[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fuSHsvYVeSyPeW0aEBNGrA6B_yjjkO7v3NvHHR5kXCSU":3,"g5a-family:oracle\u002Fcommunications_policy_management":306,"g5a-ex:oracle\u002Fcommunications_policy_management@*":307},{"success":4,"data":5},true,{"product":6,"versions":148,"topVulnerabilitiesByEpss":212,"kevVulnerabilities":272,"seoMetadata":284,"meta":303},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":147},"oracle","communications_policy_management",63,50,3,"2022-04-01",[14,18,20,22,24,26,28,31,33,35,37,39,41,43,45,47,49,51,53,55,58,60,62,64,66,69,71,73,75,77,79,81,83,85,87,89,91,93,95,97,99,101,104,106,108,110,113,115,117,119,121,123,125,127,129,131,133,135,137,139,141,143,145],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.0",0,false,{"version":19,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.1",{"version":21,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.2",{"version":23,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.3",{"version":25,"cve_count":16,"kev_count":16,"has_kev":17},"10.0.4",{"version":27,"cve_count":16,"kev_count":16,"has_kev":17},"10.4.0",{"version":29,"cve_count":30,"kev_count":16,"has_kev":17},"10.4.1",9,{"version":32,"cve_count":16,"kev_count":16,"has_kev":17},"10.4.2",{"version":34,"cve_count":16,"kev_count":16,"has_kev":17},"10.5.0",{"version":36,"cve_count":16,"kev_count":16,"has_kev":17},"10.5.1",{"version":38,"cve_count":16,"kev_count":16,"has_kev":17},"10.5.2",{"version":40,"cve_count":16,"kev_count":16,"has_kev":17},"10.5.3",{"version":42,"cve_count":16,"kev_count":16,"has_kev":17},"10.5.4",{"version":44,"cve_count":16,"kev_count":16,"has_kev":17},"10.5.5",{"version":46,"cve_count":16,"kev_count":16,"has_kev":17},"10.5.6",{"version":48,"cve_count":16,"kev_count":16,"has_kev":17},"11.0",{"version":50,"cve_count":16,"kev_count":16,"has_kev":17},"11.1.0",{"version":52,"cve_count":16,"kev_count":16,"has_kev":17},"11.1.1",{"version":54,"cve_count":16,"kev_count":16,"has_kev":17},"11.1.2",{"version":56,"cve_count":57,"kev_count":16,"has_kev":17},"11.5",2,{"version":59,"cve_count":16,"kev_count":16,"has_kev":17},"11.5.1",{"version":61,"cve_count":16,"kev_count":16,"has_kev":17},"11.5.1.1",{"version":63,"cve_count":16,"kev_count":16,"has_kev":17},"11.5.2",{"version":65,"cve_count":16,"kev_count":16,"has_kev":17},"11.5.2.1",{"version":67,"cve_count":68,"kev_count":16,"has_kev":17},"12.0",1,{"version":70,"cve_count":16,"kev_count":16,"has_kev":17},"12.0.0.1.0",{"version":72,"cve_count":16,"kev_count":16,"has_kev":17},"12.0.0.1.011.5.0",{"version":74,"cve_count":16,"kev_count":16,"has_kev":17},"12.0.0.2.0",{"version":76,"cve_count":16,"kev_count":16,"has_kev":17},"12.0.0.3.0",{"version":78,"cve_count":16,"kev_count":16,"has_kev":17},"12.0.0.4.0",{"version":80,"cve_count":16,"kev_count":16,"has_kev":17},"12.1.0",{"version":82,"cve_count":30,"kev_count":16,"has_kev":17},"12.1.1",{"version":84,"cve_count":16,"kev_count":16,"has_kev":17},"12.1.1.2",{"version":86,"cve_count":16,"kev_count":16,"has_kev":17},"12.1.2",{"version":88,"cve_count":16,"kev_count":16,"has_kev":17},"12.2.0",{"version":90,"cve_count":16,"kev_count":16,"has_kev":17},"12.2.1",{"version":92,"cve_count":16,"kev_count":16,"has_kev":17},"12.2.2",{"version":94,"cve_count":68,"kev_count":16,"has_kev":17},"12.3",{"version":96,"cve_count":68,"kev_count":16,"has_kev":17},"12.3.1",{"version":98,"cve_count":68,"kev_count":16,"has_kev":17},"12.4.0",{"version":100,"cve_count":68,"kev_count":16,"has_kev":17},"12.4.1",{"version":102,"cve_count":103,"kev_count":68,"has_kev":4},"12.5.0",33,{"version":105,"cve_count":68,"kev_count":16,"has_kev":17},"12.5.0.0.0",{"version":107,"cve_count":68,"kev_count":16,"has_kev":17},"12.5.1",{"version":109,"cve_count":16,"kev_count":16,"has_kev":17},"12.5.2",{"version":111,"cve_count":112,"kev_count":68,"has_kev":4},"12.6.0.0.0",4,{"version":114,"cve_count":16,"kev_count":16,"has_kev":17},"8.0.5",{"version":116,"cve_count":16,"kev_count":16,"has_kev":17},"8.0.6",{"version":118,"cve_count":16,"kev_count":16,"has_kev":17},"9.1.10",{"version":120,"cve_count":16,"kev_count":16,"has_kev":17},"9.1.5",{"version":122,"cve_count":16,"kev_count":16,"has_kev":17},"9.1.6",{"version":124,"cve_count":16,"kev_count":16,"