Approved changes feed: RSS · Atom

cpe:2.3:a:oracle:communications_session_report_manager:8.1.1:*:*:*:*:*:*:*

part: a version: 8.1.1 update: *

VendorOracle (3509f9eb-d8a0-57da-b153-b8021021b133)
ProductCommunications Session Report Manager (acadc13d-40b7-5a22-b8e4-284ebe7c9f6f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-5398 vulnerable 2026-06-08 05:26:42.756378 RFD Attack via "Content-Disposition" Header Sourced from Request Input by Spring MVC or Spring WebFlux Application
HIGH (8)
In Spring Framework, versions 5.2.x prior to 5.2.3, versions 5.1.x prior to 5.1.13, and versions 5.0.x prior to 5.0.16, an application is vulnerable to a reflected file download (RFD) attack when it sets a "Content-Disposition" header in the response where the filename attribute is derived from user supplied input.
Published: 2020-01-16T23:55:15.596Z
Updated: 2024-09-16T17:43:32.422Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-1941 vulnerable 2026-06-08 05:21:03.624992 Details available
In Apache ActiveMQ 5.0.0 to 5.15.11, the webconsole admin GUI is open to XSS, in the view that lists the contents of a queue.
Published: 2020-05-14T16:29:26.000Z
Updated: 2024-08-04T06:54:00.336Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-1934 vulnerable 2026-06-08 05:21:03.561702 Details available
In Apache HTTP Server 2.4.0 to 2.4.41, mod_proxy_ftp may use uninitialized memory when proxying to a malicious FTP server.
Published: 2020-04-01T19:22:23.000Z
Updated: 2024-08-04T06:54:00.049Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-1927 vulnerable 2026-06-08 05:21:03.540215 Details available
In Apache HTTP Server 2.4.0 to 2.4.41, redirects configured with mod_rewrite that were intended to be self-referential might be fooled by encoded newlines and redirect instead to an an unexpected URL within the request URL.
Published: 2020-04-01T23:08:43.000Z
Updated: 2024-08-04T06:53:59.905Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-11023 vulnerable 2026-06-08 05:16:36.298591 Potential XSS vulnerability in jQuery
MEDIUM (6.9)
In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
Published: 2020-04-29T00:00:00.000Z
Updated: 2025-10-21T23:35:45.230Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-17573 vulnerable 2026-06-08 05:13:10.764880 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-11358 vulnerable 2026-06-08 05:12:36.972398 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-10247 vulnerable 2026-06-08 05:12:23.040444 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-10246 vulnerable 2026-06-08 05:12:22.936310 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-10097 vulnerable 2026-06-08 05:12:22.239054 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-0227 vulnerable 2026-06-08 05:12:19.418495 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-0211 vulnerable 2026-06-08 05:12:19.329760 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-0197 vulnerable 2026-06-08 05:12:19.234083 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-8032 vulnerable 2026-06-08 05:12:05.047503 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-15756 vulnerable 2026-06-08 05:11:03.471480 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.