Oracle Communications_messaging_server

9 CVEs affecting Oracle Communications_messaging_server. Latest disclosed: 2022-01-18. Critical: 2, High: 3.

Top CVEs affecting Oracle Communications_messaging_server
CVESeverityScorePublishedSummary
CVE-2022-23305Critical9.82022-01-18By design, the JDBCAppender in Log4j 1.2.x accepts an SQL statement as a configuration parameter where the values to be inserted are converters from PatternLay…
CVE-2017-5645Critical9.82017-04-17In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially…
CVE-2022-23307High8.82022-01-18CVE-2020-9493 identified a deserialization issue that was present in Apache Chainsaw. Prior to Chainsaw V2.0 Chainsaw was a component of Apache Log4j 1.2.x whe…
CVE-2022-23302High8.82022-01-18JMSSink in all versions of Log4j 1.x is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration or if the…
CVE-2021-4104High7.52021-12-14JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration. The attacker can pro…
CVE-2021-45105Medium5.92021-12-18Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups. This a…
CVE-2016-5455Medium5.32016-07-21Unspecified vulnerability in the Oracle Communications Messaging Server component in Oracle Communications Applications 6.3, 7.0, and 8.0 allows remote attacke…
CVE-2014-79262015-01-22The Regular Expressions package in International Components for Unicode (ICU) 52 before SVN revision 292944, as used in Google Chrome before 40.0.2214.91, allo…
CVE-2014-79232015-01-22The Regular Expressions package in International Components for Unicode (ICU) 52 before SVN revision 292944, as used in Google Chrome before 40.0.2214.91, allo…