[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f1VTstGETgQ5qUs8O38tO2XD4MSya3P400h-QOrPN-UM":3,"g5a-ex:oracle\u002Fcommunications_design_studio@*":136,"g5a-family:oracle\u002Fcommunications_design_studio":138},{"success":4,"data":5},true,{"product":6,"versions":41,"topVulnerabilitiesByEpss":52,"kevVulnerabilities":113,"seoMetadata":114,"meta":133},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":40},"oracle","communications_design_studio",10,15,0,"2022-04-21",[14,18,20,23,25,28,30,33,35,38],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"7.3.4",3,false,{"version":19,"cve_count":16,"kev_count":11,"has_kev":17},"7.3.4.3.0",{"version":21,"cve_count":22,"kev_count":11,"has_kev":17},"7.3.5",5,{"version":24,"cve_count":16,"kev_count":11,"has_kev":17},"7.3.5.5.0",{"version":26,"cve_count":27,"kev_count":11,"has_kev":17},"7.4.0",4,{"version":29,"cve_count":16,"kev_count":11,"has_kev":17},"7.4.0.4.0",{"version":31,"cve_count":32,"kev_count":11,"has_kev":17},"7.4.1",2,{"version":34,"cve_count":32,"kev_count":11,"has_kev":17},"7.4.1.1.0",{"version":36,"cve_count":37,"kev_count":11,"has_kev":17},"7.4.2",7,{"version":39,"cve_count":32,"kev_count":11,"has_kev":17},"7.4.2.0.0","Communications Design Studio by Oracle is a technology product with 10 tracked versions and 15 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[42,43,44,45,46,47,48,49,50,51],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":16,"kev_count":11,"has_kev":17},{"version":21,"cve_count":22,"kev_count":11,"has_kev":17},{"version":24,"cve_count":16,"kev_count":11,"has_kev":17},{"version":26,"cve_count":27,"kev_count":11,"has_kev":17},{"version":29,"cve_count":16,"kev_count":11,"has_kev":17},{"version":31,"cve_count":32,"kev_count":11,"has_kev":17},{"version":34,"cve_count":32,"kev_count":11,"has_kev":17},{"version":36,"cve_count":37,"kev_count":11,"has_kev":17},{"version":39,"cve_count":32,"kev_count":11,"has_kev":17},[53,61,67,73,80,86,92,97,102,108],{"cveId":54,"description":55,"publishedDate":56,"cvssScore":57,"cvssVersion":58,"severity":59,"isKev":17,"epssScore":60},"CVE-2019-0227","A Server Side Request Forgery (SSRF) vulnerability affected the Apache Axis 1.4 distribution that was last released in 2006. Security and bug commits commits continue in the projects Axis 1.x Subversion repository, legacy users are encouraged to build from source. The successor to Axis 1.x is Axis2, the latest version is 1.7.9 and is not vulnerable to this issue.","2019-05-01",7.5,"v3.1","High",0.9194,{"cveId":62,"description":63,"publishedDate":64,"cvssScore":65,"cvssVersion":58,"severity":59,"isKev":17,"epssScore":66},"CVE-2019-10086","In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all Java objects. We, however were not using this by default characteristic of the PropertyUtilsBean.","2019-08-20",7.3,0.28384,{"cveId":68,"description":69,"publishedDate":70,"cvssScore":71,"cvssVersion":58,"severity":59,"isKev":17,"epssScore":72},"CVE-2021-23337","Lodash versions prior to 4.17.21 are vulnerable to Command Injection via the template function.","2021-02-15",7.2,0.21333,{"cveId":74,"description":75,"publishedDate":76,"cvssScore":77,"cvssVersion":58,"severity":78,"isKev":17,"epssScore":79},"CVE-2020-5421","In Spring Framework versions 5.2.0 - 5.2.8, 5.1.0 - 5.1.17, 5.0.0 - 5.0.18, 4.3.0 - 4.3.28, and older unsupported versions, the protections against RFD attacks from CVE-2015-5211 may be bypassed depending on the browser used through the use of a jsessionid path parameter.","2020-09-19",6.5,"Medium",0.11564,{"cveId":81,"description":82,"publishedDate":83,"cvssScore":84,"cvssVersion":58,"severity":78,"isKev":17,"epssScore":85},"CVE-2018-8032","Apache Axis 1.x up to and including 1.4 is vulnerable to a cross-site scripting (XSS) attack in the default servlet\u002Fservices.","2018-08-02",6.1,0.10554,{"cveId":87,"description":88,"publishedDate":89,"cvssScore":90,"cvssVersion":58,"severity":78,"isKev":17,"epssScore":91},"CVE-2021-29425","In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like \"\u002F\u002F..