Enterprise Session Border Controller vulnerabilities

Product

Enterprise Session Border Controller

by Oracle · last CVE Oct 17, 2023

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities12 In the news0 Timeline

Severity mix

Critical 1High 4Medium 7Low 0

Severity

All severities12 Critical1 High4 Medium7 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Enterprise Session Border Controller to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2021-3711	9.8	88%	Aug 24	SM2 Decryption Buffer Overflow Affected: 8.4; 9.0
CVE-2022-21382	7.7	1%	Jan 19	Vulnerability in the Oracle Enterprise Session Border Controller product of Oracle Communications (component: WebUI) Affected: 8.4; 9.0
CVE-2021-23017	7.7	53%	Jun 1	A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting… Affected: 8.4; 9.0
CVE-2020-14630	7.5	1%	Jul 15	Vulnerability in the Oracle Enterprise Session Border Controller product of Oracle Communications Applications (component: File Upload) Affected: 8.1.0; 8.2.0; 8.3.0
CVE-2021-3712	7.4	50%	Aug 24	ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length Affected: 8.4; 9.0
CVE-2022-21381	6.4	1%	Jan 19	Vulnerability in the Oracle Enterprise Session Border Controller product of Oracle Communications (component: WebUI) Affected: 8.4; 9.0
CVE-2020-11022	6.1	99%	Apr 29	In jQuery starting with 1.12.0 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e Affected: 8.4; 8.4
CVE-2019-11358	6.1	87%	Apr 20	jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution Affected: 8.4
CVE-2020-1971	5.9	7%	Dec 8	The X.509 GeneralName type is a generic type for representing different types of names Affected: cz8.2; cz8.3; cz8.4
CVE-2021-29425	4.8	11%	Apr 13	Possible limited path traversal vulnerabily in Apache Commons IO Affected: 8.4; 9.0
CVE-2023-22083	4.3	0%	Oct 17	Vulnerability in the Oracle Enterprise Session Border Controller product of Oracle Communications (component: Web UI) Affected: 9.0 through 9.2
CVE-2022-21383	4.3	1%	Jan 19	Vulnerability in the Oracle Enterprise Session Border Controller product of Oracle Communications (component: Log) Affected: 8.4; 9.0