Approved changes feed: RSS · Atom

cpe:2.3:a:oracle:communications_session_report_manager:8.2.1:*:*:*:*:*:*:*

part: a version: 8.2.1 update: *

VendorOracle (3509f9eb-d8a0-57da-b153-b8021021b133)
ProductCommunications Session Report Manager (acadc13d-40b7-5a22-b8e4-284ebe7c9f6f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-5398 vulnerable 2026-06-08 05:26:42.757703 RFD Attack via "Content-Disposition" Header Sourced from Request Input by Spring MVC or Spring WebFlux Application
HIGH (8)
In Spring Framework, versions 5.2.x prior to 5.2.3, versions 5.1.x prior to 5.1.13, and versions 5.0.x prior to 5.0.16, an application is vulnerable to a reflected file download (RFD) attack when it sets a "Content-Disposition" header in the response where the filename attribute is derived from user supplied input.
Published: 2020-01-16T23:55:15.596Z
Updated: 2024-09-16T17:43:32.422Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-1941 vulnerable 2026-06-08 05:21:03.625027 Details available
In Apache ActiveMQ 5.0.0 to 5.15.11, the webconsole admin GUI is open to XSS, in the view that lists the contents of a queue.
Published: 2020-05-14T16:29:26.000Z
Updated: 2024-08-04T06:54:00.336Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-1934 vulnerable 2026-06-08 05:21:03.561855 Details available
In Apache HTTP Server 2.4.0 to 2.4.41, mod_proxy_ftp may use uninitialized memory when proxying to a malicious FTP server.
Published: 2020-04-01T19:22:23.000Z
Updated: 2024-08-04T06:54:00.049Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-1927 vulnerable 2026-06-08 05:21:03.541504 Details available
In Apache HTTP Server 2.4.0 to 2.4.41, redirects configured with mod_rewrite that were intended to be self-referential might be fooled by encoded newlines and redirect instead to an an unexpected URL within the request URL.
Published: 2020-04-01T23:08:43.000Z
Updated: 2024-08-04T06:53:59.905Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-11023 vulnerable 2026-06-08 05:16:36.299618 Potential XSS vulnerability in jQuery
MEDIUM (6.9)
In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
Published: 2020-04-29T00:00:00.000Z
Updated: 2025-10-21T23:35:45.230Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-17573 vulnerable 2026-06-08 05:13:10.765894 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-11358 vulnerable 2026-06-08 05:12:36.973407 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-10097 vulnerable 2026-06-08 05:12:22.240510 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-15756 vulnerable 2026-06-08 05:11:03.472565 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.