has_kev":17},"9.1.7",{"version":126,"cve_count":16,"kev_count":16,"has_kev":17},"9.1.8",{"version":128,"cve_count":16,"kev_count":16,"has_kev":17},"9.1.9",{"version":130,"cve_count":16,"kev_count":16,"has_kev":17},"9.4",{"version":132,"cve_count":16,"kev_count":16,"has_kev":17},"9.7",{"version":134,"cve_count":16,"kev_count":16,"has_kev":17},"9.7.2",{"version":136,"cve_count":68,"kev_count":16,"has_kev":17},"9.7.3",{"version":138,"cve_count":16,"kev_count":16,"has_kev":17},"9.7.4",{"version":140,"cve_count":16,"kev_count":16,"has_kev":17},"9.8",{"version":142,"cve_count":16,"kev_count":16,"has_kev":17},"9.9",{"version":144,"cve_count":30,"kev_count":16,"has_kev":17},"9.9.1",{"version":146,"cve_count":16,"kev_count":16,"has_kev":17},"9.9.2","Communications Policy Management by Oracle is a technology product with 63 tracked versions and 50 known security vulnerabilities including 3 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211],{"version":15,"cve_count":16,"kev_count":16,"has_kev":17},{"version":19,"cve_count":16,"kev_count":16,"has_kev":17},{"version":21,"cve_count":16,"kev_count":16,"has_kev":17},{"version":23,"cve_count":16,"kev_count":16,"has_kev":17},{"version":25,"cve_count":16,"kev_count":16,"has_kev":17},{"version":27,"cve_count":16,"kev_count":16,"has_kev":17},{"version":29,"cve_count":30,"kev_count":16,"has_kev":17},{"version":32,"cve_count":16,"kev_count":16,"has_kev":17},{"version":34,"cve_count":16,"kev_count":16,"has_kev":17},{"version":36,"cve_count":16,"kev_count":16,"has_kev":17},{"version":38,"cve_count":16,"kev_count":16,"has_kev":17},{"version":40,"cve_count":16,"kev_count":16,"has_kev":17},{"version":42,"cve_count":16,"kev_count":16,"has_kev":17},{"version":44,"cve_count":16,"kev_count":16,"has_kev":17},{"version":46,"cve_count":16,"kev_count":16,"has_kev":17},{"version":48,"cve_count":16,"kev_count":16,"has_kev":17},{"version":50,"cve_count":16,"kev_count":16,"has_kev":17},{"version":52,"cve_count":16,"kev_count":16,"has_kev":17},{"version":54,"cve_count":16,"kev_count":16,"has_kev":17},{"version":56,"cve_count":57,"kev_count":16,"has_kev":17},{"version":59,"cve_count":16,"kev_count":16,"has_kev":17},{"version":61,"cve_count":16,"kev_count":16,"has_kev":17},{"version":63,"cve_count":16,"kev_count":16,"has_kev":17},{"version":65,"cve_count":16,"kev_count":16,"has_kev":17},{"version":67,"cve_count":68,"kev_count":16,"has_kev":17},{"version":70,"cve_count":16,"kev_count":16,"has_kev":17},{"version":72,"cve_count":16,"kev_count":16,"has_kev":17},{"version":74,"cve_count":16,"kev_count":16,"has_kev":17},{"version":76,"cve_count":16,"kev_count":16,"has_kev":17},{"version":78,"cve_count":16,"kev_count":16,"has_kev":17},{"version":80,"cve_count":16,"kev_count":16,"has_kev":17},{"version":82,"cve_count":30,"kev_count":16,"has_kev":17},{"version":84,"cve_count":16,"kev_count":16,"has_kev":17},{"version":86,"cve_count":16,"kev_count":16,"has_kev":17},{"version":88,"cve_count":16,"kev_count":16,"has_kev":17},{"version":90,"cve_count":16,"kev_count":16,"has_kev":17},{"version":92,"cve_count":16,"kev_count":16,"has_kev":17},{"version":94,"cve_count":68,"kev_count":16,"has_kev":17},{"version":96,"cve_count":68,"kev_count":16,"has_kev":17},{"version":98,"cve_count":68,"kev_count":16,"has_kev":17},{"version":100,"cve_count":68,"kev_count":16,"has_kev":17},{"version":102,"cve_count":103,"kev_count":68,"has_kev":4},{"version":105,"cve_count":68,"kev_count":16,"has_kev":17},{"version":107,"cve_count":68,"kev_count":16,"has_kev":17},{"version":109,"cve_count":16,"kev_count":16,"has_kev":17},{"version":111,"cve_count":112,"kev_count":68,"has_kev":4},{"version":114,"cve_count":16,"kev_count":16,"has_kev":17},{"version":116,"cve_count":16,"kev_count":16,"has_kev":17},{"version":118,"cve_count":16,"kev_count":16,"has_kev":17},{"version":120,"cve_count":16,"kev_count":16,"has_kev":17},{"version":122,"cve_count":16,"kev_count":16,"has_kev":17},{"version":124,"cve_count":16,"kev_count":16,"has_kev":17},{"version":126,"cve_count":16,"kev_count":16,"has_kev":17},{"version":128,"cve_count":16,"kev_count":16,"has_kev":17},{"version":130,"cve_count":16,"kev_count":16,"has_kev":17},{"version":132,"cve_count":16,"kev_count":16,"has_kev":17},{"version":134,"cve_count":16,"kev_count":16,"has_kev":17},{"version":136,"cve_count":68,"kev_count":16,"has_kev":17},{"version":138,"cve_count":16,"kev_count":16,"has_kev":17},{"version":140,"cve_count":16,"kev_count":16,"has_kev":17},{"version":142,"cve_count":16,"kev_count":16,"has_kev":17},{"version":144,"cve_count":30,"kev_count":16,"has_kev":17},{"version":146,"cve_count":16,"kev_count":16,"has_kev":17},[213,221,227,232,237,244,250,256,263,268],{"cveId":214,"description":215,"publishedDate":216,"cvssScore":217,"cvssVersion":218,"severity":219,"isKev":4,"epssScore":220},"CVE-2018-11776","Apache