[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fYFECcFxtumwXkOQOl0jZAt3oXVZgo0t1tp9zbjUAqX0":3,"g5a-family:oracle\u002Fcommunications_pricing_design_center":132,"g5a-ex:oracle\u002Fcommunications_pricing_design_center@*":133},{"success":4,"data":5},true,{"product":6,"versions":34,"topVulnerabilitiesByEpss":42,"kevVulnerabilities":104,"seoMetadata":110,"meta":129},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":33},"oracle","communications_pricing_design_center",7,41,1,"2022-02-25",[14,18,20,23,26,29,31],{"version":15,"cve_count":11,"kev_count":16,"has_kev":17},"11.1",0,false,{"version":19,"cve_count":11,"kev_count":16,"has_kev":17},"12.0",{"version":21,"cve_count":22,"kev_count":11,"has_kev":4},"12.0.0.3.0",18,{"version":24,"cve_count":25,"kev_count":16,"has_kev":17},"12.0.0.4",3,{"version":27,"cve_count":28,"kev_count":16,"has_kev":17},"12.0.0.4.0",21,{"version":30,"cve_count":25,"kev_count":16,"has_kev":17},"12.0.0.5",{"version":32,"cve_count":25,"kev_count":16,"has_kev":17},"12.0.0.5.0","Communications Pricing Design Center by Oracle is a technology product with 7 tracked versions and 41 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[35,36,37,38,39,40,41],{"version":15,"cve_count":11,"kev_count":16,"has_kev":17},{"version":19,"cve_count":11,"kev_count":16,"has_kev":17},{"version":21,"cve_count":22,"kev_count":11,"has_kev":4},{"version":24,"cve_count":25,"kev_count":16,"has_kev":17},{"version":27,"cve_count":28,"kev_count":16,"has_kev":17},{"version":30,"cve_count":25,"kev_count":16,"has_kev":17},{"version":32,"cve_count":25,"kev_count":16,"has_kev":17},[43,51,58,63,69,74,81,86,92,98],{"cveId":44,"description":45,"publishedDate":46,"cvssScore":47,"cvssVersion":48,"severity":49,"isKev":17,"epssScore":50},"CVE-2021-45105","Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread Context Map data to cause a denial of service when a crafted string is interpreted. This issue was fixed in Log4j 2.17.0, 2.12.3, and 2.3.1.","2021-12-18",5.9,"v3.1","Medium",0.99999,{"cveId":52,"description":53,"publishedDate":54,"cvssScore":55,"cvssVersion":48,"severity":56,"isKev":4,"epssScore":57},"CVE-2020-17530","Forced OGNL evaluation, when evaluated on raw user input in tag attributes, may lead to remote code execution. Affected software : Apache Struts 2.0.0 - Struts 2.5.25.","2020-12-11",9.8,"Critical",0.95931,{"cveId":59,"description":60,"publishedDate":61,"cvssScore":55,"cvssVersion":48,"severity":56,"isKev":17,"epssScore":62},"CVE-2017-5645","In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that, when deserialized, can execute arbitrary code.","2017-04-17",0.89792,{"cveId":64,"description":65,"publishedDate":66,"cvssScore":67,"cvssVersion":48,"severity":49,"isKev":17,"epssScore":68},"CVE-2021-33037","Apache Tomcat 10.0.0-M1 to 10.0.6, 9.0.0.M1 to 9.0.46 and 8.5.0 to 8.5.66 did not correctly parse the HTTP transfer-encoding request header in some circumstances leading to the possibility to request smuggling when used with a reverse proxy. Specifically: - Tomcat incorrectly ignored the transfer encoding header if the client declared it would only accept an HTTP\u002F1.0 response; - Tomcat honoured the identify encoding; and - Tomcat did not ensure that, if present, the chunked encoding was the final encoding.","2021-07-12",5.3,0.74667,{"cveId":70,"description":71,"publishedDate":72,"cvssScore":47,"cvssVersion":48,"severity":49,"isKev":17,"epssScore":73},"CVE-2021-23336","The package python\u002Fcpython from 0 and before 3.6.13, from 3.7.0 and before 3.7.10, from 3.8.0 and before 3.8.8, from 3.9.0 and before 3.9.2 are vulnerable to Web Cache Poisoning via urllib.parse.parse_qsl and urllib.parse.parse_qs by using a vector called parameter cloaking. When the attacker can separate query parameters using a semicolon (;), they can cause a difference in the interpretation of the request between the proxy (running with default configuration) and the server. This can result in malicious requests being cached as completely safe ones, as the proxy would usually not see the semicolon as a separator, and therefore would not include it in a cache key of an unkeyed