Oracle Communications Application Session Controller 3.9m0p1

CPE Details

Oracle Communications Application Session Controller 3.9m0p1
oracle
communications_application_session_controller
3.9m0p1
2020-12-28
12h06 +00:00
2020-12-28
12h06 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:a:oracle:communications_application_session_controller:3.9m0p1:*:*:*:*:*:*:*

Informations

Vendor

oracle

Product

communications_application_session_controller

Version

3.9m0p1

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2020-10683 2020-05-01 16h55 +00:00 dom4j before 2.0.3 and 2.1.x before 2.1.3 allows external DTDs and External Entities by default, which might enable XXE attacks. However, there is popular external documentation from OWASP showing how to enable the safe, non-default behavior in any application that uses dom4j.
9.8
Critique
CVE-2020-9488 2020-04-27 13h36 +00:00 Improper validation of certificate with host mismatch in Apache Log4j SMTP appender. This could allow an SMTPS connection to be intercepted by a man-in-the-middle attack which could leak any log messages sent through that appender. Fixed in Apache Log4j 2.12.3 and 2.13.1
3.7
Bas