[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$ffNMFnZhHCEAuV4vAyAWrv1Jhqvo36kdhcMxR3u_J-hc":3,"g5a-ex:oracle\u002Fcommunications_ip_service_activator@*":109,"g5a-family:oracle\u002Fcommunications_ip_service_activator":111},{"success":4,"data":5},true,{"product":6,"versions":24,"topVulnerabilitiesByEpss":28,"kevVulnerabilities":86,"seoMetadata":87,"meta":106},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":23},"oracle","communications_ip_service_activator",3,13,0,"2021-12-18",[14,18,21],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"7.3.0",9,false,{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},"7.3.4",2,{"version":22,"cve_count":10,"kev_count":11,"has_kev":17},"7.4.0","Communications Ip Service Activator by Oracle is a technology product with 3 tracked versions and 13 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[25,26,27],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},{"version":22,"cve_count":10,"kev_count":11,"has_kev":17},[29,36,43,50,55,60,65,70,75,80],{"cveId":30,"description":31,"publishedDate":12,"cvssScore":32,"cvssVersion":33,"severity":34,"isKev":17,"epssScore":35},"CVE-2021-45105","Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread Context Map data to cause a denial of service when a crafted string is interpreted. This issue was fixed in Log4j 2.17.0, 2.12.3, and 2.3.1.",5.9,"v3.1","Medium",0.99999,{"cveId":37,"description":38,"publishedDate":39,"cvssScore":40,"cvssVersion":33,"severity":41,"isKev":17,"epssScore":42},"CVE-2016-8610","A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS\u002FSSL protocol defined processing of ALERT packets during a connection handshake. A remote attacker could use this flaw to make a TLS\u002FSSL server consume an excessive amount of CPU and fail to accept connections from other clients.","2017-11-13",7.5,"High",0.39657,{"cveId":44,"description":45,"publishedDate":46,"cvssScore":47,"cvssVersion":33,"severity":48,"isKev":17,"epssScore":49},"CVE-2019-13990","initDocumentParser in xml\u002FXMLSchedulingDataProcessor.java in Terracotta Quartz Scheduler through 2.3.0 allows XXE attacks via a job description.","2019-07-26",9.8,"Critical",0.16628,{"cveId":51,"description":52,"publishedDate":53,"cvssScore":40,"cvssVersion":33,"severity":41,"isKev":17,"epssScore":54},"CVE-2019-12402","The file name encoding algorithm used internally in Apache Commons Compress 1.15 to 1.18 can get into an infinite loop when faced with specially crafted inputs. This can lead to a denial of service attack if an attacker can choose the file names inside of an archive created by Compress.","2019-08-30",0.16157,{"cveId":56,"description":57,"publishedDate":58,"cvssScore":32,"cvssVersion":33,"severity":34,"isKev":17,"epssScore":59},"CVE-2018-10237","Unbounded memory allocation in Google Guava 11.0 through 24.x before 24.1.1 allows remote attackers to conduct denial of service attacks against servers that depend on this library and deserialize attacker-provided data, because the AtomicDoubleArray class (when serialized with Java serialization) and the CompoundOrdering class (when serialized with GWT serialization) perform eager allocation without appropriate checks on what a client has sent and whether the data size is reasonable.","2018-04-26",0.05086,{"cveId":61,"description":62,"publishedDate":63,"cvssScore":40,"cvssVersion":33,"severity":41,"isKev":17,"epssScore":64},"CVE-2019-5427","c3p0 version \u003C 0.9.5.4 may be exploited by a billion laughs attack when loading XML configuration due to missing protections against recursive entity expansion when loading configuration.","2019-04-22",0.04882,{"cveId":66,"description":67,"publishedDate":68,"cvssScore":47,"cvssVersion":33,"severity":48,"isKev":17,"epssScore":69},"CVE-2018-11058","RSA BSAFE Micro Edition Suite, versions prior to 4.0.11 (in 4.0.x) and prior to 4.1.6 (in 4.1.x), and RSA BSAFE Crypto-C Micro Edition, version prior to 4.0.5.3 (in 4.0.x) contain a Buffer Over-Read vulnerability when parsing ASN.1 data. A remote attacker could use maliciously constructed ASN.1 data that would result in such issue.","2018-09-14",0.04012,{"cveId":71,"description":72,"publishedDate":73,"cvssScore":40,"cvssVersion":33,"severity":41,"isKev":17,"epssScore":74},"CVE-2018-11054","RSA BSAFE Micro Edition Suite, version 4.1.6, contains an integer overflow vulnerability. A remote attacker could use maliciously constructed ASN.1 data to potentially cause a Denial Of Service.","2018-08-31",0.03235,{"cveId":76,"description":77,"publishedDate":78,"cvssScore":40,"cvssVersion":33,"severity":41,"isKev":17,"epssScore":79},"CVE-2018-15769","RSA BSAFE Micro Edition Suite versions prior to 4.0.11 (in 4.0.x series) and versions prior to 4.1.6.2 (in 4.1.x series) contain a key management error issue. A malicious TLS server could potentially cause a Denial Of Service (DoS) on TLS clients during the handshake when a very large prime value is sent to the TLS client, and an Ephemeral or Anonymous Diffie-Hellman cipher suite (DHE or ADH) is used.","2018-11-16",0.0265,{"cveId":81,"description":82,"publishedDate":83,"cvssScore":84,"cvssVersion":33,"severity":41,"isKev":17,"epssScore":85},"CVE-2021-2351","Vulnerability in the Advanced Networking Option component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise Advanced Networking Option. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Advanced Networking Option, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Advanced Networking Option. Note: The July 2021 Critical Patch Update introduces a number of Native Network Encryption changes to deal with vulnerability CVE-2021-2351 and prevent the use of weaker ciphers. Customers should review: \"Changes in Native Network Encryption with the July 2021 Critical Patch Update\" (Doc ID 2791571.1). CVSS 3.1 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H).","2021-07-21",8.3,0.02432,[],{"title":88,"metaDescription":89,"keywords":90,"structuredData":91},"Communications Ip Service Activator by Oracle - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Communications Ip Service Activator by Oracle covering 3 versions with 13 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Communications Ip Service Activator vulnerabilities, Communications Ip Service Activator security, Communications Ip Service Activator CVE, Oracle Communications Ip Service Activator, Communications Ip Service Activator threat intelligence, Oracle security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":92,"@type":93,"name":94,"description":89,"url":95,"manufacturer":96,"applicationCategory":100,"softwareVersion":101,"mainEntity":102},"https:\u002F\u002Fschema.org","SoftwareApplication","Communications Ip Service Activator","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Foracle\u002Fcommunications_ip_service_activator",{"@type":97,"name":98,"url":99},"Organization","Oracle","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Foracle","Security Software","3 versions tracked",{"@type":103,"name":104,"description":105,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Communications Ip Service Activator Security Vulnerabilities","Security vulnerabilities affecting Communications Ip Service Activator by Oracle",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":107,"apiVersion":108},"2026-10-17T14:58:35.537Z","3.0",{"rows":110,"total":11,"capped":17,"failed":11},[],[]]