[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fuh_xy7TyeBftLY7Dd11azFBTi-Gm_HMM3daMXB2WZoc":3,"g5a-family:oracle\u002Fcommunications_session_report_manager":149,"g5a-ex:oracle\u002Fcommunications_session_report_manager@*":150},{"success":4,"data":5},true,{"product":6,"versions":41,"topVulnerabilitiesByEpss":52,"kevVulnerabilities":111,"seoMetadata":127,"meta":146},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":40},"oracle","communications_session_report_manager",10,69,2,"2022-01-24",[14,18,22,24,27,29,32,34,36,38],{"version":15,"cve_count":16,"kev_count":17,"has_kev":4},"8.0.0",7,1,{"version":19,"cve_count":20,"kev_count":20,"has_kev":21},"8.0.0.0",0,false,{"version":23,"cve_count":16,"kev_count":17,"has_kev":4},"8.1.0",{"version":25,"cve_count":26,"kev_count":11,"has_kev":4},"8.1.1",15,{"version":28,"cve_count":26,"kev_count":11,"has_kev":4},"8.2.0",{"version":30,"cve_count":31,"kev_count":17,"has_kev":4},"8.2.1",9,{"version":33,"cve_count":20,"kev_count":20,"has_kev":21},"8.2.2",{"version":35,"cve_count":20,"kev_count":20,"has_kev":21},"8.2.2.1",{"version":37,"cve_count":20,"kev_count":20,"has_kev":21},"8.2.4.0",{"version":39,"cve_count":20,"kev_count":20,"has_kev":21},"8.2.5.0","Communications Session Report Manager by Oracle is a technology product with 10 tracked versions and 69 known security vulnerabilities including 2 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[42,43,44,45,46,47,48,49,50,51],{"version":15,"cve_count":16,"kev_count":17,"has_kev":4},{"version":19,"cve_count":20,"kev_count":20,"has_kev":21},{"version":23,"cve_count":16,"kev_count":17,"has_kev":4},{"version":25,"cve_count":26,"kev_count":11,"has_kev":4},{"version":28,"cve_count":26,"kev_count":11,"has_kev":4},{"version":30,"cve_count":31,"kev_count":17,"has_kev":4},{"version":33,"cve_count":20,"kev_count":20,"has_kev":21},{"version":35,"cve_count":20,"kev_count":20,"has_kev":21},{"version":37,"cve_count":20,"kev_count":20,"has_kev":21},{"version":39,"cve_count":20,"kev_count":20,"has_kev":21},[53,61,68,75,80,84,89,95,101,106],{"cveId":54,"description":55,"publishedDate":56,"cvssScore":57,"cvssVersion":58,"severity":59,"isKev":21,"epssScore":60},"CVE-2021-45105","Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread Context Map data to cause a denial of service when a crafted string is interpreted. This issue was fixed in Log4j 2.17.0, 2.12.3, and 2.3.1.","2021-12-18",5.9,"v3.1","Medium",0.99999,{"cveId":62,"description":63,"publishedDate":64,"cvssScore":65,"cvssVersion":58,"severity":66,"isKev":21,"epssScore":67},"CVE-2021-44790","A carefully crafted request body can cause a buffer overflow in the mod_lua multipart parser (r:parsebody() called from Lua scripts). The Apache httpd team is not aware of an exploit for the vulnerabilty though it might be possible to craft one. This issue affects Apache HTTP Server 2.4.51 and earlier.","2021-12-20",9.8,"Critical",0.9684,{"cveId":69,"description":70,"publishedDate":71,"cvssScore":72,"cvssVersion":58,"severity":73,"isKev":21,"epssScore":74},"CVE-2019-0227","A Server Side Request Forgery (SSRF) vulnerability affected the Apache Axis 1.4 distribution that was last released in 2006. Security and bug commits commits continue in the projects Axis 1.x Subversion repository, legacy users are encouraged to build from source. The successor to Axis 1.x is Axis2, the latest version is 1.7.9 and is not vulnerable to this issue.","2019-05-01",7.5,"High",0.9194,{"cveId":76,"description":77,"publishedDate":78,"cvssScore":65,"cvssVersion":58,"severity":66,"isKev":21,"epssScore":79},"CVE-2020-11984","Apache HTTP server 2.4.32 to 2.4.44 mod_proxy_uwsgi info disclosure and possible RCE","2020-08-07",0.90039,{"cveId":81,"description":82,"publishedDate":78,"cvssScore":72,"cvssVersion":58,"severity":73,"isKev":21,"epssScore":83},"CVE-2020-9490","Apache HTTP Server versions 2.4.20 to 2.4.43. A specially crafted value for the 'Cache-Digest' header in a HTTP\u002F2 request would result in a crash when the server actually tries to HTTP\u002F2 PUSH a resource afterwards. Configuring the HTTP\u002F2 feature via \"H2Push off\" will mitigate this vulnerability for unpatched servers.",0.88844,{"cveId":85,"description":86,"publishedDate":87,"cvssScore":72,"cvssVersion":58,"severity":73,"isKev":21,"epssScore":88},"CVE-2020-5398","In Spring Framework, versions 5.2.x prior to 5.2.3, versions 5.1.x prior to 5.1.13, and versions 5.0.x prior to 5.0.16, an application is vulnerable to a reflected file download (RFD) attack when it sets a \"Content-Disposition\" header in the response where the filename attribute is derived from user supplied