Oracle / Communications Instant Messaging Server
57 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2018-14718 | jackson-databind: arbitrary code execution in slf4j-ext class | CRITICAL | 9.8 | Jan 2, 2019 |
| CVE-2018-7489 | jackson-databind: incomplete fix for CVE-2017-7525 permits unsafe serialization via c3p0 libraries | CRITICAL | 9.8 | Feb 26, 2018 |
| CVE-2017-7525 | jackson-databind: Deserialization vulnerability via readValue method of ObjectMapper | CRITICAL | 9.8 | Feb 6, 2018 |
| CVE-2017-15095 | jackson-databind: Unsafe deserialization due to incomplete black list (incomplete fix for CVE-2017-7525) | CRITICAL | 9.8 | Feb 6, 2018 |
| CVE-2017-12617 KEV | tomcat: Remote Code Execution bypass for CVE-2017-12615 | HIGH | 8.1 | Oct 3, 2017 |
| CVE-2017-5645 | log4j: Socket receiver deserialization vulnerability | CRITICAL | 9.8 | Apr 17, 2017 |
| CVE-2016-8735 KEV | tomcat: Remote code execution vulnerability in JmxRemoteLifecycleListener | CRITICAL | 9.8 | Apr 6, 2017 |
Showing 51 to 57 of 57 CVEs