[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f-Jaa6iCGIX7kri46cd4GcaABKSqUlWbJWSBTKqZjha0":3,"g5a-family:oracle\u002Fcommunications_diameter_intelligence_hub":113,"g5a-ex:oracle\u002Fcommunications_diameter_intelligence_hub@*":114},{"success":4,"data":5},true,{"product":6,"versions":24,"topVulnerabilitiesByEpss":29,"kevVulnerabilities":85,"seoMetadata":91,"meta":110},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":23},"oracle","communications_diameter_intelligence_hub",4,14,1,"2022-02-01",[14,16,18,20],{"version":15,"cve_count":11,"kev_count":11,"has_kev":4},"8.0.0",{"version":17,"cve_count":11,"kev_count":11,"has_kev":4},"8.1.0",{"version":19,"cve_count":11,"kev_count":11,"has_kev":4},"8.2.0",{"version":21,"cve_count":22,"kev_count":11,"has_kev":4},"8.2.3",2,"Communications Diameter Intelligence Hub by Oracle is a technology product with 4 tracked versions and 14 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[25,26,27,28],{"version":15,"cve_count":11,"kev_count":11,"has_kev":4},{"version":17,"cve_count":11,"kev_count":11,"has_kev":4},{"version":19,"cve_count":11,"kev_count":11,"has_kev":4},{"version":21,"cve_count":22,"kev_count":11,"has_kev":4},[30,38,46,51,55,59,63,70,74,79],{"cveId":31,"description":32,"publishedDate":33,"cvssScore":34,"cvssVersion":35,"severity":36,"isKev":4,"epssScore":37},"CVE-2020-17530","Forced OGNL evaluation, when evaluated on raw user input in tag attributes, may lead to remote code execution. Affected software : Apache Struts 2.0.0 - Struts 2.5.25.","2020-12-11",9.8,"v3.1","Critical",0.95931,{"cveId":39,"description":40,"publishedDate":41,"cvssScore":42,"cvssVersion":35,"severity":43,"isKev":44,"epssScore":45},"CVE-2020-11971","Apache Camel's JMX is vulnerable to Rebind Flaw. Apache Camel 2.22.x, 2.23.x, 2.24.x, 2.25.x, 3.0.0 up to 3.1.0 is affected. Users should upgrade to 3.2.0.","2020-05-14",7.5,"High",false,0.13959,{"cveId":47,"description":48,"publishedDate":49,"cvssScore":42,"cvssVersion":35,"severity":43,"isKev":44,"epssScore":50},"CVE-2021-36090","When reading a specially crafted ZIP archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs. This could be used to mount a denial of service attack against services that use Compress' zip package.","2021-07-13",0.12945,{"cveId":52,"description":53,"publishedDate":49,"cvssScore":42,"cvssVersion":35,"severity":43,"isKev":44,"epssScore":54},"CVE-2021-35516","When reading a specially crafted 7Z archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs. This could be used to mount a denial of service attack against services that use Compress' sevenz package.",0.12365,{"cveId":56,"description":57,"publishedDate":49,"cvssScore":42,"cvssVersion":35,"severity":43,"isKev":44,"epssScore":58},"CVE-2021-35515","When reading a specially crafted 7Z archive, the construction of the list of codecs that decompress an entry can result in an infinite loop. This could be used to mount a denial of service attack against services that use Compress' sevenz package.",0.11567,{"cveId":60,"description":61,"publishedDate":49,"cvssScore":42,"cvssVersion":35,"severity":43,"isKev":44,"epssScore":62},"CVE-2021-35517","When reading a specially crafted TAR archive, Compress can be made to allocate large amounts of memory that finally leads to an out of memory error even for very small inputs. This could be used to mount a denial of service attack against services that use Compress' tar package.",0.10614,{"cveId":64,"description":65,"publishedDate":66,"cvssScore":67,"cvssVersion":35,"severity":68,"isKev":44,"epssScore":69},"CVE-2021-29425","In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like \"\u002F\u002F..\u002Ffoo\", or \"\\\\..\\foo\", the result would be the same value, thus possibly providing access to files in the parent directory, but not further above (thus \"limited\" path traversal), if the calling code would use the result to construct a path value.","2021-04-13",4.8,"Medium",0.10549,{"cveId":71,"description":72,"publishedDate":12,"cvssScore":42,"cvssVersion":35,"severity":43,"isKev":44,"epssScore":73},"CVE-2021-43859","XStream is an open source java library to serialize objects to XML and back again. Versions prior to 1.4.19 may allow a remote attacker to allocate 100% CPU time on the target system depending on CPU type or parallel execution of such a payload resulting in a denial of service only by manipulating the processed input stream. XStream 1.4.19 monitors and accumulates the time it takes to add elements to collections and throws an exception if a set threshold is exceeded. Users are advised to upgrade as soon as possible. Users unable to upgrade may set the NO_REFERENCE mode to prevent recursion. See GHSA-rmr5-cpv2-vgjf for further details on a workaround if an upgrade is not possible.",0.07934,{"cveId":75,"description":76,"publishedDate":77,"cvssScore":42,"cvssVersion":35,"severity":43,"isKev":44,"epssScore":78},"CVE-2021-40690","All