input.","2020-01-17",0.88768,{"cveId":90,"description":91,"publishedDate":92,"cvssScore":93,"cvssVersion":58,"severity":59,"isKev":21,"epssScore":94},"CVE-2019-11358","jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.","2019-04-20",6.1,0.8682,{"cveId":96,"description":97,"publishedDate":98,"cvssScore":99,"cvssVersion":58,"severity":59,"isKev":4,"epssScore":100},"CVE-2020-11023","In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing \u003Coption> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.","2020-04-29",6.9,0.84887,{"cveId":102,"description":103,"publishedDate":64,"cvssScore":104,"cvssVersion":58,"severity":73,"isKev":21,"epssScore":105},"CVE-2021-44224","A crafted URI sent to httpd configured as a forward proxy (ProxyRequests on) can cause a crash (NULL pointer dereference) or, for configurations mixing forward and reverse proxy declarations, can allow for requests to be directed to a declared Unix Domain Socket endpoint (Server Side Request Forgery). This issue affects Apache HTTP Server 2.4.7 up to 2.4.51 (included).",8.2,0.82295,{"cveId":107,"description":108,"publishedDate":109,"cvssScore":93,"cvssVersion":58,"severity":59,"isKev":21,"epssScore":110},"CVE-2020-13947","An instance of a cross-site scripting vulnerability was identified to be present in the web based administration console on the message.jsp page of Apache ActiveMQ versions 5.15.12 through 5.16.0.","2021-02-08",0.78972,[112,117],{"cveId":96,"description":97,"publishedDate":98,"cvssScore":99,"severity":59,"isKev":4,"epssScore":100,"cisaVulnName":113,"cisaDateAdded":114,"cisaShortDescription":115,"cisaRequiredAction":116},"JQuery Cross-Site Scripting (XSS) Vulnerability","2025-01-23","JQuery contains a persistent cross-site scripting (XSS) vulnerability. When passing maliciously formed, untrusted input enclosed in HTML tags, JQuery's DOM manipulators can execute untrusted code in the context of the user's browser.","Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",{"cveId":118,"description":119,"publishedDate":120,"cvssScore":121,"severity":73,"isKev":4,"epssScore":122,"cisaVulnName":123,"cisaDateAdded":124,"cisaShortDescription":125,"cisaRequiredAction":126},"CVE-2019-0211","In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privileged child processes or threads (including scripts executed by an in-process scripting interpreter) could execute arbitrary code with the privileges of the parent process (usually root) by manipulating the scoreboard. Non-Unix systems are not affected.","2019-04-08",7.8,0.65005,"Apache HTTP Server Privilege Escalation Vulnerability","2021-11-03","Apache HTTP Server, with MPM event, worker or prefork, code executing in less-privileged child processes or threads (including scripts executed by an in-process scripting interpreter) could execute code with the privileges of the parent process (usually root) by manipulating the scoreboard.","Apply updates per vendor instructions.",{"title":128,"metaDescription":129,"keywords":130,"structuredData":131},"Communications Session Report Manager by Oracle - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Communications Session Report Manager by Oracle covering 10 versions with 69 tracked vulnerabilities including 0 critical and 1 high-severity issues and 2 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Communications Session Report Manager vulnerabilities, Communications Session Report Manager security, Communications Session Report Manager CVE, Oracle Communications Session Report Manager, Communications Session Report Manager threat intelligence, Oracle security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Communications Session Report Manager KEV, Communications Session Report Manager exploited vulnerabilities",{"@context":132,"@type":133,"name":134,"description":129,"url":135,"manufacturer":136,"applicationCategory":140,"softwareVersion":141,"mainEntity":142},"https:\u002F\u002Fschema.org","SoftwareApplication","Communications Session Report Manager","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Foracle\u002Fcommunications_session_report_manager",{"@type":137,"name":138,"url":139},"Organization","Oracle","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Foracle","Security Software","10 versions tracked",{"@type":143,"name":144,"description":145,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Communications Session Report Manager Security Vulnerabilities","Security vulnerabilities affecting Communications Session Report Manager by Oracle",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":147,"apiVersion":148},"2026-10-17T12:56:23.084Z","3.0",[],{"rows":151,"total":11,"capped":21,"failed":20},[152,156],{"cveId":96,"name":113,"severity":59,"cvss":99,"added":114,"epss":100,"published":153,"ranges":154,"checked":4,"hits":155,"covers":21},"2020-04-29T21:15:11.743",[25,28,30],[],{"cveId":118,"name":123,"severity":73,"cvss":121,"added":124,"epss":122,"published":157,"ranges":158,"checked":4,"hits":159,"covers":21},"2019-04-08T22:29:00.387",[15,23,25,28],[]]