Known Vulnerabilities for Communications Messaging Server by Oracle
Listed below are 10 of the newest known vulnerabilities associated with "Communications Messaging Server" by "Oracle".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2022-23307 json | Not Provided | 2022-01-18 | 2024-11-21 | |
| CVE-2022-23305 json | Not Provided | 2022-01-18 | 2026-05-27 | |
| CVE-2022-23302 json | Not Provided | 2022-01-18 | 2025-07-07 | |
| CVE-2021-40690 json | All versions of Apache Santuario - XML Security for Java prior to 2.2.3 and 2.1.7 are vulnerable to an issue where the "secur... | 7.5 - HIGH | 2021-09-19 | 2023-11-07 |
| CVE-2021-37714 json | jsoup is a Java library for working with HTML. Those using jsoup versions prior to 1.14.2 to parse untrusted HTML or XML may ... | 7.5 - HIGH | 2021-08-18 | 2023-11-07 |
| CVE-2021-36090 json | When reading a specially crafted ZIP archive, Compress can be made to allocate large amounts of memory that finally leads to ... | 7.5 - HIGH | 2021-07-13 | 2023-11-07 |
| CVE-2021-35517 json | When reading a specially crafted TAR archive, Compress can be made to allocate large amounts of memory that finally leads to ... | 7.5 - HIGH | 2021-07-13 | 2023-11-07 |
| CVE-2021-35516 json | When reading a specially crafted 7Z archive, Compress can be made to allocate large amounts of memory that finally leads to a... | 7.5 - HIGH | 2021-07-13 | 2023-11-07 |
| CVE-2021-35515 json | When reading a specially crafted 7Z archive, the construction of the list of codecs that decompress an entry can result in an... | 7.5 - HIGH | 2021-07-13 | 2023-11-07 |
| CVE-2021-33813 json | An XXE issue in SAXBuilder in JDOM through 2.0.6 allows attackers to cause a denial of service via a crafted HTTP request. | 7.5 - HIGH | 2021-06-16 | 2023-11-07 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Oracle | Communications Messaging Server | 8.1 | |||
| Operating System | Oracle | Communications Messaging Server | 8.0.2 | |||
| Operating System | Oracle | Communications Messaging Server | 8.0.1 | |||
| Application | Oracle | Communications Messaging Server | 8.0 | |||
| Application | Oracle | Communications Messaging Server | 7.0.5 | |||
| Application | Oracle | Communications Messaging Server | 7.0 | |||
| Application | Oracle | Communications Messaging Server | 6.3 |