VendorsOraclecommunications_billing_and_revenue_management_elastic_charging_engine11.3
Vulnerabilities

Oracle Communications Billing 11.3

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

17CVEs
CVE-2021-39139
XStream is vulnerable to an Arbitrary Code Execution attack
Published 2021-08-23 · Analyzed
8.8EPSS 0.045
CVE-2021-39144
XStream is vulnerable to a Remote Command Execution attack
Published 2021-08-23 · Analyzed
8.5KEVEPSS 0.981
CVE-2021-39141
XStream is vulnerable to an Arbitrary Code Execution attack
Published 2021-08-23 · Analyzed
8.5EPSS 0.161
CVE-2021-39146
XStream is vulnerable to an Arbitrary Code Execution attack
Published 2021-08-23 · Analyzed
8.5EPSS 0.143
CVE-2021-39152
A Server-Side Forgery Request vulnerability in XStream via HashMap unmarshaling
Published 2021-08-23 · Analyzed
8.5EPSS 0.114
CVE-2021-39154
XStream is vulnerable to an Arbitrary Code Execution attack
Published 2021-08-23 · Analyzed
8.5EPSS 0.047
CVE-2021-39151
XStream is vulnerable to an Arbitrary Code Execution attack
Published 2021-08-23 · Analyzed
8.5EPSS 0.047
CVE-2021-39149
XStream is vulnerable to an Arbitrary Code Execution attack
Published 2021-08-23 · Analyzed
8.5EPSS 0.047
CVE-2021-39148
XStream is vulnerable to an Arbitrary Code Execution attack
Published 2021-08-23 · Analyzed
8.5EPSS 0.047
CVE-2021-39147
XStream is vulnerable to an Arbitrary Code Execution attack
Published 2021-08-23 · Analyzed
8.5EPSS 0.047
CVE-2021-39153
XStream is vulnerable to an Arbitrary Code Execution attack
Published 2021-08-23 · Analyzed
8.5EPSS 0.045
CVE-2021-39145
XStream is vulnerable to an Arbitrary Code Execution attack
Published 2021-08-23 · Analyzed
8.5EPSS 0.041
CVE-2021-39150
A Server-Side Forgery Request vulnerability in XStream via PriorityQueue unmarshaling
Published 2021-08-23 · Analyzed
8.5EPSS 0.034
CVE-2020-5398
RFD Attack via "Content-Disposition" Header Sourced from Request Input by Spring MVC or Spring WebFlux Application
Published 2020-01-16 · Modified
8.0EPSS 0.888
CVE-2021-39140
XStream can cause a Denial of Service
Published 2021-08-23 · Analyzed
6.5EPSS 0.059
CVE-2019-10219
A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.
Published 2019-11-08 · Modified
6.5EPSS 0.022
CVE-2021-29425
Possible limited path traversal vulnerabily in Apache Commons IO
Published 2021-04-13 · Modified
5.8EPSS 0.099