[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fmYGgxwDt_XWYbuYZxK3dVvBmgQqb9R40RxjWdJsnYEk":3,"g5a-family:oracle\u002Fcommunications_services_gatekeeper":118,"g5a-ex:oracle\u002Fcommunications_services_gatekeeper@*":119},{"success":4,"data":5},true,{"product":6,"versions":26,"topVulnerabilitiesByEpss":31,"kevVulnerabilities":90,"seoMetadata":96,"meta":115},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":25},"oracle","communications_services_gatekeeper",4,45,1,"2021-12-18",[14,18,20,22],{"version":15,"cve_count":9,"kev_count":16,"has_kev":17},"6.0",0,false,{"version":19,"cve_count":9,"kev_count":16,"has_kev":17},"6.1",{"version":21,"cve_count":16,"kev_count":16,"has_kev":17},"6.1.0.4.0",{"version":23,"cve_count":24,"kev_count":11,"has_kev":4},"7.0",35,"Communications Services Gatekeeper by Oracle is a technology product with 4 tracked versions and 45 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[27,28,29,30],{"version":15,"cve_count":9,"kev_count":16,"has_kev":17},{"version":19,"cve_count":9,"kev_count":16,"has_kev":17},{"version":21,"cve_count":16,"kev_count":16,"has_kev":17},{"version":23,"cve_count":24,"kev_count":11,"has_kev":4},[32,39,45,50,55,62,67,74,78,84],{"cveId":33,"description":34,"publishedDate":12,"cvssScore":35,"cvssVersion":36,"severity":37,"isKev":17,"epssScore":38},"CVE-2021-45105","Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread Context Map data to cause a denial of service when a crafted string is interpreted. This issue was fixed in Log4j 2.17.0, 2.12.3, and 2.3.1.",5.9,"v3.1","Medium",0.99999,{"cveId":40,"description":41,"publishedDate":42,"cvssScore":43,"cvssVersion":36,"severity":37,"isKev":17,"epssScore":44},"CVE-2020-11022","In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.","2020-04-29",6.1,0.99215,{"cveId":46,"description":47,"publishedDate":48,"cvssScore":43,"cvssVersion":36,"severity":37,"isKev":17,"epssScore":49},"CVE-2019-11358","jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.","2019-04-20",0.8682,{"cveId":51,"description":52,"publishedDate":42,"cvssScore":53,"cvssVersion":36,"severity":37,"isKev":4,"epssScore":54},"CVE-2020-11023","In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing \u003Coption> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.",6.9,0.84887,{"cveId":56,"description":57,"publishedDate":58,"cvssScore":59,"cvssVersion":36,"severity":60,"isKev":17,"epssScore":61},"CVE-2018-1270","Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, allow applications to expose STOMP over WebSocket endpoints with a simple, in-memory STOMP broker through the spring-messaging module. A malicious user (or attacker) can craft a message to the broker that can lead to a remote code execution attack.","2018-04-06",9.8,"Critical",0.77476,{"cveId":63,"description":64,"publishedDate":65,"cvssScore":59,"cvssVersion":36,"severity":60,"isKev":17,"epssScore":66},"CVE-2018-1275","Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.16 and older unsupported versions, allow applications to expose STOMP over WebSocket endpoints with a simple, in-memory STOMP broker through the spring-messaging module. A malicious user (or attacker) can craft a message to the broker that can lead to a remote code execution attack. This CVE addresses the partial fix for CVE-2018-1270 in the 4.3.x branch of the Spring Framework.","2018-04-11",0.57414,{"cveId":68,"description":69,"publishedDate":70,"cvssScore":71,"cvssVersion":36,"severity":72,"isKev":17,"epssScore":73},"CVE-2021-28165","In Eclipse Jetty 7.2.2 to 9.4.38, 10.0.0.alpha0 to 10.0.1, and 11.0.0.alpha0 to 11.0.1, CPU usage can reach 100% upon receiving a large invalid TLS frame.","2021-04-01",7.5,"High",0.53861,{"cveId":75,"description":76,"publishedDate":58,"cvssScore":35,"cvssVersion":36,"severity":37,"isKev":17,"epssScore":77},"CVE-2018-1271","Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, allow applications to configure Spring MVC to serve static resources (e.g. CSS, JS, images). When static resources are served from a file system on Windows (as opposed to the classpath, or the ServletContext), a malicious user can send a request using a specially crafted URL that can lead a directory traversal attack.",0.34444,{"cveId":79,"description":80,"publishedDate":81,"cvssScore":43,"cvssVersion":82,"severity":37,"isKev":17,"epssScore":83},"CVE-2015-9251","jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text\u002Fjavascript responses to be executed.","2018-01-18","v3.0",0.29726,{"cveId":85,"description":86,"publishedDate":87,"cvssScore":88,"cvssVersion":36,"severity":72,"isKev":17,"epssScore":89},"CVE-2021-23337","Lodash versions prior to 4.17.21 are vulnerable to Command Injection via the template function.","2021-02-15",7.2,0.21333,[91],{"cveId":51,"description":52,"publishedDate":42,"cvssScore":53,"severity":37,"isKev":4,"epssScore":54,"cisaVulnName":92,"cisaDateAdded":93,"cisaShortDescription":94,"cisaRequiredAction":95},"JQuery Cross-Site Scripting (XSS) Vulnerability","2025-01-23","JQuery contains a persistent cross-site scripting (XSS) vulnerability. When passing maliciously formed, untrusted input enclosed in HTML tags, JQuery's DOM manipulators can execute untrusted code in the context of the user's browser.","Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",{"title":97,"metaDescription":98,"keywords":99,"structuredData":100},"Communications Services Gatekeeper by Oracle - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Communications Services Gatekeeper by Oracle covering 4 versions with 45 tracked vulnerabilities and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Communications Services Gatekeeper vulnerabilities, Communications Services Gatekeeper security, Communications Services Gatekeeper CVE, Oracle Communications Services Gatekeeper, Communications Services Gatekeeper threat intelligence, Oracle security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Communications Services Gatekeeper KEV, Communications Services Gatekeeper exploited vulnerabilities",{"@context":101,"@type":102,"name":103,"description":98,"url":104,"manufacturer":105,"applicationCategory":109,"softwareVersion":110,"mainEntity":111},"https:\u002F\u002Fschema.org","SoftwareApplication","Communications Services Gatekeeper","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Foracle\u002Fcommunications_services_gatekeeper",{"@type":106,"name":107,"url":108},"Organization","Oracle","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Foracle","Security Software","4 versions tracked",{"@type":112,"name":113,"description":114,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Communications Services Gatekeeper Security Vulnerabilities","Security vulnerabilities affecting Communications Services Gatekeeper by Oracle",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":116,"apiVersion":117},"2026-10-17T15:26:20.113Z","3.0",[],{"rows":120,"total":11,"capped":17,"failed":16},[121],{"cveId":51,"name":92,"severity":37,"cvss":53,"added":93,"epss":54,"published":122,"ranges":123,"checked":4,"hits":124,"covers":17},"2020-04-29T21:15:11.743",[23],[]]