Oracle Communications Interactive Session Recorder 6.4
Approved changes feed: RSS · Atom
cpe:2.3:a:oracle:communications_interactive_session_recorder:6.4:*:*:*:*:*:*:*
part: a version: 6.4 update: *
| Vendor | Oracle (3509f9eb-d8a0-57da-b153-b8021021b133) |
|---|---|
| Product | Communications Interactive Session Recorder (3a402c07-ca84-5132-88e0-fc97f2beca5b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-45105 |
vulnerable | 2026-06-08 05:36:47.867029 |
Apache Log4j2 does not always protect from infinite recursion in lookup evaluation
Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread Context Map data to cause a denial of service when a crafted string is interpreted. This issue was fixed in Log4j 2.17.0, 2.12.3, and 2.3.1.
Published: 2021-12-18T11:55:08.000Z
Updated: 2026-05-29T11:45:26.064Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-44832 |
vulnerable | 2026-06-08 05:36:47.519969 |
Apache Log4j2 vulnerable to RCE via JDBC Appender when attacker controls configuration
Apache Log4j2 versions 2.0-beta7 through 2.17.0 (excluding security fix releases 2.3.2 and 2.12.4) are vulnerable to a remote code execution (RCE) attack when a configuration uses a JDBC Appender with a JNDI LDAP data source URI when an attacker has control of the target LDAP server. This issue is fixed by limiting JNDI data source names to the java protocol in Log4j2 versions 2.17.1, 2.12.4, and 2.3.2.
Published: 2021-12-28T19:35:11.000Z
Updated: 2026-05-29T18:53:46.103Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-41184 |
vulnerable | 2026-06-08 05:35:19.956609 |
XSS in the `of` option of the `.position()` util
MEDIUM (6.5)
jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the `of` option of the `.position()` util from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. Any string value passed to the `of` option is now treated as a CSS selector. A workaround is to not accept the value of the `of` option from untrusted sources.
Published: 2021-10-26T00:00:00.000Z
Updated: 2025-11-04T16:09:17.971Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-41183 |
vulnerable | 2026-06-08 05:35:19.945007 |
XSS in `*Text` options of the Datepicker widget
MEDIUM (6.5)
jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of various `*Text` options of the Datepicker widget from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. The values passed to various `*Text` options are now always treated as pure text, not HTML. A workaround is to not accept the value of the `*Text` options from untrusted sources.
Published: 2021-10-26T00:00:00.000Z
Updated: 2025-02-13T16:28:30.803Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-41182 |
vulnerable | 2026-06-08 05:35:19.920420 |
XSS in the `altField` option of the Datepicker widget
MEDIUM (6.5)
jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the `altField` option of the Datepicker widget from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. Any string value passed to the `altField` option is now treated as a CSS selector. A workaround is to not accept the value of the `altField` option from untrusted sources.
Published: 2021-10-26T00:00:00.000Z
Updated: 2025-02-13T16:28:30.239Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-2461 |
vulnerable | 2026-06-08 05:31:46.757190 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-29425 |
vulnerable | 2026-06-08 05:31:26.276639 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-22118 |
vulnerable | 2026-06-08 05:29:59.836174 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-22112 |
vulnerable | 2026-06-08 05:29:59.806542 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-36189 |
vulnerable | 2026-06-08 05:25:02.638215 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-35490 |
vulnerable | 2026-06-08 05:25:01.164668 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-25649 |
vulnerable | 2026-06-08 05:22:37.060742 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-10219 |
vulnerable | 2026-06-08 05:12:22.628780 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.