versions of Apache Santuario - XML Security for Java prior to 2.2.3 and 2.1.7 are vulnerable to an issue where the \"secureValidation\" property is not passed correctly when creating a KeyInfo from a KeyInfoReference element. This allows an attacker to abuse an XPath Transform to extract any local .xml files in a RetrievalMethod element.","2021-09-19",0.07441,{"cveId":80,"description":81,"publishedDate":82,"cvssScore":83,"cvssVersion":35,"severity":68,"isKev":44,"epssScore":84},"CVE-2020-1971","The X.509 GeneralName type is a generic type for representing different types of names. One of those name types is known as EDIPartyName. OpenSSL provides a function GENERAL_NAME_cmp which compares different instances of a GENERAL_NAME to see if they are equal or not. This function behaves incorrectly when both GENERAL_NAMEs contain an EDIPARTYNAME. A NULL pointer dereference and a crash may occur leading to a possible denial of service attack. OpenSSL itself uses the GENERAL_NAME_cmp function for two purposes: 1) Comparing CRL distribution point names between an available CRL and a CRL distribution point embedded in an X509 certificate 2) When verifying that a timestamp response token signer matches the timestamp authority name (exposed via the API functions TS_RESP_verify_response and TS_RESP_verify_token) If an attacker can control both items being compared then that attacker could trigger a crash. For example if the attacker can trick a client or server into checking a malicious certificate against a malicious CRL then this may occur. Note that some applications automatically download CRLs based on a URL embedded in a certificate. This checking happens prior to the signatures on the certificate and CRL being verified. OpenSSL's s_server, s_client and verify tools have support for the \"-crl_download\" option which implements automatic CRL downloading and this attack has been demonstrated to work against those tools. Note that an unrelated bug means that affected versions of OpenSSL cannot parse or construct correct encodings of EDIPARTYNAME. However it is possible to construct a malformed EDIPARTYNAME that OpenSSL's parser will accept and hence trigger this attack. All OpenSSL 1.1.1 and 1.0.2 versions are affected by this issue. Other OpenSSL releases are out of support and have not been checked. Fixed in OpenSSL 1.1.1i (Affected 1.1.1-1.1.1h). Fixed in OpenSSL 1.0.2x (Affected 1.0.2-1.0.2w).","2020-12-08",5.9,0.07051,[86],{"cveId":31,"description":32,"publishedDate":33,"cvssScore":34,"severity":36,"isKev":4,"epssScore":37,"cisaVulnName":87,"cisaDateAdded":88,"cisaShortDescription":89,"cisaRequiredAction":90},"Apache Struts Remote Code Execution Vulnerability","2021-11-03","Forced Object-Graph Navigation Language (OGNL) evaluation in Apache Struts, when evaluated on raw user input in tag attributes, can lead to remote code execution.","Apply updates per vendor instructions.",{"title":92,"metaDescription":93,"keywords":94,"structuredData":95},"Communications Diameter Intelligence Hub by Oracle - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Communications Diameter Intelligence Hub by Oracle covering 4 versions with 14 tracked vulnerabilities including 1 critical and 0 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Communications Diameter Intelligence Hub vulnerabilities, Communications Diameter Intelligence Hub security, Communications Diameter Intelligence Hub CVE, Oracle Communications Diameter Intelligence Hub, Communications Diameter Intelligence Hub threat intelligence, Oracle security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Communications Diameter Intelligence Hub KEV, Communications Diameter Intelligence Hub exploited vulnerabilities",{"@context":96,"@type":97,"name":98,"description":93,"url":99,"manufacturer":100,"applicationCategory":104,"softwareVersion":105,"mainEntity":106},"https:\u002F\u002Fschema.org","SoftwareApplication","Communications Diameter Intelligence Hub","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Foracle\u002Fcommunications_diameter_intelligence_hub",{"@type":101,"name":102,"url":103},"Organization","Oracle","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Foracle","Security Software","4 versions tracked",{"@type":107,"name":108,"description":109,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Communications Diameter Intelligence Hub Security Vulnerabilities","Security vulnerabilities affecting Communications Diameter Intelligence Hub by Oracle",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":111,"apiVersion":112},"2026-10-18T14:14:31.592Z","3.0",[],{"rows":115,"total":11,"capped":44,"failed":120},[116],{"cveId":31,"name":87,"severity":36,"cvss":34,"added":88,"epss":37,"published":117,"ranges":118,"checked":4,"hits":119,"covers":44},"2020-12-11T02:15:10.883",[15,17,19,21],[],0]