Known Vulnerabilities for Enterprise Session Border Controller by Oracle
Listed below are 10 of the newest known vulnerabilities associated with "Enterprise Session Border Controller" by "Oracle".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2022-21383 | Vulnerability in the Oracle Enterprise Session Border Controller product of Oracle Communications (component: Log). Supported... | 4.3 - MEDIUM | 2022-01-19 | 2022-01-25 |
| CVE-2022-21382 | Vulnerability in the Oracle Enterprise Session Border Controller product of Oracle Communications (component: WebUI). Support... | 7.7 - HIGH | 2022-01-19 | 2022-01-25 |
| CVE-2022-21381 | Vulnerability in the Oracle Enterprise Session Border Controller product of Oracle Communications (component: WebUI). Support... | 6.4 - MEDIUM | 2022-01-19 | 2022-01-25 |
| CVE-2021-29425 | In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like "//../f... | 4.8 - MEDIUM | 2021-04-13 | 2023-11-07 |
| CVE-2021-23017 | A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DN... | 7.7 - HIGH | 2021-06-01 | 2023-11-07 |
| CVE-2021-3712 | ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the strin... | 7.4 - HIGH | 2021-08-24 | 2023-11-07 |
| CVE-2021-3711 | In order to decrypt SM2 encrypted data an application is expected to call the API function EVP_PKEY_decrypt(). Typically an a... | 9.8 - CRITICAL | 2021-08-24 | 2023-11-07 |
| CVE-2020-14630 | Vulnerability in the Oracle Enterprise Session Border Controller product of Oracle Communications Applications (component: Fi... | 7.5 - HIGH | 2020-07-15 | 2020-07-20 |
| CVE-2020-11022 | In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing... | 6.1 - MEDIUM | 2020-04-29 | 2023-11-07 |
| CVE-2020-1971 | The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as E... | 5.9 - MEDIUM | 2020-12-08 | 2023-11-07 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Oracle | Enterprise Session Border Controller | 8.4 | All | All | All |
| Application | Oracle | Enterprise Session Border Controller | 8.3.0 | All | All | All |
| Application | Oracle | Enterprise Session Border Controller | 8.2.0 | All | All | All |
| Application | Oracle | Enterprise Session Border Controller | 8.1.0 | All | All | All |