Vulnerabilities

TI-2026-43787 CVE-2026-61143 · GHSA-4h8j-4735-3w9g

Improper access control in Oracle Communications Convergent Charging Controller

LOW 30

Vulnerability in the Oracle Communications Convergent Charging Controller product of Oracle Communications (component: Prov IF).

CVSS 3.1MEDIUM 6.4 Network High privileges User interaction EPSS 0.00314 Published 2026-07-21 No fix listed CWE-284

TI-2021-20437 CVE-2021-45105 · GHSA-p6xc-xr62-6r2g

Apache Log4j2 does not always protect from infinite recursion in lookup evaluation

HIGH 72

Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.99999 Published 2021-12-18 Partial fix · 2.17.0, 2.12.3 +5 CWE-20

TI-2021-02021 CVE-2021-2351 · GHSA-gm3p-p24r-4wxq

Broken or risky cryptographic algorithm in Oracle WebLogic Server

MEDIUM 41

Vulnerability in the Advanced Networking Option component of Oracle Database Server.

CVSS 3.1HIGH 8.3 Network No auth User interaction EPSS 0.02432 Published 2021-07-20 No fix listed CWE-327

TI-2020-18499 CVE-2020-36179 · GHSA-9gph-22xh-8x98

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between…

MEDIUM 57

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.commons.dbcp.cpdsadapter.DriverAdapterCPDS.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.17065 Published 2021-01-06 Partial fix · 2.9.10.8, 2.6.7.5 CWE-502

TI-2020-18500 CVE-2020-36180 · GHSA-8c4j-34r4-xr8g

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between…

MEDIUM 47

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.cpdsadapter.DriverAdapterCPDS.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.04092 Published 2021-01-06 Partial fix · 2.9.10.8, 2.6.7.5 CWE-502

TI-2020-18502 CVE-2020-36182 · GHSA-89qr-369f-5m5x

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between…

MEDIUM 47

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.cpdsadapter.DriverAdapterCPDS.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.04092 Published 2021-01-06 Partial fix · 2.9.10.8, 2.6.7.5 CWE-502

TI-2020-18503 CVE-2020-36183 · GHSA-9m6f-7xcq-8vf8

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between…

MEDIUM 51

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.docx4j.org.apache.xalan.lib.sql.JNDIConnectionPool.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.04931 Published 2021-01-06 Partial fix · 2.9.10.8, 2.6.7.5 CWE-502

TI-2020-18504 CVE-2020-36184 · GHSA-m6x4-97wx-4q27

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between…

MEDIUM 51

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.PerUserPoolDataSource.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.08356 Published 2021-01-06 Partial fix · 2.9.10.8 CWE-502

TI-2020-18505 CVE-2020-36185 · GHSA-8w26-6f25-cm9x

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between…

MEDIUM 50

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp2.datasources.SharedPoolDataSource.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.04237 Published 2021-01-06 Partial fix · 2.9.10.8 CWE-502

TI-2020-18506 CVE-2020-36186 · GHSA-v585-23hc-c647

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between…

MEDIUM 50

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.PerUserPoolDataSource.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.04237 Published 2021-01-06 Partial fix · 2.9.10.8 CWE-502

TI-2020-18507 CVE-2020-36187 · GHSA-r695-7vr9-jgc2

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between…

MEDIUM 50

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.datasources.SharedPoolDataSource.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.04237 Published 2021-01-06 Partial fix · 2.9.10.8 CWE-502

TI-2020-18508 CVE-2020-36188 · GHSA-f9xh-2qgp-cq57

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between…

MEDIUM 55

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.JNDIConnectionSource.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.08787 Published 2021-01-06 Partial fix · 2.9.10.8, 2.6.7.5 CWE-502

TI-2020-18509 CVE-2020-36189 · GHSA-vfqx-33qm-g869

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between…

MEDIUM 50

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.DriverManagerConnectionSource.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.03987 Published 2021-01-06 Partial fix · 2.9.10.8, 2.6.7.5 CWE-502

TI-2020-18501 CVE-2020-36181 · GHSA-cvm9-fjm9-3572

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between…

MEDIUM 47

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.tomcat.dbcp.dbcp.cpdsadapter.DriverAdapterCPDS.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.04092 Published 2021-01-06 Partial fix · 2.9.10.8, 2.6.7.5 CWE-502

TI-2020-18187 CVE-2020-35728 · GHSA-5r5r-6hpj-8gg9

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between…

MEDIUM 51

FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.oracle.wls.shaded.org.apache.xalan.lib.sql.JNDIConnectionPool (aka embedded Xalan in org.…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.12405 Published 2020-12-27 Partial fix · 2.9.10.8 CWE-502

TI-2020-15666 CVE-2020-25649 · GHSA-288c-cq4h-88gq

XML external entity injection in jackson-databind

MEDIUM 56

A flaw was found in FasterXML Jackson Databind, where it did not have entity expansion secured properly.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.17714 Published 2020-12-03 Partial fix · 2.6.7.4, 2.9.10.7 +1 CWE-611

TI-2019-07539 CVE-2019-10219 · GHSA-m8p2-495h-ccmh

Cross-site scripting in hibernate-validator

LOW 31

A vulnerability was found in Hibernate-Validator.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.02157 Published 2019-11-08 Partial fix · 6.0.18.Final, 6.1.0.Final +1 CWE-79

Vulnerabilities

Filters