Oracle Communications Element Manager 8.2.2
Approved changes feed: RSS · Atom
cpe:2.3:a:oracle:communications_element_manager:8.2.2:*:*:*:*:*:*:*
part: a version: 8.2.2 update: *
| Vendor | Oracle (3509f9eb-d8a0-57da-b153-b8021021b133) |
|---|---|
| Product | Communications Element Manager (4c348937-ff9c-53f9-a252-0bc3b929eac7) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-34428 |
vulnerable | 2026-06-08 05:32:13.348993 |
Details available
LOW (2.9)
For Eclipse Jetty versions <= 9.4.40, <= 10.0.2, <= 11.0.2, if an exception is thrown from the SessionListener#sessionDestroyed() method, then the session ID is not invalidated in the session ID manager. On deployments with clustered sessions and multiple contexts this can result in a session not being invalidated. This can result in an application used on a shared computer being left logged in.
Published: 2021-06-22T14:45:11.000Z
Updated: 2024-08-04T00:12:50.169Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-30468 |
vulnerable | 2026-06-08 05:31:51.054190 |
Apache CXF Denial of service vulnerability in parsing JSON via JsonMapObjectReaderWriter
A vulnerability in the JsonMapObjectReaderWriter of Apache CXF allows an attacker to submit malformed JSON to a web service, which results in the thread getting stuck in an infinite loop, consuming CPU indefinitely. This issue affects Apache CXF versions prior to 3.4.4; Apache CXF versions prior to 3.3.11.
Published: 2021-06-16T12:00:18.000Z
Updated: 2024-08-03T22:32:41.089Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-28165 |
vulnerable | 2026-06-08 05:31:23.085790 |
Details available
HIGH (7.5)
In Eclipse Jetty 7.2.2 to 9.4.38, 10.0.0.alpha0 to 10.0.1, and 11.0.0.alpha0 to 11.0.1, CPU usage can reach 100% upon receiving a large invalid TLS frame.
Published: 2021-04-01T14:20:14.000Z
Updated: 2025-08-27T20:37:23.768Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-28163 |
vulnerable | 2026-06-08 05:31:23.064001 |
Details available
LOW (2.7)
In Eclipse Jetty 9.4.32 to 9.4.38, 10.0.0.beta2 to 10.0.1, and 11.0.0.beta2 to 11.0.1, if a user uses a webapps directory that is a symlink, the contents of the webapps directory is deployed as a static webapp, inadvertently serving the webapps themselves and anything else that might be in that directory.
Published: 2021-04-01T14:20:13.000Z
Updated: 2024-08-03T21:40:12.280Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-22696 |
vulnerable | 2026-06-08 05:30:01.083597 |
OAuth 2 authorization service vulnerable to DDos attacks
CXF supports (via JwtRequestCodeFilter) passing OAuth 2 parameters via a JWT token as opposed to query parameters (see: The OAuth 2.0 Authorization Framework: JWT Secured Authorization Request (JAR)). Instead of sending a JWT token as a "request" parameter, the spec also supports specifying a URI from which to retrieve a JWT token from via the "request_uri" parameter. CXF was not validating the "request_uri" parameter (apart from ensuring it uses "https) and was making a REST request to the parameter in the request to retrieve a token. This means that CXF was vulnerable to DDos attacks on the authorization server, as specified in section 10.4.1 of the spec. This issue affects Apache CXF versions prior to 3.4.3; Apache CXF versions prior to 3.3.10.
Published: 2021-04-02T10:05:14.000Z
Updated: 2025-02-13T16:27:45.767Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.