | 7.5 | Aug 13 | Some HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service Affected: 3.1.0; 3.2.0 |
| CVE-2019-9511 | 7.5 | Aug 13 | Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service Affected: 3.1.0; 3.2.0 |
| CVE-2016-3515 | 7.5 | Jul 21 | Unspecified vulnerability in the Oracle Enterprise Communications Broker component in Oracle Communications Applications before PCz 2.0.0m4p1 allows remote attackers to affect… Affected: through 2.0.041 |
| CVE-2021-3712 | 7.4 | Aug 24 | ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length Affected: 3.2.0; 3.3.0 |
| CVE-2020-8203 | 7.4 | Jul 15 | Prototype pollution attack when using _.zipObjectDeep in lodash before 4.17.20 Affected: 3.2.0; 3.3.0; pcz3.3 |
| CVE-2021-23337 | 7.2 | Feb 15 | Command Injection Affected: 3.2.0; 3.3.0 |
| CVE-2020-10723 | 6.7 | May 19 | A memory corruption issue was found in DPDK versions 17.05 and above Affected: 3.1.0; 3.2.0 |
| CVE-2020-10722 | 6.7 | May 19 | A vulnerability was found in DPDK versions 18.05 and above Affected: 3.1.0; 3.2.0 |
| CVE-2016-3514 | 6.5 | Jul 21 | Unspecified vulnerability in the Oracle Enterprise Communications Broker component in Oracle Communications Applications before PCz 2.0.0m4p1 allows remote authenticated users to… Affected: through 2.0.041 |
| CVE-2020-14721 | 6.3 | Jul 15 | Vulnerability in the Oracle Enterprise Communications Broker product of Oracle Communications Applications (component: WebGUI) Affected: 3.0.0 through 3.2.0 |
| CVE-2020-14563 | 6.1 | Jul 15 | Vulnerability in the Oracle Enterprise Communications Broker product of Oracle Communications Applications (component: WebGUI) Affected: 3.0.0 through 3.2.0 |
| CVE-2020-1971 | 5.9 | Dec 8 | The X.509 GeneralName type is a generic type for representing different types of names Affected: pcz3.1; pcz3.2; pcz3.3 |
| CVE-2020-14722 | 5.8 | Jul 15 | Vulnerability in the Oracle Enterprise Communications Broker product of Oracle Communications Applications (component: WebGUI) Affected: 3.0.0 through 3.2.0 |
| CVE-2020-28500 | 5.3 | Feb 15 | Regular Expression Denial of Service (ReDoS) Affected: 3.2.0; 3.3.0 |
| CVE-2021-29425 | 4.8 | Apr 13 | Possible limited path traversal vulnerabily in Apache Commons IO Affected: 3.3 |
| CVE-2020-10726 | 4.4 | May 20 | A vulnerability was found in DPDK versions 19.11 and above Affected: 3.1.0; 3.2.0 |
| CVE-2016-3516 | 3.1 | Jul 21 | Unspecified vulnerability in the Oracle Enterprise Communications Broker component in Oracle Communications Applications before PCz 2.0.0m4p1 allows remote authenticated users to… Affected: through 2.0.041 |
| CVE-2014-9708 | – | Mar 31 | Embedthis Appweb before 4.6.6 and 5.x before 5.2.1 allows remote attackers to cause a denial of service (NULL pointer dereference) via a Range header with an empty value, as… Affected: through 2.0.0 |
Showing 27