[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fcj136zYbrfY7UnWQ09p2h6ImXDS9hKogTBI9LCyalvg":3,"g5a-ex:oracle\u002Fcommunications_metasolv_solution@*":105,"g5a-family:oracle\u002Fcommunications_metasolv_solution":107},{"success":4,"data":5},true,{"product":6,"versions":22,"topVulnerabilitiesByEpss":25,"kevVulnerabilities":82,"seoMetadata":83,"meta":102},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":21},"oracle","communications_metasolv_solution",2,9,0,"2022-01-26",[14,18],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"6.3.0",4,false,{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},"6.3.1",6,"Communications Metasolv Solution by Oracle is a technology product with 2 tracked versions and 9 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[23,24],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},[26,34,42,48,54,59,63,69,76],{"cveId":27,"description":28,"publishedDate":29,"cvssScore":30,"cvssVersion":31,"severity":32,"isKev":17,"epssScore":33},"CVE-2019-10086","In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all Java objects. We, however were not using this by default characteristic of the PropertyUtilsBean.","2019-08-20",7.3,"v3.1","High",0.28384,{"cveId":35,"description":36,"publishedDate":37,"cvssScore":38,"cvssVersion":39,"severity":40,"isKev":17,"epssScore":41},"CVE-2018-8013","In Apache Batik 1.x before 1.10, when deserializing subclass of `AbstractDocument`, the class takes a string from the inputStream as the class name which then use it to call the no-arg constructor of the class. Fix was to check the class type before calling newInstance in deserialization.","2018-05-24",9.8,"v3.0","Critical",0.18925,{"cveId":43,"description":44,"publishedDate":45,"cvssScore":46,"cvssVersion":31,"severity":32,"isKev":17,"epssScore":47},"CVE-2020-11987","Apache Batik 1.13 is vulnerable to server-side request forgery, caused by improper input validation by the NodePickerPanel. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server to make arbitrary GET requests.","2021-02-24",8.2,0.1328,{"cveId":49,"description":50,"publishedDate":51,"cvssScore":52,"cvssVersion":31,"severity":32,"isKev":17,"epssScore":53},"CVE-2019-17566","Apache Batik is vulnerable to server-side request forgery, caused by improper input validation by the \"xlink:href\" attributes. By using a specially-crafted argument, an attacker could exploit this vulnerability to cause the underlying server to make arbitrary GET requests.","2020-11-12",7.5,0.10867,{"cveId":55,"description":56,"publishedDate":57,"cvssScore":38,"cvssVersion":31,"severity":40,"isKev":17,"epssScore":58},"CVE-2022-23852","Expat (aka libexpat) before 2.4.4 has a signed integer overflow in XML_GetBuffer, for configurations with a nonzero XML_CONTEXT_BYTES.","2022-01-24",0.05083,{"cveId":60,"description":61,"publishedDate":12,"cvssScore":52,"cvssVersion":31,"severity":32,"isKev":17,"epssScore":62},"CVE-2022-23990","Expat (aka libexpat) before 2.4.4 has an integer overflow in the doProlog function.",0.04688,{"cveId":64,"description":65,"publishedDate":66,"cvssScore":67,"cvssVersion":31,"severity":32,"isKev":17,"epssScore":68},"CVE-2021-2351","Vulnerability in the Advanced Networking Option component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1 and 19c. Difficult to exploit vulnerability allows unauthenticated attacker with network access via Oracle Net to compromise Advanced Networking Option. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Advanced Networking Option, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Advanced Networking Option. Note: The July 2021 Critical Patch Update introduces a number of Native Network Encryption changes to deal with vulnerability CVE-2021-2351 and prevent the use of weaker ciphers. Customers should review: \"Changes in Native Network Encryption with the July 2021 Critical Patch Update\" (Doc ID 2791571.1). CVSS 3.1 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H).","2021-07-21",8.3,0.02432,{"cveId":70,"description":71,"publishedDate":72,"cvssScore":73,"cvssVersion":31,"severity":74,"isKev":17,"epssScore":75},"CVE-2019-10219","A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.","2019-11-08",6.1,"Medium",0.02157,{"cveId":77,"description":78,"publishedDate":79,"cvssScore":80,"cvssVersion":31,"severity":74,"isKev":17,"epssScore":81},"CVE-2020-1945","Apache Ant 1.1 to 1.9.14 and 1.10.0 to 1.10.7 uses the default temporary directory identified by the Java system property java.io.tmpdir for several tasks and may thus leak sensitive information. The fixcrlf and replaceregexp tasks also copy files from the temporary directory back into the build tree allowing an attacker to inject modified source files into the build process.","2020-05-14",6.3,0.01769,[],{"title":84,"metaDescription":85,"keywords":86,"structuredData":87},"Communications Metasolv Solution by Oracle - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Communications Metasolv Solution by Oracle covering 2 versions with 9 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Communications Metasolv Solution vulnerabilities, Communications Metasolv Solution security, Communications Metasolv Solution CVE, Oracle Communications Metasolv Solution, Communications Metasolv Solution threat intelligence, Oracle security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":88,"@type":89,"name":90,"description":85,"url":91,"manufacturer":92,"applicationCategory":96,"softwareVersion":97,"mainEntity":98},"https:\u002F\u002Fschema.org","SoftwareApplication","Communications Metasolv Solution","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Foracle\u002Fcommunications_metasolv_solution",{"@type":93,"name":94,"url":95},"Organization","Oracle","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Foracle","Security Software","2 versions tracked",{"@type":99,"name":100,"description":101,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Communications Metasolv Solution Security Vulnerabilities","Security vulnerabilities affecting Communications Metasolv Solution by Oracle",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":103,"apiVersion":104},"2026-10-17T15:10:19.473Z","3.0",{"rows":106,"total":11,"capped":17,"failed":11},[],[]]