Known Vulnerabilities for Communications Unified Inventory Management by Oracle
Listed below are 10 of the newest known vulnerabilities associated with "Communications Unified Inventory Management" by "Oracle".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2022-23632 | Traefik is an HTTP reverse proxy and load balancer. Prior to version 2.6.1, Traefik skips the router transport layer security... | 7.5 - HIGH | 2022-02-17 | 2022-11-23 |
| CVE-2022-23307 | CVE-2020-9493 identified a deserialization issue that was present in Apache Chainsaw. Prior to Chainsaw V2.0 Chainsaw was a c... | 8.8 - HIGH | 2022-01-18 | 2023-02-24 |
| CVE-2022-23305 | By design, the JDBCAppender in Log4j 1.2.x accepts an SQL statement as a configuration parameter where the values to be inser... | 9.8 - CRITICAL | 2022-01-18 | 2023-02-24 |
| CVE-2022-23302 | JMSSink in all versions of Log4j 1.x is vulnerable to deserialization of untrusted data when the attacker has write access to... | 8.8 - HIGH | 2022-01-18 | 2023-02-24 |
| CVE-2022-22965 | A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data bindin... | 9.8 - CRITICAL | 2022-04-01 | 2023-02-09 |
| CVE-2021-21344 | XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerabil... | 9.8 - CRITICAL | 2021-03-23 | 2023-11-07 |
| CVE-2021-21343 | XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerabil... | 7.5 - HIGH | 2021-03-23 | 2023-11-07 |
| CVE-2021-21342 | XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerabil... | 9.1 - CRITICAL | 2021-03-23 | 2023-11-07 |
| CVE-2021-21341 | XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is vulnerabilit... | 7.5 - HIGH | 2021-03-23 | 2023-11-07 |
| CVE-2021-4104 | JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j c... | 7.5 - HIGH | 2021-12-14 | 2023-12-22 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Oracle | Communications Unified Inventory Management | 7.4.0 | All | All | All |
| Application | Oracle | Communications Unified Inventory Management | 7.3.5 | All | All | All |
| Application | Oracle | Communications Unified Inventory Management | 7.3.4 | All | All | All |
| Application | Oracle | Communications Unified Inventory Management | 7.3.2 | All | All | All |
| Application | Oracle | Communications Unified Inventory Management | 7.3.0 | All | All | All |
| Application | Oracle | Communications Unified Inventory Management | 7.3 | All | All | All |