\u002Ffoo\", or \"\\\\..\\foo\", the result would be the same value, thus possibly providing access to files in the parent directory, but not further above (thus \"limited\" path traversal), if the calling code would use the result to construct a path value.","2021-04-13",4.8,0.10549,{"cveId":93,"description":94,"publishedDate":95,"cvssScore":57,"cvssVersion":58,"severity":59,"isKev":17,"epssScore":96},"CVE-2020-11612","The ZlibDecoders in Netty 4.1.x before 4.1.46 allow for unbounded memory allocation while decoding a ZlibEncoded byte stream. An attacker could send a large ZlibEncoded byte stream to the Netty server, forcing the server to allocate all of its free memory to a single decoder.","2020-04-07",0.09188,{"cveId":98,"description":99,"publishedDate":70,"cvssScore":100,"cvssVersion":58,"severity":78,"isKev":17,"epssScore":101},"CVE-2020-28500","Lodash versions prior to 4.17.21 are vulnerable to Regular Expression Denial of Service (ReDoS) via the toNumber, trim and trimEnd functions.",5.3,0.07336,{"cveId":103,"description":104,"publishedDate":105,"cvssScore":106,"cvssVersion":58,"severity":78,"isKev":17,"epssScore":107},"CVE-2021-21409","Netty is an open-source, asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. In Netty (io.netty:netty-codec-http2) before version 4.1.61.Final there is a vulnerability that enables request smuggling. The content-length header is not correctly validated if the request only uses a single Http2HeaderFrame with the endStream set to to true. This could lead to request smuggling if the request is proxied to a remote peer and translated to HTTP\u002F1.1. This is a followup of GHSA-wm47-8v5p-wjpj\u002FCVE-2021-21295 which did miss to fix this one case. This was fixed as part of 4.1.61.Final.","2021-03-30",5.9,0.04935,{"cveId":109,"description":110,"publishedDate":111,"cvssScore":77,"cvssVersion":58,"severity":78,"isKev":17,"epssScore":112},"CVE-2019-16168","In SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other application because of missing validation of a sqlite_stat1 sz field, aka a \"severe division by zero in the query planner.\"","2019-09-09",0.04253,[],{"title":115,"metaDescription":116,"keywords":117,"structuredData":118},"Communications Design Studio by Oracle - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Communications Design Studio by Oracle covering 10 versions with 15 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Communications Design Studio vulnerabilities, Communications Design Studio security, Communications Design Studio CVE, Oracle Communications Design Studio, Communications Design Studio threat intelligence, Oracle security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":119,"@type":120,"name":121,"description":116,"url":122,"manufacturer":123,"applicationCategory":127,"softwareVersion":128,"mainEntity":129},"https:\u002F\u002Fschema.org","SoftwareApplication","Communications Design Studio","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Foracle\u002Fcommunications_design_studio",{"@type":124,"name":125,"url":126},"Organization","Oracle","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Foracle","Security Software","10 versions tracked",{"@type":130,"name":131,"description":132,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Communications Design Studio Security Vulnerabilities","Security vulnerabilities affecting Communications Design Studio by Oracle",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":134,"apiVersion":135},"2026-10-17T17:21:32.109Z","3.0",{"rows":137,"total":11,"capped":17,"failed":11},[],[]]