parameter.","2021-02-15",0.40736,{"cveId":75,"description":76,"publishedDate":77,"cvssScore":78,"cvssVersion":48,"severity":79,"isKev":17,"epssScore":80},"CVE-2019-10086","In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all Java objects. We, however were not using this by default characteristic of the PropertyUtilsBean.","2019-08-20",7.3,"High",0.28384,{"cveId":82,"description":83,"publishedDate":84,"cvssScore":55,"cvssVersion":48,"severity":56,"isKev":17,"epssScore":85},"CVE-2021-3177","Python 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes\u002Fcallproc.c, which may lead to remote code execution in certain Python applications that accept floating-point numbers as untrusted input, as demonstrated by a 1e300 argument to c_double.from_param. This occurs because sprintf is used unsafely.","2021-01-19",0.24216,{"cveId":87,"description":88,"publishedDate":89,"cvssScore":90,"cvssVersion":48,"severity":79,"isKev":17,"epssScore":91},"CVE-2020-25649","A flaw was found in FasterXML Jackson Databind, where it did not have entity expansion secured properly. This flaw allows vulnerability to XML external entity (XXE) attacks. The highest threat from this vulnerability is data integrity.","2020-12-03",7.5,0.17714,{"cveId":93,"description":94,"publishedDate":95,"cvssScore":96,"cvssVersion":48,"severity":79,"isKev":17,"epssScore":97},"CVE-2020-36179","FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to oadd.org.apache.commons.dbcp.cpdsadapter.DriverAdapterCPDS.","2021-01-07",8.1,0.17065,{"cveId":99,"description":100,"publishedDate":101,"cvssScore":102,"cvssVersion":48,"severity":79,"isKev":17,"epssScore":103},"CVE-2020-10543","Perl before 5.30.3 on 32-bit platforms allows a heap-based buffer overflow because nested regular expression quantifiers have an integer overflow.","2020-06-05",8.2,0.11334,[105],{"cveId":52,"description":53,"publishedDate":54,"cvssScore":55,"severity":56,"isKev":4,"epssScore":57,"cisaVulnName":106,"cisaDateAdded":107,"cisaShortDescription":108,"cisaRequiredAction":109},"Apache Struts Remote Code Execution Vulnerability","2021-11-03","Forced Object-Graph Navigation Language (OGNL) evaluation in Apache Struts, when evaluated on raw user input in tag attributes, can lead to remote code execution.","Apply updates per vendor instructions.",{"title":111,"metaDescription":112,"keywords":113,"structuredData":114},"Communications Pricing Design Center by Oracle - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Communications Pricing Design Center by Oracle covering 7 versions with 41 tracked vulnerabilities including 1 critical and 0 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Communications Pricing Design Center vulnerabilities, Communications Pricing Design Center security, Communications Pricing Design Center CVE, Oracle Communications Pricing Design Center, Communications Pricing Design Center threat intelligence, Oracle security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Communications Pricing Design Center KEV, Communications Pricing Design Center exploited vulnerabilities",{"@context":115,"@type":116,"name":117,"description":112,"url":118,"manufacturer":119,"applicationCategory":123,"softwareVersion":124,"mainEntity":125},"https:\u002F\u002Fschema.org","SoftwareApplication","Communications Pricing Design Center","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Foracle\u002Fcommunications_pricing_design_center",{"@type":120,"name":121,"url":122},"Organization","Oracle","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Foracle","Security Software","7 versions tracked",{"@type":126,"name":127,"description":128,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Communications Pricing Design Center Security Vulnerabilities","Security vulnerabilities affecting Communications Pricing Design Center by Oracle",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":130,"apiVersion":131},"2026-10-17T13:25:18.019Z","3.0",[],{"rows":134,"total":11,"capped":17,"failed":16},[135],{"cveId":52,"name":106,"severity":56,"cvss":55,"added":107,"epss":57,"published":136,"ranges":137,"checked":4,"hits":138,"covers":17},"2020-12-11T02:15:10.883",[21],[]]