Communications Brm - Elastic Charging Engine (Oracle) - vulnerabilities (CVEs)

20 CVEs, 5 in the last 30 days, 11 known versions, newest CVE from 2026-10-20. Vendor: Oracle.

CVEs of Communications Brm - Elastic Charging Engine

CVE-2026-101793 - CVSS 5.5 (medium), 2026-10-20: Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications (component: Core). Supported versions that are…
CVE-2026-101792 - CVSS 5.9 (medium), 2026-10-20: Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications (component: Security). Supported versions that are…
CVE-2026-101791 - CVSS 8.1 (high), 2026-10-20: Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications (component: Security). The supported version that is…
CVE-2026-101790 - CVSS 3.3 (low), 2026-10-20: Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications (component: Security). Supported versions that are…
CVE-2026-101763 - CVSS 9.8 (critical), 2026-10-20: Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications (component: Cloud native deployment). Supported…
CVE-2026-61053 - CVSS 7.8 (high), 2026-07-21: Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications (component: Diameter Gateway and SDK). Supported…
CVE-2021-43859 - CVSS 7.5 (high), 2022-02-01: XStream is an open source java library to serialize objects to XML and back again. Versions prior to 1.4.19 may allow a remote attacker to allocate 100% CPU…
CVE-2021-44832 - CVSS 6.6 (medium), 2021-12-28: Apache Log4j2 versions 2.0-beta7 through 2.17.0 (excluding security fix releases 2.3.2 and 2.12.4) are vulnerable to a remote code execution (RCE) attack when…
CVE-2021-37137 - CVSS 7.5 (high), 2021-10-19: The Snappy frame decoder function doesn't restrict the chunk length which may lead to excessive memory usage. Beside this it also may buffer reserved…
CVE-2021-37136 - CVSS 7.5 (high), 2021-10-19: The Bzip2 decompression decoder function doesn't allow setting size restrictions on the decompressed output data (which affects the allocation size used…
CVE-2021-38153 - CVSS 5.9 (medium), 2021-09-22: Some components in Apache Kafka use `Arrays.equals` to validate a password or key, which is vulnerable to timing attacks that make brute force attacks for…
CVE-2021-29505 - CVSS 8.8 (high), 2021-05-28: XStream is software for serializing Java objects to XML and back again. A vulnerability in XStream versions prior to 1.4.17 may allow a remote attacker has…
CVE-2021-22118 - CVSS 7.8 (high), 2021-05-27: In Spring Framework, versions 5.2.x prior to 5.2.15 and versions 5.3.x prior to 5.3.7, a WebFlux application is vulnerable to a privilege escalation: by…
CVE-2021-21409 - CVSS 5.9 (medium), 2021-03-30: Netty is an open-source, asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers &…
CVE-2021-21342 - CVSS 9.1 (critical), 2021-03-23: XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability where the processed stream at…
CVE-2021-21290 - CVSS 6.2 (medium), 2021-02-08: Netty is an open-source, asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers &…
CVE-2020-17521 - CVSS 5.5 (medium), 2020-12-07: Apache Groovy provides extension methods to aid with creating temporary directories. Prior to this fix, Groovy's implementation of those extension methods was…
CVE-2020-11612 - CVSS 7.5 (high), 2020-04-07: The ZlibDecoders in Netty 4.1.x before 4.1.46 allow for unbounded memory allocation while decoding a ZlibEncoded byte stream. An attacker could send a large…
CVE-2020-5397 - CVSS 5.3 (medium), 2020-01-17: Spring Framework, versions 5.2.x prior to 5.2.3 are vulnerable to CSRF attacks through CORS preflight requests that target Spring MVC (spring-webmvc module)…
CVE-2018-15756 - CVSS 7.5 (high), 2018-10-18: Spring Framework, version 5.1, versions 5.0.x prior to 5.0.10, versions 4.3.x prior to 4.3.20, and older unsupported versions on the 4.2.x branch provide…