[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fGAZhXUbWWIzrhzltH1vkAGWfReoR5S_VLt3MGI-G_VI":3,"g5a-family:oracle\u002Fcommunications_operations_monitor":141,"g5a-ex:oracle\u002Fcommunications_operations_monitor@*":142},{"success":4,"data":5},true,{"product":6,"versions":41,"topVulnerabilitiesByEpss":51,"kevVulnerabilities":113,"seoMetadata":119,"meta":138},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":40},"oracle","communications_operations_monitor",9,45,1,"2022-04-27",[14,18,21,24,27,29,32,35,37],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},"3.3.92.0.0",0,false,{"version":19,"cve_count":20,"kev_count":11,"has_kev":4},"3.4",27,{"version":22,"cve_count":23,"kev_count":16,"has_kev":17},"4.0",11,{"version":25,"cve_count":26,"kev_count":16,"has_kev":17},"4.1",6,{"version":28,"cve_count":11,"kev_count":16,"has_kev":17},"4.1.0",{"version":30,"cve_count":31,"kev_count":16,"has_kev":17},"4.2",18,{"version":33,"cve_count":34,"kev_count":16,"has_kev":17},"4.3",33,{"version":36,"cve_count":20,"kev_count":16,"has_kev":17},"4.4",{"version":38,"cve_count":39,"kev_count":16,"has_kev":17},"5.0",26,"Communications Operations Monitor by Oracle is a technology product with 9 tracked versions and 45 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[42,43,44,45,46,47,48,49,50],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},{"version":19,"cve_count":20,"kev_count":11,"has_kev":4},{"version":22,"cve_count":23,"kev_count":16,"has_kev":17},{"version":25,"cve_count":26,"kev_count":16,"has_kev":17},{"version":28,"cve_count":11,"kev_count":16,"has_kev":17},{"version":30,"cve_count":31,"kev_count":16,"has_kev":17},{"version":33,"cve_count":34,"kev_count":16,"has_kev":17},{"version":36,"cve_count":20,"kev_count":16,"has_kev":17},{"version":38,"cve_count":39,"kev_count":16,"has_kev":17},[52,60,67,73,79,85,91,97,103,107],{"cveId":53,"description":54,"publishedDate":55,"cvssScore":56,"cvssVersion":57,"severity":58,"isKev":17,"epssScore":59},"CVE-2021-44790","A carefully crafted request body can cause a buffer overflow in the mod_lua multipart parser (r:parsebody() called from Lua scripts). The Apache httpd team is not aware of an exploit for the vulnerabilty though it might be possible to craft one. This issue affects Apache HTTP Server 2.4.51 and earlier.","2021-12-20",9.8,"v3.1","Critical",0.9684,{"cveId":61,"description":62,"publishedDate":63,"cvssScore":64,"cvssVersion":57,"severity":65,"isKev":17,"epssScore":66},"CVE-2019-11358","jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.","2019-04-20",6.1,"Medium",0.8682,{"cveId":68,"description":69,"publishedDate":70,"cvssScore":71,"cvssVersion":57,"severity":65,"isKev":4,"epssScore":72},"CVE-2020-11023","In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing \u003Coption> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.","2020-04-29",6.9,0.84887,{"cveId":74,"description":75,"publishedDate":55,"cvssScore":76,"cvssVersion":57,"severity":77,"isKev":17,"epssScore":78},"CVE-2021-44224","A crafted URI sent to httpd configured as a forward proxy (ProxyRequests on) can cause a crash (NULL pointer dereference) or, for configurations mixing forward and reverse proxy declarations, can allow for requests to be directed to a declared Unix Domain Socket endpoint (Server Side Request Forgery). This issue affects Apache HTTP Server 2.4.7 up to 2.4.51 (included).",8.2,"High",0.82295,{"cveId":80,"description":81,"publishedDate":82,"cvssScore":56,"cvssVersion":83,"severity":58,"isKev":17,"epssScore":84},"CVE-2018-11218","Memory Corruption was discovered in the cmsgpack library in the Lua subsystem in Redis before 3.2.12, 4.x before 4.0.10, and 5.x before 5.0 RC2 because of stack-based buffer overflows.","2018-06-17","v3.0",0.59006,{"cveId":86,"description":87,"publishedDate":88,"cvssScore":89,"cvssVersion":83,"severity":77,"isKev":17,"epssScore":90},"CVE-2017-3730","In OpenSSL 1.1.0 before 1.1.0d, if a malicious server supplies bad parameters for a DHE or ECDHE key exchange then this can result in the client attempting to dereference a NULL pointer leading to a client crash. This could be exploited in a Denial of Service