[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fhDU2S8Q8Jy-pvZE7tXWJRxynHEGLtoNyQnBkxRVb4e8":3,"g5a-ex:oracle\u002Fcommunications_billing_and_revenue_management@*":139,"g5a-family:oracle\u002Fcommunications_billing_and_revenue_management":141},{"success":4,"data":5},true,{"product":6,"versions":43,"topVulnerabilitiesByEpss":54,"kevVulnerabilities":116,"seoMetadata":117,"meta":136},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":42},"oracle","communications_billing_and_revenue_management",10,66,0,"2022-10-18",[14,18,21,24,27,30,32,35,37,39],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"12.0",8,false,{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},"12.0.0.2.0",3,{"version":22,"cve_count":23,"kev_count":11,"has_kev":17},"12.0.0.3",1,{"version":25,"cve_count":26,"kev_count":11,"has_kev":17},"12.0.0.3.0",41,{"version":28,"cve_count":29,"kev_count":11,"has_kev":17},"12.0.0.4",11,{"version":31,"cve_count":16,"kev_count":11,"has_kev":17},"12.0.0.4.0",{"version":33,"cve_count":34,"kev_count":11,"has_kev":17},"12.0.0.5",5,{"version":36,"cve_count":11,"kev_count":11,"has_kev":17},"12.0.0.6.0",{"version":38,"cve_count":9,"kev_count":11,"has_kev":17},"7.5",{"version":40,"cve_count":41,"kev_count":11,"has_kev":17},"7.5.0.23.0",21,"Communications Billing And Revenue Management by Oracle is a technology product with 10 tracked versions and 66 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[44,45,46,47,48,49,50,51,52,53],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},{"version":22,"cve_count":23,"kev_count":11,"has_kev":17},{"version":25,"cve_count":26,"kev_count":11,"has_kev":17},{"version":28,"cve_count":29,"kev_count":11,"has_kev":17},{"version":31,"cve_count":16,"kev_count":11,"has_kev":17},{"version":33,"cve_count":34,"kev_count":11,"has_kev":17},{"version":36,"cve_count":11,"kev_count":11,"has_kev":17},{"version":38,"cve_count":9,"kev_count":11,"has_kev":17},{"version":40,"cve_count":41,"kev_count":11,"has_kev":17},[55,63,69,74,81,88,94,100,106,111],{"cveId":56,"description":57,"publishedDate":58,"cvssScore":59,"cvssVersion":60,"severity":61,"isKev":17,"epssScore":62},"CVE-2021-45105","Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread Context Map data to cause a denial of service when a crafted string is interpreted. This issue was fixed in Log4j 2.17.0, 2.12.3, and 2.3.1.","2021-12-18",5.9,"v3.1","Medium",0.99999,{"cveId":64,"description":65,"publishedDate":66,"cvssScore":67,"cvssVersion":60,"severity":61,"isKev":17,"epssScore":68},"CVE-2020-11022","In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.","2020-04-29",6.1,0.99215,{"cveId":70,"description":71,"publishedDate":72,"cvssScore":67,"cvssVersion":60,"severity":61,"isKev":17,"epssScore":73},"CVE-2019-11358","jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.","2019-04-20",0.8682,{"cveId":75,"description":76,"publishedDate":77,"cvssScore":78,"cvssVersion":60,"severity":79,"isKev":17,"epssScore":80},"CVE-2017-7525","A deserialization flaw was discovered in the jackson-databind, versions before 2.6.7.1, 2.7.9.1 and 2.8.9, which could allow an unauthenticated user to perform code execution by sending the maliciously crafted input to the readValue method of the ObjectMapper.","2018-02-06",9.8,"Critical",0.37721,{"cveId":82,"description":83,"publishedDate":84,"cvssScore":85,"cvssVersion":60,"severity":86,"isKev":17,"epssScore":87},"CVE-2019-10086","In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all Java objects. We, however were not using this by default characteristic of the PropertyUtilsBean.","2019-08-20",7.3,"High",0.28384,{"cveId":89,"description":90,"publishedDate":91,"cvssScore":78,"cvssVersion":92,"severity":79,"isKev":17,"epssScore":93},"CVE-2018-7489","FasterXML jackson-databind before 2.7.9.3, 2.8.x before 2.8.11.1 and 2.9.x before 2.9.5 allows unauthenticated remote code execution because of an incomplete fix for the CVE-2017-7525 deserialization flaw. This is exploitable by sending maliciously crafted JSON input to the readValue method of the ObjectMapper, bypassing a blacklist that is ineffective if the c3p0 libraries are available in the classpath.","2018-02-26","v3.0",0.19781,{"cveId":95,"description":96,"publishedDate":97,"cvssScore":98,"cvssVersion":60,"severity":86,"isKev":17,"epssScore":99},"CVE-2020-25649","A flaw was found in FasterXML Jackson Databind, where it did not have entity expansion secured properly. This flaw allows vulnerability to XML external entity (XXE) attacks. The highest threat from this vulnerability is data integrity.","2020-12-03",7.5,0.1726,{"cveId":101,"description":102,"publishedDate":103,"cvssScore":104,"cvssVersion":60,"severity":86,"isKev":17,"epssScore":105},"CVE-2020-36179","FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.commons.dbcp.cpdsadapter.DriverAdapterCPDS.","2021-01-07",8.1,0.17065,{"cveId":107,"description":108,"publishedDate":109,"cvssScore":98,"cvssVersion":60,"severity":86,"isKev":17,"epssScore":110},"CVE-2021-36090","When reading a specially crafted ZIP archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs. This could be used to mount a denial of service attack against services that use Compress' zip package.","2021-07-13",0.12945,{"cveId":112,"description":113,"publishedDate":114,"cvssScore":78,"cvssVersion":60,"severity":79,"isKev":17,"epssScore":115},"CVE-2018-14718","FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to execute arbitrary code by leveraging failure to block the slf4j-ext class from polymorphic deserialization.","2019-01-02",0.12679,[],{"title":118,"metaDescription":119,"keywords":120,"structuredData":121},"Communications Billing And Revenue Management by Oracle - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Communications Billing And Revenue Management by Oracle covering 10 versions with 66 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Communications Billing And Revenue Management vulnerabilities, Communications Billing And Revenue Management security, Communications Billing And Revenue Management CVE, Oracle Communications Billing And Revenue Management, Communications Billing And Revenue Management threat intelligence, Oracle security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":122,"@type":123,"name":124,"description":119,"url":125,"manufacturer":126,"applicationCategory":130,"softwareVersion":131,"mainEntity":132},"https:\u002F\u002Fschema.org","SoftwareApplication","Communications Billing And Revenue Management","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Foracle\u002Fcommunications_billing_and_revenue_management",{"@type":127,"name":128,"url":129},"Organization","Oracle","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Foracle","Security Software","10 versions tracked",{"@type":133,"name":134,"description":135,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Communications Billing And Revenue Management Security Vulnerabilities","Security vulnerabilities affecting Communications Billing And Revenue Management by Oracle",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":137,"apiVersion":138},"2026-10-17T00:10:46.561Z","3.0",{"rows":140,"total":11,"capped":17,"failed":11},[],[142],{"product":143,"cves":144},"communications_billing_and_revenue_management_elastic_charging_engine",30]