Oracle Communications Policy Management 12.6.0.0.0
Approved changes feed: RSS · Atom
cpe:2.3:a:oracle:communications_policy_management:12.6.0.0.0:*:*:*:*:*:*:*
part: a version: 12.6.0.0.0 update: *
| Vendor | Oracle (3509f9eb-d8a0-57da-b153-b8021021b133) |
|---|---|
| Product | Communications Policy Management (4df222cb-7f1b-5db0-a7e6-3151586a7ff7) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-22965 |
vulnerable | 2026-06-08 05:40:55.750528 |
Details available
A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific exploit requires the application to run on Tomcat as a WAR deployment. If the application is deployed as a Spring Boot executable jar, i.e. the default, it is not vulnerable to the exploit. However, the nature of the vulnerability is more general, and there may be other ways to exploit it.
Published: 2022-04-01T22:17:30.000Z
Updated: 2025-10-21T23:15:42.792Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-43859 |
vulnerable | 2026-06-08 05:36:44.463886 |
Denial of Service by injecting highly recursive collections or maps in XStream
HIGH (7.5)
XStream is an open source java library to serialize objects to XML and back again. Versions prior to 1.4.19 may allow a remote attacker to allocate 100% CPU time on the target system depending on CPU type or parallel execution of such a payload resulting in a denial of service only by manipulating the processed input stream. XStream 1.4.19 monitors and accumulates the time it takes to add elements to collections and throws an exception if a set threshold is exceeded. Users are advised to upgrade as soon as possible. Users unable to upgrade may set the NO_REFERENCE mode to prevent recursion. See GHSA-rmr5-cpv2-vgjf for further details on a workaround if an upgrade is not possible.
Published: 2022-02-01T12:08:57.000Z
Updated: 2025-11-03T21:45:34.625Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-43527 |
vulnerable | 2026-06-08 05:36:43.496318 |
Details available
NSS (Network Security Services) versions prior to 3.73 or 3.68.1 ESR are vulnerable to a heap overflow when handling DER-encoded DSA or RSA-PSS signatures. Applications using NSS for handling signatures encoded within CMS, S/MIME, PKCS \#7, or PKCS \#12 are likely to be impacted. Applications using NSS for certificate validation or other TLS, X.509, OCSP or CRL functionality may be impacted, depending on how they configure NSS. *Note: This vulnerability does NOT impact Mozilla Firefox.* However, email clients and PDF viewers that use NSS for signature verification, such as Thunderbird, LibreOffice, Evolution and Evince are believed to be impacted. This vulnerability affects NSS < 3.73 and NSS < 3.68.1.
Published: 2021-12-08T00:00:00.000Z
Updated: 2024-08-04T03:55:29.297Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-23450 |
vulnerable | 2026-06-08 05:30:02.959061 |
Prototype Pollution
HIGH (7.5)
All versions of package dojo are vulnerable to Prototype Pollution via the setObject function.
Published: 2021-12-17T20:05:19.155Z
Updated: 2024-09-16T20:53:01.107Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.