Oracle Communications Application Session Controller 3.9m0p1
Approved changes feed: RSS · Atom
cpe:2.3:a:oracle:communications_application_session_controller:3.9m0p1:*:*:*:*:*:*:*
part: a version: 3.9m0p1 update: *
| Vendor | Oracle (3509f9eb-d8a0-57da-b153-b8021021b133) |
|---|---|
| Product | Communications Application Session Controller (9879feee-92b4-5fe4-b1ee-1a955930b76b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-9488 |
vulnerable | 2026-06-08 05:28:01.909366 |
Details available
Improper validation of certificate with host mismatch in Apache Log4j SMTP appender. This could allow an SMTPS connection to be intercepted by a man-in-the-middle attack which could leak any log messages sent through that appender. Fixed in Apache Log4j 2.12.3 and 2.13.1
Published: 2020-04-27T15:36:10.000Z
Updated: 2026-05-29T16:07:52.931Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-10683 |
vulnerable | 2026-06-08 05:16:35.566247 |
Details available
dom4j before 2.0.3 and 2.1.x before 2.1.3 allows external DTDs and External Entities by default, which might enable XXE attacks. However, there is popular external documentation from OWASP showing how to enable the safe, non-default behavior in any application that uses dom4j.
Published: 2020-05-01T18:55:25.000Z
Updated: 2024-08-04T11:06:11.156Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.