Communications User Data Repository (Oracle) - vulnerabilities (CVEs)

6 CVEs, 0 in the last 30 days, 5 known versions, newest CVE from 2021-12-18. Vendor: Oracle.

CVEs of Communications User Data Repository

• CVE-2021-45105 - CVSS 5.9 (medium), 2021-12-18: Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups. This…
• CVE-2016-2518 - CVSS 5.3 (medium), 2017-01-30: The MATCH_ASSOC function in NTP before version 4.2.8p9 and 4.3.x before 4.3.92 allows remote attackers to cause an out-of-bounds reference via an addpeer…
• CVE-2016-5387 - CVSS 8.1 (high), 2016-07-19: The Apache HTTP Server through 2.4.23 follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted client data…
• CVE-2016-5385 - CVSS 8.1 (high), 2016-07-19: PHP through 7.0.8 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect applications from the presence of…
• CVE-2015-0235 - CVSS 10 (critical), 2015-01-28: Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18, allows context-dependent attackers to…
• CVE-2014-2532 - CVSS 4.9 (medium), 2014-03-18: sshd in OpenSSH before 6.6 does not properly support wildcards on AcceptEnv lines in sshd_config, which allows remote attackers to bypass intended environment…