[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fczGfS6VVqY0w8me8cycwjpLyUU-6SzqMOWrZhLcTfEo":3,"g5a-ex:oracle\u002Fcommunications_diameter_signaling_router@*":161,"g5a-family:oracle\u002Fcommunications_diameter_signaling_router":169},{"success":4,"data":5},true,{"product":6,"versions":53,"topVulnerabilitiesByEpss":70,"kevVulnerabilities":129,"seoMetadata":139,"meta":158},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":52},"oracle","communications_diameter_signaling_router",16,80,2,"2021-12-28",[14,18,21,24,26,29,31,34,36,38,40,42,44,46,48,50],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},"6.0",0,false,{"version":19,"cve_count":20,"kev_count":16,"has_kev":17},"8.0",1,{"version":22,"cve_count":23,"kev_count":16,"has_kev":17},"8.0.0",8,{"version":25,"cve_count":16,"kev_count":16,"has_kev":17},"8.0.0.0",{"version":27,"cve_count":28,"kev_count":16,"has_kev":17},"8.1",9,{"version":30,"cve_count":28,"kev_count":16,"has_kev":17},"8.2",{"version":32,"cve_count":33,"kev_count":16,"has_kev":17},"8.2.1",7,{"version":35,"cve_count":16,"kev_count":16,"has_kev":17},"8.2.2",{"version":37,"cve_count":11,"kev_count":16,"has_kev":17},"8.3",{"version":39,"cve_count":16,"kev_count":16,"has_kev":17},"8.3.0.0",{"version":41,"cve_count":20,"kev_count":16,"has_kev":17},"8.4",{"version":43,"cve_count":20,"kev_count":16,"has_kev":17},"8.4.0.0",{"version":45,"cve_count":16,"kev_count":16,"has_kev":17},"8.4.0.5",{"version":47,"cve_count":16,"kev_count":16,"has_kev":17},"8.5.0",{"version":49,"cve_count":16,"kev_count":16,"has_kev":17},"8.5.0.2",{"version":51,"cve_count":16,"kev_count":16,"has_kev":17},"8.5.1.0","Communications Diameter Signaling Router by Oracle is a technology product with 16 tracked versions and 80 known security vulnerabilities including 2 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},{"version":19,"cve_count":20,"kev_count":16,"has_kev":17},{"version":22,"cve_count":23,"kev_count":16,"has_kev":17},{"version":25,"cve_count":16,"kev_count":16,"has_kev":17},{"version":27,"cve_count":28,"kev_count":16,"has_kev":17},{"version":30,"cve_count":28,"kev_count":16,"has_kev":17},{"version":32,"cve_count":33,"kev_count":16,"has_kev":17},{"version":35,"cve_count":16,"kev_count":16,"has_kev":17},{"version":37,"cve_count":11,"kev_count":16,"has_kev":17},{"version":39,"cve_count":16,"kev_count":16,"has_kev":17},{"version":41,"cve_count":20,"kev_count":16,"has_kev":17},{"version":43,"cve_count":20,"kev_count":16,"has_kev":17},{"version":45,"cve_count":16,"kev_count":16,"has_kev":17},{"version":47,"cve_count":16,"kev_count":16,"has_kev":17},{"version":49,"cve_count":16,"kev_count":16,"has_kev":17},{"version":51,"cve_count":16,"kev_count":16,"has_kev":17},[71,79,85,91,96,101,106,111,118,124],{"cveId":72,"description":73,"publishedDate":74,"cvssScore":75,"cvssVersion":76,"severity":77,"isKev":17,"epssScore":78},"CVE-2021-45105","Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread Context Map data to cause a denial of service when a crafted string is interpreted. This issue was fixed in Log4j 2.17.0, 2.12.3, and 2.3.1.","2021-12-18",5.9,"v3.1","Medium",0.99999,{"cveId":80,"description":81,"publishedDate":82,"cvssScore":83,"cvssVersion":76,"severity":84,"isKev":4,"epssScore":78},"CVE-2017-9841","Util\u002FPHP\u002Feval-stdin.php in PHPUnit before 4.8.28 and 5.x before 5.6.3 allows remote attackers to execute arbitrary PHP code via HTTP POST data beginning with a \"\u003C?php \" substring, as demonstrated by an attack on a site with an exposed \u002Fvendor folder, i.e., external access to the \u002Fvendor\u002Fphpunit\u002Fphpunit\u002Fsrc\u002FUtil\u002FPHP\u002Feval-stdin.php URI.","2017-06-27",9.8,"Critical",{"cveId":86,"description":87,"publishedDate":88,"cvssScore":89,"cvssVersion":76,"severity":77,"isKev":17,"epssScore":90},"CVE-2021-34429","For Eclipse Jetty versions 9.4.37-9.4.42, 10.0.1-10.0.5 & 11.0.1-11.0.5, URIs can be crafted using some encoded characters to access the content of the WEB-INF directory and\u002For bypass some security constraints. This is a variation of the vulnerability reported in CVE-2021-28164\u002FGHSA-v7ff-8wcx-gmc5.","2021-07-15",5.3,0.99298,{"cveId":92,"description":93,"publishedDate":12,"cvssScore":94,"cvssVersion":76,"severity":77,"isKev":17,"epssScore":95},"CVE-2021-44832","Apache Log4j2 versions 2.0-beta7 through 2.17.0 (excluding security fix releases 2.3.2 and 2.12.4) are vulnerable to a remote code execution (RCE) attack when a configuration uses a JDBC Appender with a JNDI LDAP data source URI when an attacker has control of the target LDAP server. This issue is fixed by limiting JNDI data source names to the java protocol in Log4j2 versions 2.17.1, 2.12.4, and 2.3.2.",6.6,0.97906,{"cveId":97,"description":98,"publishedDate":99,"cvssScore":83,"cvssVersion":76,"severity":84,"isKev":4,"epssScore":100},"CVE-2020-2555","Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Caching,CacheStore,Invocation). Supported versions that are affected are 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle Coherence. Successful attacks of this vulnerability can result in takeover of Oracle Coherence. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H).","2020-01-15",0.97116,{"cveId":102,"description":103,"publishedDate":104,"cvssScore":83,"cvssVersion":76,"severity":84,"isKev":17,"epssScore":105},"CVE-2019-10173","It was found that xstream API version 1.4.10 before 1.4.11 introduced a regression for a previous deserialization flaw. If the security framework has not been initialized, it may allow a remote attacker to run arbitrary shell commands when unmarshalling XML or any supported format. e.g. JSON. (regression of CVE-2013-7285)","2019-07-23",0.95036,{"cveId":107,"description":108,"publishedDate":109,"cvssScore":83,"cvssVersion":76,"severity":84,"isKev":17,"epssScore":110},"CVE-2019-2729","Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supported versions that are affected are 10.3.6.0.0, 12.1.3.0.0 and 12.2.1.3.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H).","2019-06-19",0.8883,{"cveId":112,"description":113,"publishedDate":114,"cvssScore":115,"cvssVersion":76,"severity":116,"isKev":17,"epssScore":117},"CVE-2020-5398","In Spring Framework, versions 5.2.x prior to 5.2.3, versions 5.1.x prior to 5.1.13, and versions 5.0.x prior to 5.0.16, an application is vulnerable to a reflected file download (RFD) attack when it sets a \"Content-Disposition\" header in the response where the filename attribute is derived from user supplied input.","2020-01-17",7.5,"High",0.88768,{"cveId":119,"description":120,"publishedDate":121,"cvssScore":122,"cvssVersion":76,"severity":77,"isKev":17,"epssScore":123},"CVE-2019-11358","jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.","2019-04-20",6.1,0.8682,{"cveId":125,"description":126,"publishedDate":127,"cvssScore":83,"cvssVersion":76,"severity":84,"isKev":17,"epssScore":128},"CVE-2018-1270","Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, allow applications to expose STOMP over WebSocket endpoints with a simple, in-memory STOMP broker through the spring-messaging module. A malicious user (or attacker) can craft a message to the broker that can lead to a remote code execution attack.","2018-04-06",0.77476,[130,135],{"cveId":80,"description":81,"publishedDate":82,"cvssScore":83,"severity":84,"isKev":4,"epssScore":78,"cisaVulnName":131,"cisaDateAdded":132,"cisaShortDescription":133,"cisaRequiredAction":134},"PHPUnit Command Injection Vulnerability","2022-02-15","PHPUnit allows remote attackers to execute arbitrary PHP code via HTTP POST data beginning with a \"\u003C?php \" substring, as demonstrated by an attack on a site with an exposed \u002Fvendor folder, i.e., external access to the \u002Fvendor\u002Fphpunit\u002Fphpunit\u002Fsrc\u002FUtil\u002FPHP\u002Feval-stdin.php URI.","Apply updates per vendor instructions.",{"cveId":97,"description":98,"publishedDate":99,"cvssScore":83,"severity":84,"isKev":4,"epssScore":100,"cisaVulnName":136,"cisaDateAdded":137,"cisaShortDescription":138,"cisaRequiredAction":134},"Oracle Multiple Products Remote Code Execution Vulnerability","2021-11-03","Multiple Oracle products contain a remote code execution vulnerability that allows an unauthenticated attacker with network access via T3 or HTTP to takeover the affected system. Impacted Oracle products: Oracle Coherence in Fusion Middleware, Oracle Utilities Framework, Oracle Retail Assortment Planning, Oracle Commerce, Oracle Communications Diameter Signaling Router (DSR).",{"title":140,"metaDescription":141,"keywords":142,"structuredData":143},"Communications Diameter Signaling Router by Oracle - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Communications Diameter Signaling Router by Oracle covering 16 versions with 80 tracked vulnerabilities including 2 critical and 0 high-severity issues and 2 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Communications Diameter Signaling Router vulnerabilities, Communications Diameter Signaling Router security, Communications Diameter Signaling Router CVE, Oracle Communications Diameter Signaling Router, Communications Diameter Signaling Router threat intelligence, Oracle security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Communications Diameter Signaling Router KEV, Communications Diameter Signaling Router exploited vulnerabilities",{"@context":144,"@type":145,"name":146,"description":141,"url":147,"manufacturer":148,"applicationCategory":152,"softwareVersion":153,"mainEntity":154},"https:\u002F\u002Fschema.org","SoftwareApplication","Communications Diameter Signaling Router","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Foracle\u002Fcommunications_diameter_signaling_router",{"@type":149,"name":150,"url":151},"Organization","Oracle","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Foracle","Security Software","16 versions tracked",{"@type":155,"name":156,"description":157,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Communications Diameter Signaling Router Security Vulnerabilities","Security vulnerabilities affecting Communications Diameter Signaling Router by Oracle",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":159,"apiVersion":160},"2026-10-17T14:58:48.224Z","3.0",{"rows":162,"total":11,"capped":17,"failed":11},[163,166],{"cveId":80,"name":131,"severity":84,"cvss":83,"added":132,"epss":78,"published":82,"ranges":164,"hits":165,"checked":17,"covers":17},[],[],{"cveId":97,"name":136,"severity":84,"cvss":83,"added":137,"epss":100,"published":99,"ranges":167,"hits":168,"checked":17,"covers":17},[],[],[]]