[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f57n3zXdtZ_bMmrjZvVg3HhXTyZ7UST5SU7NdgFxiZ1c":3,"g5a-ex:oracle\u002Fcommunications_webrtc_session_controller@*":132,"g5a-family:oracle\u002Fcommunications_webrtc_session_controller":134},{"success":4,"data":5},true,{"product":6,"versions":38,"topVulnerabilitiesByEpss":48,"kevVulnerabilities":109,"seoMetadata":110,"meta":129},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":37},"oracle","communications_webrtc_session_controller",9,17,0,"2021-12-18",[14,18,20,23,26,28,30,32,34],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"7.0",3,false,{"version":19,"cve_count":16,"kev_count":11,"has_kev":17},"7.1",{"version":21,"cve_count":22,"kev_count":11,"has_kev":17},"7.2",6,{"version":24,"cve_count":25,"kev_count":11,"has_kev":17},"7.2.0",1,{"version":27,"cve_count":25,"kev_count":11,"has_kev":17},"7.2.0.0",{"version":29,"cve_count":11,"kev_count":11,"has_kev":17},"7.2.0.1",{"version":31,"cve_count":11,"kev_count":11,"has_kev":17},"7.2.0.1.1",{"version":33,"cve_count":11,"kev_count":11,"has_kev":17},"7.2.0.1.2",{"version":35,"cve_count":36,"kev_count":11,"has_kev":17},"7.2.1",2,"Communications Webrtc Session Controller by Oracle is a technology product with 9 tracked versions and 17 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[39,40,41,42,43,44,45,46,47],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":16,"kev_count":11,"has_kev":17},{"version":21,"cve_count":22,"kev_count":11,"has_kev":17},{"version":24,"cve_count":25,"kev_count":11,"has_kev":17},{"version":27,"cve_count":25,"kev_count":11,"has_kev":17},{"version":29,"cve_count":11,"kev_count":11,"has_kev":17},{"version":31,"cve_count":11,"kev_count":11,"has_kev":17},{"version":33,"cve_count":11,"kev_count":11,"has_kev":17},{"version":35,"cve_count":36,"kev_count":11,"has_kev":17},[49,56,62,70,76,81,87,93,98,103],{"cveId":50,"description":51,"publishedDate":12,"cvssScore":52,"cvssVersion":53,"severity":54,"isKev":17,"epssScore":55},"CVE-2021-45105","Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread Context Map data to cause a denial of service when a crafted string is interpreted. This issue was fixed in Log4j 2.17.0, 2.12.3, and 2.3.1.",5.9,"v3.1","Medium",0.99999,{"cveId":57,"description":58,"publishedDate":59,"cvssScore":60,"cvssVersion":53,"severity":54,"isKev":17,"epssScore":61},"CVE-2020-11022","In jQuery versions greater than or equal to 1.2 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.","2020-04-29",6.1,0.99215,{"cveId":63,"description":64,"publishedDate":65,"cvssScore":66,"cvssVersion":67,"severity":68,"isKev":17,"epssScore":69},"CVE-2015-0235","Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18, allows context-dependent attackers to execute arbitrary code via vectors related to the (1) gethostbyname or (2) gethostbyname2 function, aka \"GHOST.\"","2015-01-28",10,"v2","Critical",0.94558,{"cveId":71,"description":72,"publishedDate":73,"cvssScore":74,"cvssVersion":53,"severity":68,"isKev":17,"epssScore":75},"CVE-2017-5645","In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that, when deserialized, can execute arbitrary code.","2017-04-17",9.8,0.89792,{"cveId":77,"description":78,"publishedDate":79,"cvssScore":60,"cvssVersion":53,"severity":54,"isKev":17,"epssScore":80},"CVE-2019-11358","jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.","2019-04-20",0.8682,{"cveId":82,"description":83,"publishedDate":84,"cvssScore":85,"cvssVersion":53,"severity":54,"isKev":17,"epssScore":86},"CVE-2015-3195","The ASN1_TFLG_COMBINE implementation in crypto\u002Fasn1\u002Ftasn_dec.c in OpenSSL before 0.9.8zh, 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1q, and 1.0.2 before 1.0.2e mishandles errors caused by malformed X509_ATTRIBUTE data, which allows remote attackers to obtain sensitive information from process memory by triggering a decoding failure in a PKCS#7 or CMS application.","2015-12-06",5.3,0.38709,{"cveId":88,"description":89,"publishedDate":90,"cvssScore":60,"cvssVersion":91,"severity":54,"isKev":17,"epssScore":92},"CVE-2015-9251","jQuery before 3.0.0 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text\u002Fjavascript responses to be executed.","2018-01-18","v3.0",0.29726,{"cveId":94,"description":95,"publishedDate":96,"cvssScore":74,"cvssVersion":91,"severity":68,"isKev":17,"epssScore":97},"CVE-2018-8013","In Apache Batik 1.x before 1.10, when deserializing subclass of `AbstractDocument`, the class takes a string from the inputStream as the class name which then use it to call the no-arg constructor of the class. Fix was to check the class type before calling newInstance in deserialization.","2018-05-24",0.18925,{"cveId":99,"description":100,"publishedDate":101,"cvssScore":74,"cvssVersion":91,"severity":68,"isKev":17,"epssScore":102},"CVE-2018-1000120","A buffer overflow exists in curl 7.12.3 to and including curl 7.58.0 in the FTP URL handling that allows an attacker to cause a denial of service or worse.","2018-03-14",0.11608,{"cveId":104,"description":105,"publishedDate":101,"cvssScore":106,"cvssVersion":91,"severity":107,"isKev":17,"epssScore":108},"CVE-2018-1000121","A NULL pointer dereference exists in curl 7.21.0 to and including curl 7.58.0 in the LDAP code that allows an attacker to cause a denial of service",7.5,"High",0.09205,[],{"title":111,"metaDescription":112,"keywords":113,"structuredData":114},"Communications Webrtc Session Controller by Oracle - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Communications Webrtc Session Controller by Oracle covering 9 versions with 17 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Communications Webrtc Session Controller vulnerabilities, Communications Webrtc Session Controller security, Communications Webrtc Session Controller CVE, Oracle Communications Webrtc Session Controller, Communications Webrtc Session Controller threat intelligence, Oracle security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":115,"@type":116,"name":117,"description":112,"url":118,"manufacturer":119,"applicationCategory":123,"softwareVersion":124,"mainEntity":125},"https:\u002F\u002Fschema.org","SoftwareApplication","Communications Webrtc Session Controller","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Foracle\u002Fcommunications_webrtc_session_controller",{"@type":120,"name":121,"url":122},"Organization","Oracle","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Foracle","Security Software","9 versions tracked",{"@type":126,"name":127,"description":128,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Communications Webrtc Session Controller Security Vulnerabilities","Security vulnerabilities affecting Communications Webrtc Session Controller by Oracle",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":130,"apiVersion":131},"2026-10-18T18:11:10.203Z","3.0",{"rows":133,"total":11,"capped":17,"failed":11},[],[]]