attack.","2017-05-04",7.5,0.55294,{"cveId":92,"description":93,"publishedDate":94,"cvssScore":95,"cvssVersion":57,"severity":77,"isKev":17,"epssScore":96},"CVE-2021-23017","A security issue in nginx resolver was identified, which might allow an attacker who is able to forge UDP packets from the DNS server to cause 1-byte memory overwrite, resulting in worker process crash or potential other impact.","2021-06-01",7.7,0.53461,{"cveId":98,"description":99,"publishedDate":100,"cvssScore":101,"cvssVersion":57,"severity":65,"isKev":17,"epssScore":102},"CVE-2021-41184","jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the `of` option of the `.position()` util from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. Any string value passed to the `of` option is now treated as a CSS selector. A workaround is to not accept the value of the `of` option from untrusted sources.","2021-10-26",6.5,0.40768,{"cveId":104,"description":105,"publishedDate":100,"cvssScore":64,"cvssVersion":57,"severity":65,"isKev":17,"epssScore":106},"CVE-2021-41182","jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the `altField` option of the Datepicker widget from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. Any string value passed to the `altField` option is now treated as a CSS selector. A workaround is to not accept the value of the `altField` option from untrusted sources.",0.39361,{"cveId":108,"description":109,"publishedDate":110,"cvssScore":111,"cvssVersion":57,"severity":77,"isKev":17,"epssScore":112},"CVE-2019-10192","A heap-buffer overflow vulnerability was found in the Redis hyperloglog data structure versions 3.x before 3.2.13, 4.x before 4.0.14 and 5.x before 5.0.4. By carefully corrupting a hyperloglog using the SETRANGE command, an attacker could trick Redis interpretation of dense HLL encoding to write up to 3 bytes beyond the end of a heap-allocated buffer.","2019-07-11",7.2,0.26048,[114],{"cveId":68,"description":69,"publishedDate":70,"cvssScore":71,"severity":65,"isKev":4,"epssScore":72,"cisaVulnName":115,"cisaDateAdded":116,"cisaShortDescription":117,"cisaRequiredAction":118},"JQuery Cross-Site Scripting (XSS) Vulnerability","2025-01-23","JQuery contains a persistent cross-site scripting (XSS) vulnerability. When passing maliciously formed, untrusted input enclosed in HTML tags, JQuery's DOM manipulators can execute untrusted code in the context of the user's browser.","Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",{"title":120,"metaDescription":121,"keywords":122,"structuredData":123},"Communications Operations Monitor by Oracle - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Communications Operations Monitor by Oracle covering 9 versions with 45 tracked vulnerabilities and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Communications Operations Monitor vulnerabilities, Communications Operations Monitor security, Communications Operations Monitor CVE, Oracle Communications Operations Monitor, Communications Operations Monitor threat intelligence, Oracle security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Communications Operations Monitor KEV, Communications Operations Monitor exploited vulnerabilities",{"@context":124,"@type":125,"name":126,"description":121,"url":127,"manufacturer":128,"applicationCategory":132,"softwareVersion":133,"mainEntity":134},"https:\u002F\u002Fschema.org","SoftwareApplication","Communications Operations Monitor","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Foracle\u002Fcommunications_operations_monitor",{"@type":129,"name":130,"url":131},"Organization","Oracle","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Foracle","Security Software","9 versions tracked",{"@type":135,"name":136,"description":137,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Communications Operations Monitor Security Vulnerabilities","Security vulnerabilities affecting Communications Operations Monitor by Oracle",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":139,"apiVersion":140},"2026-10-17T14:22:10.773Z","3.0",[],{"rows":143,"total":11,"capped":17,"failed":16},[144],{"cveId":68,"name":115,"severity":65,"cvss":71,"added":116,"epss":72,"published":145,"ranges":146,"checked":4,"hits":148,"covers":17},"2020-04-29T21:15:11.743",[19,147],"4.1 to 4.3",[]]