Oracle Communications Design Studio 7.3.4

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:oracle:communications_design_studio:7.3.4:*:*:*:*:*:*:*

part: a version: 7.3.4 update: *

VendorOracle (3509f9eb-d8a0-57da-b153-b8021021b133)
ProductCommunications Design Studio (82e49584-1f41-56ef-941f-e34ab1c0e9da)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-5421 vulnerable 2026-06-08 05:26:42.837298 RFD Protection Bypass via jsessionid
HIGH (8.7)
In Spring Framework versions 5.2.0 - 5.2.8, 5.1.0 - 5.1.17, 5.0.0 - 5.0.18, 4.3.0 - 4.3.28, and older unsupported versions, the protections against RFD attacks from CVE-2015-5211 may be bypassed depending on the browser used through the use of a jsessionid path parameter.
Published: 2020-09-19T03:45:13.127Z
Updated: 2024-09-17T03:58:43.873Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-10219 vulnerable 2026-06-08 05:12:22.623498 Details available
MEDIUM (6.5)
A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.
Published: 2019-11-08T14:46:03.000Z
Updated: 2025-07-07T13:55:51.360Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-10086 vulnerable 2026-06-08 05:12:22.154481 Details available
In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all Java objects. We, however were not using this by default characteristic of the PropertyUtilsBean.
Published: 2019-08-20T20:10:15.000Z
Updated: 2024-08-04T22:10:09.585Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.