[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fagNgNwlJw05alLE_94qHttWaU7z94L7kEoT6Prq6i9M":3,"g5a-ex:oracle\u002Fcommunications_evolved_communications_application_server@*":101,"g5a-family:oracle\u002Fcommunications_evolved_communications_application_server":103},{"success":4,"data":5},true,{"product":6,"versions":18,"topVulnerabilitiesByEpss":20,"kevVulnerabilities":78,"seoMetadata":79,"meta":98},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":17},"oracle","communications_evolved_communications_application_server",1,39,0,"2021-12-18",[14],{"version":15,"cve_count":10,"kev_count":11,"has_kev":16},"7.1",false,"Communications Evolved Communications Application Server by Oracle is a technology product with 1 tracked version and 39 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[19],{"version":15,"cve_count":10,"kev_count":11,"has_kev":16},[21,28,35,42,46,52,58,63,68,73],{"cveId":22,"description":23,"publishedDate":12,"cvssScore":24,"cvssVersion":25,"severity":26,"isKev":16,"epssScore":27},"CVE-2021-45105","Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread Context Map data to cause a denial of service when a crafted string is interpreted. This issue was fixed in Log4j 2.17.0, 2.12.3, and 2.3.1.",5.9,"v3.1","Medium",0.99999,{"cveId":29,"description":30,"publishedDate":31,"cvssScore":32,"cvssVersion":25,"severity":33,"isKev":16,"epssScore":34},"CVE-2019-10086","In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all Java objects. We, however were not using this by default characteristic of the PropertyUtilsBean.","2019-08-20",7.3,"High",0.28384,{"cveId":36,"description":37,"publishedDate":38,"cvssScore":39,"cvssVersion":25,"severity":40,"isKev":16,"epssScore":41},"CVE-2020-9548","FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to br.com.anteros.dbcp.AnterosDBCPConfig (aka anteros-core).","2020-03-02",9.8,"Critical",0.18921,{"cveId":43,"description":44,"publishedDate":38,"cvssScore":39,"cvssVersion":25,"severity":40,"isKev":16,"epssScore":45},"CVE-2020-9547","FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.ibatis.sqlmap.engine.transaction.jta.JtaTransactionConfig (aka ibatis-sqlmap).",0.18383,{"cveId":47,"description":48,"publishedDate":49,"cvssScore":50,"cvssVersion":25,"severity":33,"isKev":16,"epssScore":51},"CVE-2020-25649","A flaw was found in FasterXML Jackson Databind, where it did not have entity expansion secured properly. This flaw allows vulnerability to XML external entity (XXE) attacks. The highest threat from this vulnerability is data integrity.","2020-12-03",7.5,0.17714,{"cveId":53,"description":54,"publishedDate":55,"cvssScore":56,"cvssVersion":25,"severity":33,"isKev":16,"epssScore":57},"CVE-2020-36179","FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.commons.dbcp.cpdsadapter.DriverAdapterCPDS.","2021-01-07",8.1,0.17065,{"cveId":59,"description":60,"publishedDate":61,"cvssScore":56,"cvssVersion":25,"severity":33,"isKev":16,"epssScore":62},"CVE-2020-35728","FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.oracle.wls.shaded.org.apache.xalan.lib.sql.JNDIConnectionPool (aka embedded Xalan in org.glassfish.web\u002Fjavax.servlet.jsp.jstl).","2020-12-27",0.12504,{"cveId":64,"description":65,"publishedDate":66,"cvssScore":56,"cvssVersion":25,"severity":33,"isKev":16,"epssScore":67},"CVE-2020-36188","FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to com.newrelic.agent.deps.ch.qos.logback.core.db.JNDIConnectionSource.","2021-01-06",0.08787,{"cveId":69,"description":70,"publishedDate":71,"cvssScore":39,"cvssVersion":25,"severity":40,"isKev":16,"epssScore":72},"CVE-2019-20330","FasterXML jackson-databind 2.x before 2.9.10.2 lacks certain net.sf.ehcache blocking.","2020-01-03",0.0864,{"cveId":74,"description":75,"publishedDate":76,"cvssScore":56,"cvssVersion":25,"severity":33,"isKev":16,"epssScore":77},"CVE-2020-14060","FasterXML jackson-databind 2.x before 2.9.10.5 mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.xalan.lib.sql.JNDIConnectionPool (aka apache\u002Fdrill).","2020-06-14",0.08537,[],{"title":80,"metaDescription":81,"keywords":82,"structuredData":83},"Communications Evolved Communications Application Server by Oracle - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Communications Evolved Communications Application Server by Oracle covering 1 version with 39 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Communications Evolved Communications Application Server vulnerabilities, Communications Evolved Communications Application Server security, Communications Evolved Communications Application Server CVE, Oracle Communications Evolved Communications Application Server, Communications Evolved Communications Application Server threat intelligence, Oracle security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":84,"@type":85,"name":86,"description":81,"url":87,"manufacturer":88,"applicationCategory":92,"softwareVersion":93,"mainEntity":94},"https:\u002F\u002Fschema.org","SoftwareApplication","Communications Evolved Communications Application Server","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Foracle\u002Fcommunications_evolved_communications_application_server",{"@type":89,"name":90,"url":91},"Organization","Oracle","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Foracle","Security Software","1 versions tracked",{"@type":95,"name":96,"description":97,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Communications Evolved Communications Application Server Security Vulnerabilities","Security vulnerabilities affecting Communications Evolved Communications Application Server by Oracle",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":99,"apiVersion":100},"2026-10-18T20:16:13.564Z","3.0",{"rows":102,"total":11,"capped":16,"failed":11},[],[]]