Communications Diameter Intelligence Hub
Approved changes feed: RSS · Atom
cpe:2.3:a:oracle:communications_diameter_intelligence_hub:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Oracle (3509f9eb-d8a0-57da-b153-b8021021b133) |
|---|---|
| Product | Communications Diameter Intelligence Hub (abff377f-5750-590d-a94f-8f2ad7495ffe) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-43859 |
vulnerable | 2026-06-08 05:36:44.463747 |
Denial of Service by injecting highly recursive collections or maps in XStream
HIGH (7.5)
XStream is an open source java library to serialize objects to XML and back again. Versions prior to 1.4.19 may allow a remote attacker to allocate 100% CPU time on the target system depending on CPU type or parallel execution of such a payload resulting in a denial of service only by manipulating the processed input stream. XStream 1.4.19 monitors and accumulates the time it takes to add elements to collections and throws an exception if a set threshold is exceeded. Users are advised to upgrade as soon as possible. Users unable to upgrade may set the NO_REFERENCE mode to prevent recursion. See GHSA-rmr5-cpv2-vgjf for further details on a workaround if an upgrade is not possible.
Published: 2022-02-01T12:08:57.000Z
Updated: 2025-11-03T21:45:34.625Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-40690 |
vulnerable | 2026-06-08 05:35:18.905178 |
Bypass of the secureValidation property
All versions of Apache Santuario - XML Security for Java prior to 2.2.3 and 2.1.7 are vulnerable to an issue where the "secureValidation" property is not passed correctly when creating a KeyInfo from a KeyInfoReference element. This allows an attacker to abuse an XPath Transform to extract any local .xml files in a RetrievalMethod element.
Published: 2021-09-19T00:00:00.000Z
Updated: 2024-08-04T02:51:06.487Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-36374 |
vulnerable | 2026-06-08 05:32:52.156332 |
Apache Ant ZIP, and ZIP based, archive denial of service vulerability
When reading a specially crafted ZIP archive, or a derived formats, an Apache Ant build can be made to allocate large amounts of memory that leads to an out of memory error, even for small inputs. This can be used to disrupt builds using Apache Ant. Commonly used derived formats from ZIP archives are for instance JAR files and many office files. Apache Ant prior to 1.9.16 and 1.10.11 were affected.
Published: 2021-07-14T06:20:12.000Z
Updated: 2024-08-04T00:54:51.456Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-36090 |
vulnerable | 2026-06-08 05:32:49.722803 |
Apache Commons Compress 1.0 to 1.20 denial of service vulnerability
When reading a specially crafted ZIP archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs. This could be used to mount a denial of service attack against services that use Compress' zip package.
Published: 2021-07-13T07:15:23.000Z
Updated: 2024-08-04T00:47:43.813Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-35517 |
vulnerable | 2026-06-08 05:32:48.959801 |
Apache Commons Compress 1.1 to 1.20 denial of service vulnerability
When reading a specially crafted TAR archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs. This could be used to mount a denial of service attack against services that use Compress' tar package.
Published: 2021-07-13T07:15:22.000Z
Updated: 2024-08-04T00:40:46.713Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-35516 |
vulnerable | 2026-06-08 05:32:48.943505 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-35515 |
vulnerable | 2026-06-08 05:32:48.910892 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-2351 |
vulnerable | 2026-06-08 05:31:46.452293 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-29425 |
vulnerable | 2026-06-08 05:31:26.275032 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-22696 |
vulnerable | 2026-06-08 05:30:01.082638 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-22118 |
vulnerable | 2026-06-08 05:29:59.836075 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-1971 |
vulnerable | 2026-06-08 05:21:03.825860 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-11971 |
vulnerable | 2026-06-08 05:17:55.892398 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.