Oracle Communications Billing and Revenue Management 7.5
Approved changes feed: RSS · Atom
cpe:2.3:a:oracle:communications_billing_and_revenue_management:7.5:*:*:*:*:*:*:*
part: a version: 7.5 update: *
| Vendor | Oracle (3509f9eb-d8a0-57da-b153-b8021021b133) |
|---|---|
| Product | Communications Billing And Revenue Management (106b3dca-e487-5b2a-b64a-21e9d31f998b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-11358 |
vulnerable | 2026-06-08 05:12:36.961639 |
Details available
jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.
Published: 2019-04-19T00:00:00.000Z
Updated: 2024-11-15T15:11:23.024Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-10086 |
vulnerable | 2026-06-08 05:12:22.148721 |
Details available
In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all Java objects. We, however were not using this by default characteristic of the PropertyUtilsBean.
Published: 2019-08-20T20:10:15.000Z
Updated: 2024-08-04T22:10:09.585Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-7489 |
vulnerable | 2026-06-08 05:12:03.745564 |
Details available
FasterXML jackson-databind before 2.7.9.3, 2.8.x before 2.8.11.1 and 2.9.x before 2.9.5 allows unauthenticated remote code execution because of an incomplete fix for the CVE-2017-7525 deserialization flaw. This is exploitable by sending maliciously crafted JSON input to the readValue method of the ObjectMapper, bypassing a blacklist that is ineffective if the c3p0 libraries are available in the classpath.
Published: 2018-02-26T15:00:00.000Z
Updated: 2024-08-05T06:31:03.738Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-14721 |
vulnerable | 2026-06-08 05:10:53.380355 |
Details available
FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to conduct server-side request forgery (SSRF) attacks by leveraging failure to block the axis2-jaxws class from polymorphic deserialization.
Published: 2019-01-02T18:00:00.000Z
Updated: 2024-08-05T09:38:13.150Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-14720 |
vulnerable | 2026-06-08 05:10:53.375073 |
Details available
FasterXML jackson-databind 2.x before 2.9.7 might allow attackers to conduct external XML entity (XXE) attacks by leveraging failure to block unspecified JDK classes from polymorphic deserialization.
Published: 2019-01-02T18:00:00.000Z
Updated: 2024-08-05T09:38:13.593Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-14719 |
vulnerable | 2026-06-08 05:10:53.359095 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-14718 |
vulnerable | 2026-06-08 05:10:53.329192 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-7525 |
vulnerable | 2026-06-08 05:09:56.426252 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-15095 |
vulnerable | 2026-06-08 05:08:57.851896 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-2381 |
vulnerable | 2026-06-08 05:07:42.057963 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.