[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f_Um-qlxTWtcwsKHxCFCTOZavMkOP9QeIO_YRqRa0wAM":3,"g5a-family:oracle\u002Fcommunications_performance_intelligence_center":126,"g5a-ex:oracle\u002Fcommunications_performance_intelligence_center@*":127},{"success":4,"data":5},true,{"product":6,"versions":32,"topVulnerabilitiesByEpss":40,"kevVulnerabilities":98,"seoMetadata":104,"meta":123},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":31},"oracle","communications_performance_intelligence_center",7,15,1,"2021-12-18",[14,18,20,22,24,27,29],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},"10.2.1",0,false,{"version":19,"cve_count":16,"kev_count":16,"has_kev":17},"10.3.0.0.0",{"version":21,"cve_count":16,"kev_count":16,"has_kev":17},"10.3.0.2.1",{"version":23,"cve_count":16,"kev_count":16,"has_kev":17},"10.4.0.1.0",{"version":25,"cve_count":26,"kev_count":16,"has_kev":17},"10.4.0.2",2,{"version":28,"cve_count":26,"kev_count":16,"has_kev":17},"10.4.0.3",{"version":30,"cve_count":16,"kev_count":16,"has_kev":17},"10.4.0.3.1","Communications Performance Intelligence Center by Oracle is a technology product with 7 tracked versions and 15 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[33,34,35,36,37,38,39],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},{"version":19,"cve_count":16,"kev_count":16,"has_kev":17},{"version":21,"cve_count":16,"kev_count":16,"has_kev":17},{"version":23,"cve_count":16,"kev_count":16,"has_kev":17},{"version":25,"cve_count":26,"kev_count":16,"has_kev":17},{"version":28,"cve_count":26,"kev_count":16,"has_kev":17},{"version":30,"cve_count":16,"kev_count":16,"has_kev":17},[41,48,55,62,67,72,76,82,87,93],{"cveId":42,"description":43,"publishedDate":12,"cvssScore":44,"cvssVersion":45,"severity":46,"isKev":17,"epssScore":47},"CVE-2021-45105","Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread Context Map data to cause a denial of service when a crafted string is interpreted. This issue was fixed in Log4j 2.17.0, 2.12.3, and 2.3.1.",5.9,"v3.1","Medium",0.99999,{"cveId":49,"description":50,"publishedDate":51,"cvssScore":52,"cvssVersion":45,"severity":53,"isKev":4,"epssScore":54},"CVE-2021-3156","Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via \"sudoedit -s\" and a command-line argument that ends with a single backslash character.","2021-01-26",7.8,"High",0.99962,{"cveId":56,"description":57,"publishedDate":58,"cvssScore":59,"cvssVersion":45,"severity":60,"isKev":17,"epssScore":61},"CVE-2018-1270","Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, allow applications to expose STOMP over WebSocket endpoints with a simple, in-memory STOMP broker through the spring-messaging module. A malicious user (or attacker) can craft a message to the broker that can lead to a remote code execution attack.","2018-04-06",9.8,"Critical",0.77476,{"cveId":63,"description":64,"publishedDate":65,"cvssScore":59,"cvssVersion":45,"severity":60,"isKev":17,"epssScore":66},"CVE-2020-10188","utility.c in telnetd in netkit telnet through 0.17 allows remote attackers to execute arbitrary code via short writes or urgent data, because of a buffer overflow involving the netclear and nextitem functions.","2020-03-06",0.74339,{"cveId":68,"description":69,"publishedDate":70,"cvssScore":59,"cvssVersion":45,"severity":60,"isKev":17,"epssScore":71},"CVE-2018-1275","Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.16 and older unsupported versions, allow applications to expose STOMP over WebSocket endpoints with a simple, in-memory STOMP broker through the spring-messaging module. A malicious user (or attacker) can craft a message to the broker that can lead to a remote code execution attack. This CVE addresses the partial fix for CVE-2018-1270 in the 4.3.x branch of the Spring Framework.","2018-04-11",0.57414,{"cveId":73,"description":74,"publishedDate":58,"cvssScore":44,"cvssVersion":45,"severity":46,"isKev":17,"epssScore":75},"CVE-2018-1271","Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, allow applications to configure Spring MVC to serve static resources (e.g. CSS, JS, images). When static resources are served from a file system on Windows (as opposed to the classpath, or the ServletContext), a malicious user can send a request using a specially crafted URL that can lead a directory traversal