Struts versions 2.3 to 2.3.34 and 2.5 to 2.5.16 suffer from possible Remote Code Execution when alwaysSelectFullNamespace is true (either by user or a plugin like Convention Plugin) and then: results are used with no namespace and in same time, its upper package have no or wildcard namespace and similar to results, same possibility when using url tag which doesn't have value and action set and in same time, its upper package have no or wildcard namespace.","2018-08-22",8.1,"v3.1","High",0.99991,{"cveId":222,"description":223,"publishedDate":12,"cvssScore":224,"cvssVersion":218,"severity":225,"isKev":4,"epssScore":226},"CVE-2022-22965","A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific exploit requires the application to run on Tomcat as a WAR deployment. If the application is deployed as a Spring Boot executable jar, i.e. the default, it is not vulnerable to the exploit. However, the nature of the vulnerability is more general, and there may be other ways to exploit it.",9.8,"Critical",0.99638,{"cveId":228,"description":229,"publishedDate":230,"cvssScore":224,"cvssVersion":218,"severity":225,"isKev":17,"epssScore":231},"CVE-2019-0230","Apache Struts 2.0.0 to 2.5.20 forced double OGNL evaluation, when evaluated on raw user input in tag attributes, may lead to remote code execution.","2020-09-14",0.96946,{"cveId":233,"description":234,"publishedDate":235,"cvssScore":224,"cvssVersion":218,"severity":225,"isKev":4,"epssScore":236},"CVE-2020-17530","Forced OGNL evaluation, when evaluated on raw user input in tag attributes, may lead to remote code execution. Affected software : Apache Struts 2.0.0 - Struts 2.5.25.","2020-12-11",0.95931,{"cveId":238,"description":239,"publishedDate":240,"cvssScore":241,"cvssVersion":242,"severity":225,"isKev":17,"epssScore":243},"CVE-2015-0235","Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18, allows context-dependent attackers to execute arbitrary code via vectors related to the (1) gethostbyname or (2) gethostbyname2 function, aka \"GHOST.\"","2015-01-28",10,"v2",0.94558,{"cveId":245,"description":246,"publishedDate":247,"cvssScore":248,"cvssVersion":218,"severity":219,"isKev":17,"epssScore":249},"CVE-2020-5398","In Spring Framework, versions 5.2.x prior to 5.2.3, versions 5.1.x prior to 5.1.13, and versions 5.0.x prior to 5.0.16, an application is vulnerable to a reflected file download (RFD) attack when it sets a \"Content-Disposition\" header in the response where the filename attribute is derived from user supplied input.","2020-01-17",7.5,0.88768,{"cveId":251,"description":252,"publishedDate":253,"cvssScore":254,"cvssVersion":218,"severity":219,"isKev":17,"epssScore":255},"CVE-2020-26217","XStream before version 1.4.14 is vulnerable to Remote Code Execution.The vulnerability may allow a remote attacker to run arbitrary shell commands only by manipulating the processed input stream. Only users who rely on blocklists are affected. Anyone using XStream's Security Framework allowlist is not affected. The linked advisory provides code workarounds for users who cannot upgrade. The issue is fixed in version 1.4.14.","2020-11-16",8,0.85001,{"cveId":257,"description":258,"publishedDate":259,"cvssScore":260,"cvssVersion":218,"severity":261,"isKev":17,"epssScore":262},"CVE-2021-21351","XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types. If you rely on XStream's default blacklist of the Security Framework, you will have to use at least version 1.4.16.","2021-03-23",5.4,"Medium",0.82136,{"cveId":264,"description":265,"publishedDate":259,"cvssScore":266,"cvssVersion":218,"severity":261,"isKev":17,"epssScore":267},"CVE-2021-21346","XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker to load and execute arbitrary code from a remote host only by manipulating the processed input stream. No user is affected, who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types. If you rely on XStream's default blacklist of the Security Framework, you will have to use at least version 1.4.16.",6.1,0.76367,{"cveId":269,"description":265,"publishedDate":259,"cvssScore":270,"cvssVersion":218,"severity":261,"isKev":17,"epssScore":271},"CVE-2021-21344",5.3,0.7598,[273,278,282],{"cveId":222,"description":223,"publishedDate":12,"cvssScore":224,"severity":225,"isKev":4,"epssScore":226,"cisaVulnName":274,"cisaDateAdded":275,"cisaShortDescription":276,"cisaRequiredAction":277},"Spring Framework JDK 9+ Remote Code Execution Vulnerability","2022-04-04","Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding.","Apply updates per vendor instructions.",{"cveId":214,"description":215,"publishedDate":216,"cvssScore":217,"severity":219,"isKev":4,"epssScore":220,"cisaVulnName":279,"cisaDateAdded":280,"cisaShortDescription":281,"cisaRequiredAction":277},"Apache Struts Remote Code Execution Vulnerability","2021-11-03","Apache Struts contains a vulnerability that allows for remote code execution under two circumstances. One, where the alwaysSelectFullNamespace option is true and the value isn't set for a result defined in underlying configurations and in same time, its upper package configuration have no or wildcard namespace.  Or, using URL tag which doesn't have value and action set and in same time, its upper package configuration have no or wildcard namespace.",{"cveId":233,"description":234,"publishedDate":235,"cvssScore":224,"severity":225,"isKev":4,"epssScore":236,"cisaVulnName":279,"cisaDateAdded":280,"cisaShortDescription":283,"cisaRequiredAction":277},"Forced Object-Graph Navigation Language (OGNL) evaluation in Apache Struts, when evaluated on raw user input in tag attributes, can lead to remote code execution.",{"title":285,"metaDescription":286,"keywords":287,"structuredData":288},"Communications Policy Management by Oracle - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Communications Policy Management by Oracle covering 63 versions with 50 tracked vulnerabilities including 2 critical and 1 high-severity issues and 3 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Communications Policy Management vulnerabilities, Communications Policy Management security, Communications Policy Management CVE, Oracle Communications Policy Management, Communications Policy Management threat intelligence, Oracle security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Communications Policy Management KEV, Communications Policy Management exploited vulnerabilities",{"@context":289,"@type":290,"name":291,"description":286,"url":292,"manufacturer":293,"applicationCategory":297,"softwareVersion":298,"mainEntity":299},"https:\u002F\u002Fschema.org","SoftwareApplication","Communications Policy Management","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Foracle\u002Fcommunications_policy_management",{"@type":294,"name":295,"url":296},"Organization","Oracle","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Foracle","Security Software","63 versions tracked",{"@type":300,"name":301,"description":302,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Communications Policy Management Security Vulnerabilities","Security vulnerabilities affecting Communications Policy Management by Oracle",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":304,"apiVersion":305},"2026-10-18T13:19:28.880Z","3.0",[],{"rows":308,"total":11,"capped":17,"failed":16},[309,313,318],{"cveId":222,"name":274,"severity":225,"cvss":224,"added":275,"epss":226,"published":310,"ranges":311,"checked":4,"hits":312,"covers":17},"2022-04-01T23:15:13.87",[111],[],{"cveId":214,"name":279,"severity":219,"cvss":217,"added":280,"epss":220,"published":314,"ranges":315,"checked":4,"hits":317,"covers":17},"2018-08-22T13:29:00.753",[316],"before 12.5.0",[],{"cveId":233,"name":279,"severity":225,"cvss":224,"added":280,"epss":236,"published":319,"ranges":320,"checked":4,"hits":321,"covers":17},"2020-12-11T02:15:10.883",[102],[]]