attack.",0.34444,{"cveId":77,"description":78,"publishedDate":79,"cvssScore":80,"cvssVersion":45,"severity":53,"isKev":17,"epssScore":81},"CVE-2019-10086","In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all Java objects. We, however were not using this by default characteristic of the PropertyUtilsBean.","2019-08-20",7.3,0.28384,{"cveId":83,"description":84,"publishedDate":85,"cvssScore":44,"cvssVersion":45,"severity":46,"isKev":17,"epssScore":86},"CVE-2019-1559","If an application encounters a fatal protocol error and then calls SSL_shutdown() twice (once to send a close_notify, and once to receive one) then OpenSSL can respond differently to the calling application if a 0 byte record is received with invalid padding compared to if a 0 byte record is received with an invalid MAC. If the application then behaves differently based on that in a way that is detectable to the remote peer, then this amounts to a padding oracle that could be used to decrypt data. In order for this to be exploitable \"non-stitched\" ciphersuites must be in use. Stitched ciphersuites are optimised implementations of certain commonly used ciphersuites. Also the application must call SSL_shutdown() twice even if a protocol error has occurred (applications should not do this but some do anyway). Fixed in OpenSSL 1.0.2r (Affected 1.0.2-1.0.2q).","2019-02-27",0.17139,{"cveId":88,"description":89,"publishedDate":90,"cvssScore":91,"cvssVersion":45,"severity":53,"isKev":17,"epssScore":92},"CVE-2020-10543","Perl before 5.30.3 on 32-bit platforms allows a heap-based buffer overflow because nested regular expression quantifiers have an integer overflow.","2020-06-05",8.2,0.11334,{"cveId":94,"description":95,"publishedDate":90,"cvssScore":96,"cvssVersion":45,"severity":53,"isKev":17,"epssScore":97},"CVE-2020-12723","regcomp.c in Perl before 5.30.3 allows a buffer overflow via a crafted regular expression because of recursive S_study_chunk calls.",7.5,0.05971,[99],{"cveId":49,"description":50,"publishedDate":51,"cvssScore":52,"severity":53,"isKev":4,"epssScore":54,"cisaVulnName":100,"cisaDateAdded":101,"cisaShortDescription":102,"cisaRequiredAction":103},"Sudo Heap-Based Buffer Overflow Vulnerability","2022-04-06","Sudo contains an off-by-one error that can result in a heap-based buffer overflow, which allows for privilege escalation.","Apply updates per vendor instructions.",{"title":105,"metaDescription":106,"keywords":107,"structuredData":108},"Communications Performance Intelligence Center by Oracle - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Communications Performance Intelligence Center by Oracle covering 7 versions with 15 tracked vulnerabilities including 0 critical and 1 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Communications Performance Intelligence Center vulnerabilities, Communications Performance Intelligence Center security, Communications Performance Intelligence Center CVE, Oracle Communications Performance Intelligence Center, Communications Performance Intelligence Center threat intelligence, Oracle security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Communications Performance Intelligence Center KEV, Communications Performance Intelligence Center exploited vulnerabilities",{"@context":109,"@type":110,"name":111,"description":106,"url":112,"manufacturer":113,"applicationCategory":117,"softwareVersion":118,"mainEntity":119},"https:\u002F\u002Fschema.org","SoftwareApplication","Communications Performance Intelligence Center","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Foracle\u002Fcommunications_performance_intelligence_center",{"@type":114,"name":115,"url":116},"Organization","Oracle","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Foracle","Security Software","7 versions tracked",{"@type":120,"name":121,"description":122,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Communications Performance Intelligence Center Security Vulnerabilities","Security vulnerabilities affecting Communications Performance Intelligence Center by Oracle",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":124,"apiVersion":125},"2026-10-17T16:42:33.714Z","3.0",[],{"rows":128,"total":11,"capped":17,"failed":16},[129],{"cveId":49,"name":100,"severity":53,"cvss":52,"added":101,"epss":54,"published":130,"ranges":131,"checked":4,"hits":134,"covers":17},"2021-01-26T21:15:12.987",[132,133],"10.3.0.0.0 to 10.3.0.2.1","10.4.0.1.0 to 10.4.0.3.1",[]]